Avast Antivirus & Security Security & Privacy Scorecard
Android
Three advertising networks, including Facebook Audience Network, collect device data to serve targeted ads. App usage is also tracked by multiple marketing and attribution services. User data may not be fully protected, and network communications travel with less protection than expected.
Best for
Users comfortable with ad-supported security tools
Avoid if
Those who don't want ad networks inside a security app
Findings
- 4 critical
- 4 high
- 5 medium
- 2 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Authentication Tokens Stored in Plain SharedPreferences
- SQL Injection in Legacy Database Code
- Hardcoded HTTP URL for VPN Session Director
Top privacy issues
- Pre-Consent Analytics Initialization
- Unity Ads SDK File Access Vulnerability
- No Database Encryption Detected
Full analysis
Avast Antivirus & Security
Package ID: com.avast.android.mobilesecurity
Version: 26.1.0.260122076
Scan Date: March 4, 2026
Total Issues Found: 11 (across all severity levels)
What This Means for You
Three advertising networks, including Facebook Audience Network, collect device data to serve targeted ads. App usage is also tracked by multiple marketing and attribution services. User data may not be fully protected, and network communications travel with less protection than expected.
Recommendation: Use With Caution
Best For: Users comfortable with ad-supported security tools
Avoid If: Those who don't want ad networks inside a security app
Key Findings
Data Security - 6 findings (1 critical, 3 medium, 2 info)
Network Security - 4 findings (2 critical, 2 high)
Code Safety - 0 findings
Privacy - 1 finding (1 medium)
Privacy Concerns
What Data is Collected
The app collects device identifiers, behavioral usage patterns, and interaction data. Advertising and analytics services use this information to build profiles that follow users across other apps and services. Attribution services track which ads and campaigns brought users to the app.
Third-Party Data Sharing
User data is shared with nine third-party services:
- Unity Ads - Advertising network
- Facebook Audience Network - Advertising network
- Vungle Ads - Advertising network
- Firebase Analytics - Usage and behavior tracking
- Adobe Marketing Cloud - Marketing analytics
- Singular - Ad attribution and marketing measurement
- Hiya - Caller identification services
- SurfEasy VPN SDK - VPN tunnel functionality
- Auth0 - Authentication services
Understanding the Scores
| Category | Score |
|---|---|
| Security | 46/100 |
| Privacy | 86/100 |
| Data Security | 45/100 |
| Network Security | 48/100 |
| Code Safety | 79/100 |
| Data Collection | 94/100 |
| Data Sharing | 95/100 |
| User Control | 96/100 |
Positive Security Features
- No standout security practices were identified in this version.
Areas for Improvement
- The app stores and transmits personal data without adequate protections, leaving user information less protected than expected.
- Network communications travel with less protection than expected, and data sent on public Wi-Fi may be accessible to others on the same network.
- The presence of three advertising networks creates a tension between user protection and commercial data collection practices that users should weigh carefully.
About This Analysis
This scorecard is based on automated static analysis of the app's code and data handling behaviors. Scores reflect practices observed at the time of the scan and may not capture every behavior or server-side configuration.
App Details
- App Name: Avast Antivirus & Security
- Package ID: com.avast.android.mobilesecurity
- Version: 26.1.0.260122076
- Platform: Android
- Scan Date: March 4, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 66/100 |