{
  "app": {
    "app_id": "com.google.android.GoogleCamera",
    "title": "Pixel Camera",
    "version": "9.8.102.748116395.16"
  },
  "scan": {
    "scan_id": "b798f6c0-1656-4572-9dd1-2aed89cbc320",
    "grade": "A",
    "score": 94,
    "scanned_at": "2026-10-09T05:07:17.205Z"
  },
  "analysis": {
    "issues": [],
    "stages": {
      "pii": "complete",
      "sbom": "complete",
      "signing": "certificate_parsed",
      "strings": "complete",
      "manifest": "complete"
    },
    "status": "complete",
    "grading": {
      "policy": "static-coverage-v1",
      "blockers": [],
      "eligible": true
    },
    "timings_ms": {
      "total": 65265.558,
      "harvest": 30776.84700000004,
      "detectors": 31979.306999999826
    },
    "bytes_total": 681125132,
    "bytes_scanned": 681125132,
    "bytes_skipped": 0,
    "files_processed": 2295,
    "coverage_version": 2,
    "string_encodings": [
      "ascii",
      "utf16le"
    ],
    "signature_validation": "not_performed"
  },
  "provenance": {
    "mode": "static",
    "artifacts": [
      {
        "name": "base.apk",
        "sha256": "6fb1a884fcec0ffa42b6b7ba5f242e9cc903f8b762d02a224d2fe30cb2f875f7"
      },
      {
        "name": "all_in_feature_module_tegu.apk",
        "sha256": "f16e110a79968c987c22fd23180ede162279a5c19837e876279b93f9136a0886"
      },
      {
        "name": "camera_vkp_asset_module.apk",
        "sha256": "f139ef62f8cf51edbb2f1db17f4c183d3e34b376046e7b1a3a6cfba1222ffc05"
      },
      {
        "name": "deeprestore_split_module_p24.apk",
        "sha256": "e1932ebe51ecdee2a8af0b023ccb4051c25c0d59a0d9a529ea947275e18ba268"
      },
      {
        "name": "hdrplus_asset_module_tegu.apk",
        "sha256": "1ae4d3d65b0af0e04caa6c932cbabc6e4754ccbe281ea206f52deecf1ac12c6a"
      },
      {
        "name": "hotshot_split_module.apk",
        "sha256": "bc032bfbd373b37cff649fa9378eb54bb14d3ed9ebe00d1f2cb2252964692fde"
      },
      {
        "name": "imax_split_module.apk",
        "sha256": "0977937904f5d636a3002104618d49cfce0527cab3591131b44defd317ee9554"
      },
      {
        "name": "l2l_assets_p24_module.apk",
        "sha256": "6615f195ae725320714b78495cf5c98da8dc1943a91bf45130975f3d2aa28e19"
      },
      {
        "name": "lightcycle_asset_module.apk",
        "sha256": "8bfe9ff5dd7df1b336c22c18eb2b145a66f16c11b4ef505d03bb14c922d2d292"
      },
      {
        "name": "motion_blur_asset_module_p24.apk",
        "sha256": "40f30bb43e5eea8143352d636f98e594dd87f533801a5ece299f19b28ecb45db"
      },
      {
        "name": "portrait_asset_module.apk",
        "sha256": "712feff6aad5688d98696769ce0f7b60cbddd6b06b5adcb684294e9366ea76a8"
      },
      {
        "name": "portrait_asset_module_tegu.apk",
        "sha256": "078e473d9c5a4ea85525a37881ca3f7db98697ba68e5fe51703256dac33bd3c4"
      },
      {
        "name": "roi_tracking_asset_module_p24.apk",
        "sha256": "f6c0c58a9d449d2b2b1b09d7f2830d18ab781180c1cf43812881e8f0d4b550ce"
      },
      {
        "name": "smartcapture_split_module.apk",
        "sha256": "cbedd0778504c14f881767898f3bc458dda8e1ef73394cbcfa4ce4a0597eaab2"
      },
      {
        "name": "smartzoom_split_module.apk",
        "sha256": "af977a38d6a67f31db037b41215881de0f1577f6e966719d4881b11fb961de1d"
      },
      {
        "name": "startup_jni_split_module.apk",
        "sha256": "ebec7f923999b1e6bdff118ea5b8f4c40a398aac11e1a0af88d6928925deb628"
      }
    ],
    "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
  },
  "apk_sha256": "6fb1a884fcec0ffa42b6b7ba5f242e9cc903f8b762d02a224d2fe30cb2f875f7",
  "schema": "apk-scanner.coverage/v1",
  "framework": "OWASP MASVS v2",
  "disclaimer": "Static, metadata-only analysis. Each control is scored evidence-for / gap-signal / requires-manual-testing. This is evidence toward a MASVS assessment, NOT a certification — apk-scanner.com is not an authorized assessment lab. Absence of a static finding does not prove a control passes.",
  "rows": [
    {
      "control": "MASVS-STORAGE-1",
      "category": "STORAGE",
      "title": "The app securely stores sensitive data.",
      "static": "partial",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 37,
          "key": "allow_backup",
          "title": "Application data is backup-enabled",
          "severity": "info",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            530,
            312
          ]
        }
      ]
    },
    {
      "control": "MASVS-STORAGE-2",
      "category": "STORAGE",
      "title": "The app prevents leakage of sensitive data.",
      "static": "partial",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 37,
          "key": "allow_backup",
          "title": "Application data is backup-enabled",
          "severity": "info",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            530,
            312
          ]
        }
      ]
    },
    {
      "control": "MASVS-CRYPTO-1",
      "category": "CRYPTO",
      "title": "The app employs current strong cryptography and uses it according to best practices.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CRYPTO-2",
      "category": "CRYPTO",
      "title": "The app performs key management according to best practices.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-1",
      "category": "AUTH",
      "title": "The app uses secure authentication and authorization protocols.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-2",
      "category": "AUTH",
      "title": "The app performs local authentication securely.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-3",
      "category": "AUTH",
      "title": "The app secures sensitive operations with additional authentication.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-NETWORK-1",
      "category": "NETWORK",
      "title": "The app secures all network traffic according to current best practices.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-NETWORK-2",
      "category": "NETWORK",
      "title": "The app verifies the identity of the remote endpoint (e.g. certificate pinning).",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-1",
      "category": "PLATFORM",
      "title": "The app uses IPC mechanisms securely.",
      "static": "yes",
      "status": "gap-detected",
      "count": 4,
      "findings": [
        {
          "finding_type": 35,
          "key": "exported_provider",
          "title": "Exported content provider without permission",
          "severity": "medium",
          "verified": false,
          "relationship": "gap-confirmed",
          "cwe": [
            926,
            284
          ]
        },
        {
          "finding_type": 35,
          "key": "exported_provider",
          "title": "Exported content provider without permission",
          "severity": "medium",
          "verified": false,
          "relationship": "gap-confirmed",
          "cwe": [
            926,
            284
          ]
        },
        {
          "finding_type": 35,
          "key": "exported_provider",
          "title": "Exported content provider without permission",
          "severity": "medium",
          "verified": false,
          "relationship": "gap-confirmed",
          "cwe": [
            926,
            284
          ]
        },
        {
          "finding_type": 35,
          "key": "exported_provider",
          "title": "Exported content provider without permission",
          "severity": "medium",
          "verified": false,
          "relationship": "gap-confirmed",
          "cwe": [
            926,
            284
          ]
        }
      ]
    },
    {
      "control": "MASVS-PLATFORM-2",
      "category": "PLATFORM",
      "title": "The app uses WebViews securely.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-3",
      "category": "PLATFORM",
      "title": "The app uses the user interface securely.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-1",
      "category": "CODE",
      "title": "The app requires an up-to-date platform version.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-2",
      "category": "CODE",
      "title": "The app has a mechanism for enforcing updates.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-3",
      "category": "CODE",
      "title": "The app only uses software components without known vulnerabilities.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-4",
      "category": "CODE",
      "title": "The app validates and sanitizes all untrusted inputs and follows secure-coding practice.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-1",
      "category": "RESILIENCE",
      "title": "The app validates the integrity of the platform.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-2",
      "category": "RESILIENCE",
      "title": "The app implements anti-tampering mechanisms.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-3",
      "category": "RESILIENCE",
      "title": "The app implements anti-static-analysis mechanisms.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-4",
      "category": "RESILIENCE",
      "title": "The app implements anti-dynamic-analysis techniques.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-1",
      "category": "PRIVACY",
      "title": "The app minimizes access to sensitive data and resources.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-2",
      "category": "PRIVACY",
      "title": "The app prevents identification of the user.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-3",
      "category": "PRIVACY",
      "title": "The app is transparent about data collection and usage.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-4",
      "category": "PRIVACY",
      "title": "The app offers user control over their data.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    }
  ],
  "categories": [
    {
      "category": "STORAGE",
      "controls": 2,
      "gaps": 2,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "CRYPTO",
      "controls": 2,
      "gaps": 0,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "AUTH",
      "controls": 3,
      "gaps": 0,
      "verified": 0,
      "manual": 3
    },
    {
      "category": "NETWORK",
      "controls": 2,
      "gaps": 0,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "PLATFORM",
      "controls": 3,
      "gaps": 1,
      "verified": 0,
      "manual": 1
    },
    {
      "category": "CODE",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    },
    {
      "category": "RESILIENCE",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 4
    },
    {
      "category": "PRIVACY",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    }
  ]
}