App security

You can scan your device for malicious apps or files.

Sophos Intercept X for Mobile scans the device for malware and reports any malicious or potentially unwanted apps. The scanner uses an online lookup to check apps against the latest threat data in the SophosLabs cloud database as well as a built-in full-featured scan engine for improved detection whether the device is online or offline. The antivirus data is constantly updated by SophosLabs, who analyze Android threats 24 hours a day.

Perform scans

Sophos Intercept X for Mobile scans apps when they are installed. Additionally, you can configure scheduled scans and run manual scans.

• To configure scheduled scans: In the app settings, select Scheduled scans and then select a scan interval in Scheduled scan interval. You can also configure which parts of the device are scanned and which types of apps are reported.

• To run a manual scan: On the App security page, select Show scan details and then Start.

View scan results

On the App security page, an overview of the scan results is displayed under App security issues.

• To view the individual issues, select Show scan details.

• To view even more details about an issue, select an app listed under Threats and PUAs to open its Object details page.

On the Object details page, you can do the following:

• View how the app was installed and which permissions it requested.
• View a threat description.
• Open a web page with detailed threat information in your browser.
• Uninstall the app.
• Allow the app.

Scan APK files

You can scan Android package (APK) files for threats before installing them.

To scan an APK file, do as follows:

1. Select the APK file in your file manager app.
2. Select the command or button for sharing the APK file.
3. Select Scan with Intercept X.

Sophos Intercept X for Mobile scans the APK file for threats and shows the result.