Google Expands Live Threat Detection: Enhanced App Security Coming to More Android Devices

Google could be making it easier to see which apps are a threat (APK teardown)

We have also discovered a new alert that warns about harmful apps monitoring your location or device activity. Your Pixel phone contains a variety of safety and privacy features, like protection from spam calls and safeguards for lost devices. Among these features is Live Threat Detection, which launched last year. In our APK teardown, we discovered that some changes are coming for this tool. In case you're unaware of Live Threat Detection, it's a feature that uses on-device AI models to identify harmful apps. If suspicious behavior is detected, you'll receive a real-time alert warning you to take action to protect your device. In the image below, you can see an example of the notification you'll get when a malicious app is discovered. Outside notifications like this and a settings toggle to turn the feature on/off, there's not much more to this feature. However, our investigation into version U.43.playstore.pixel3.819384620 of the Play Protect Service app revealed that the feature is getting a new page. This page (seen below) will presumably list the apps that have been identified as threats. Additionally, we also discovered what appears to be a new alert. According to one of the strings of code we found, this alert will warn you that an unsafe app is monitoring your device location or activity. If you're interested in other APK teardowns, we recently spotted that Google is testing putting the viral image editor, Nano Banana, in more areas. One of these places is in the Gemini overlay. You can check out our article to learn more

Google's Live Threat Detection is reportedly coming to more Android phones

The rollout will include devices from OPPO, HONOR, Lenovo, OnePlus, Nothing, Transsion, and Sharp. Google could be expanding its Live Threat Detection feature, part of Google Play Protect, to more Android devices, according to Android Authority. The system uses on-device AI to identify harmful applications by analyzing their behavior and alerting users in real time for immediate action. The feature functions by employing on-device artificial intelligence models to conduct behavioral analysis of applications. It specifically monitors how apps interact with sensitive permissions or engage with other applications and services in unauthorized ways. This scanning process operates within the Private Compute Core, a secure environment designed to perform analysis while preserving user privacy. Live Threat Detection was first introduced on Google Pixel devices. The company plans for a broader rollout in the coming months to include hardware from several other manufacturers: OPPO, HONOR, Lenovo, OnePlus, Nothing, Transsion, and Sharp. An APK teardown of the Play Protect Service app revealed that the feature is receiving its own dedicated page, which will list apps identified as threats. Initially, the system is focused on identifying specific types of malicious software. Its primary targets are stalkerware and other applications designed to collect personal data without obtaining user consent. The scope is planned for future expansion to cover additional categories of harmful apps, broadening its protective capabilities.

Live Threat Detection on Android Makes Spotting Dangerous Apps Easier

Google's making Android security actually understandable. According to an APK teardown by Android Authority, Live Threat Detection could be getting a new update that brings a new level of transparency to app security. Instead of relying on vague background scans, users will soon see a clear, real-time dashboard showing exactly which apps pose a threat to their privacy or device safety. The feature uses on-device AI to monitor app behavior and flag anything suspicious, from spyware to scam apps that misuse permissions. Real-Time Security That Makes Sense The new "Live Threat Detection" page lives within Google Play Protect and displays a straightforward list of risky apps currently installed on your device. The AI monitors for abnormal behavior like unauthorized access to your location, data, or device activity. It can even catch apps that change their icons or names to hide their true intentions. What makes this different is how quickly it works. Instead of waiting for periodic checks or relying on vague warnings, users get instant alerts when an app crosses the line. The system processes everything on your device, meaning your data never gets sent to the cloud. From the dashboard, you can quickly uninstall flagged apps, restrict permissions, or review why something triggered an alert. Expanding Beyond Pixel Google originally launched this feature last year exclusively for Pixel devices. Now, the company is expanding Live Threat Detection to many other Android manufacturers, reaching millions more users who previously relied on third-party security apps. This update brings Android closer to Apple's privacy approach, but with deeper AI integration. While iOS shows permission requests, Android's Live Threat Detection analyzes actual app behavior patterns. For most users, the advantage is simplicity. Threats appear clearly labeled with straightforward action options, making security decisions easy even without technical expertise.