Device Trust Scan

iPhone security audit

See how well your iPhone is protected

28 checks in 6 categories, one score and a step-by-step plan — with no account and no ads.

Coming soon to the App StoreHow it works

iOS 16.0 and later5 languagesNo data collection

Cyber rating

One number instead of a dozen scattered settings

Every check has a weight — Wi-Fi encryption counts for more than a SIM PIN. The score is the weighted share of everything that passed, so it moves when something that matters changes.

Three verdicts

The app says the result in words, not just in numbers.

  • 80–100Well protected
  • 50–79Could be safer
  • 0–49Needs attention

What gets checked

28 checks across six areas

Some checks are automatic — the app reads the state of the system itself. Others are a guided checklist: iOS does not let apps read those settings, so you answer, and your answers are saved and counted in the score.

Wi-Fi and network

Encryption of the current network (WPA3), active VPN, Private Relay, private Wi-Fi address, encrypted DNS.

5 checks

Passwords

Reused and weak passwords, two-factor authentication, passwords you have not changed in a long time.

4 checks

Email

Whether your address appears in known data breaches, plus monitoring for new ones.

1 check

Device

Passcode, Face ID or Touch ID, Find My, encrypted iCloud backups, automatic updates, SIM PIN, Lockdown Mode.

7 checks

Safari

Cross-site tracking prevention, fraudulent website warning, IP address hiding, cookie policy.

4 checks

Privacy

Permissions you have granted to apps: camera, microphone, photos, contacts, location, Bluetooth, local network.

7 checks

Email in breaches

Find out where your address has already leaked

Add an address once. The app compares it against a database of known breaches and keeps watching in the background.

  1. You add an address — one or several, whichever you use for important accounts.

  2. The app checks it against known breaches — and shows the service, the date, the size of the breach and the types of data exposed.

  3. You get a notification about new ones — saved addresses are re-checked in the background, so a new breach does not go unnoticed.

The check runs through the open XposedOrNot service (api.xposedornot.com): at that moment, and only at that moment, your email address is sent to it. The app never asks for your passwords and never stores them.

Action plan

Not just a diagnosis — the next step

Every check that did not pass turns into a task with instructions and a direct link to the right screen in iOS Settings.

Turn on Lockdown Mode where it makes sense

What it restricts, who actually needs it, and how to switch it back off.

Device · Settings

Replace 3 reused passwords

Which accounts share a password and which to change first.

Passwords · Priority

Turn on encrypted DNS

Why unencrypted DNS reveals which sites you visit, and how to fix it in two taps.

Wi-Fi · Settings

Confirm: is Find My on?

iOS does not let apps read this. Answer once and the score updates.

Device · Needs your answer

Also inside

Four tools that come with the audit

Everything works offline and stays on the device.

Password generator

8 to 32 characters, switches for capitals, digits and symbols, entropy in bits calculated as you type.

PDF report

An A4 report with every category, status and the score — save it or send it on.

Home Screen widget

Two sizes, showing the current rating and how many items are left to fix.

Reminders

Local notifications when it is time to run the audit again.

Privacy

Four plain facts

This is a security product, so the claims here are deliberately precise — including the one exception.

No account

Nothing to sign up for

There is no registration and no server behind the product. Nothing to log in to, nothing to be locked out of.

No analytics

No trackers, no ads

The build contains no analytics, advertising or tracking SDKs. Nobody counts your taps.

On device

Audit results stay on your iPhone

They are kept locally and in the app group group.sv.Startnap, which is what lets the widget show your score.

One request

A single external request, and it is named

Checking an address for breaches sends it to XposedOrNot (api.xposedornot.com). That is the only time anything leaves your device — nothing else is sent anywhere.

Read the full Privacy Policy

  • English
  • Русский
  • Español
  • Deutsch
  • Français

Fully translated, including the wording of all 28 checks and every instruction.

Find out where your iPhone stands

The audit takes under a minute. The plan afterwards is yours to work through at your own pace.

Coming soon to the App Store

iOS 16.0 and lateriPhone onlyFree