CITT

    Scan results

    ToolBox

    Android

    Toolbox contains over 50 daily-use tools including APK sharing, flashlight, light meter, magnifier, speedometer, timer, heart rate monitor, color detector, ruler, and advanced calculator. Contains ads and in-app purchases.

    CITT SCORE
    58
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Utility users comfortable with ad-supported apps

    Not For: You prefer apps without Yandex analytics

    What It Means For You

    Usage is tracked by Yandex AppMetrica and Sentry, and user attention is monetized through multiple ad networks including Google AdMob, Tapsell, Mbridge, and AdColony. User data passes through several third-party systems based outside the US.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (19)

    Data Security

    7 total
    1 High
    1 Medium
    1 Low
    4 Info

    Network Security

    2 total
    1 Critical
    1 Medium

    Code Security

    5 total
    1 High
    2 Medium
    1 Low
    1 Info

    Privacy

    5 total
    3 High
    2 Medium

    Third-Party Services

    AppMetrica (Yandex), Sentry, Google AdMob, Tapsell, Mbridge, AdColony, Firebase Messaging, Firebase Remote Config, Firebase Dynamic Links, Google Sign-In, ML Kit, Glide, ZXing, ExoPlayer, Koin, WorkManager

    Security Strengths

    • ✓Gold trading password uses proper encryption (Android KeyStore + AES-256-GCM)
    • ✓SQL injection protection via Room Database
    • ✓Backup disabled (android:allowBackup="false")
    • ✓No server-side secrets hardcoded
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    ads
    location
    camera

    Package

    ir.shahbaz.SHZToolBox_demo

    Version

    6.14.0

    Analysis Date

    Mar 4, 2026

    Classes Analyzed

    34,674

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (1 high, 1 medium, 1 low, 4 info)

    Network Security - 2 findings (1 critical, 1 medium)

    Code Safety - 0 findings

    Privacy - 5 findings (3 high, 2 medium)

    Privacy Concerns

    What Data is Collected

    Yandex AppMetrica and Sentry collect data about how users interact with the app, including actions taken and errors the app encounters on the device. Ad networks including Google AdMob, Tapsell, Mbridge, and AdColony gather information about user interests and engagement to serve targeted advertising.

    Third-Party Data Sharing

    User data is shared with a broad set of third-party companies: Yandex (headquartered in Russia), Google (AdMob, Firebase, ML Kit, and Sign-In), Tapsell, Mbridge, AdColony, and Sentry. Several of these providers operate infrastructure outside the United States, meaning user information may be handled under privacy rules different from those in the user's home country.

    Understanding the Scores

    CategoryScore
    Security62/100
    Privacy54/100
    Data Security58/100
    Network Security55/100
    Code Safety72/100
    Data Collection50/100
    Data Sharing58/100
    User Control55/100

    Positive Security Features

    • No specific positive security practices were identified in this version of the app.

    Areas for Improvement

    • Network connections between the app and remote servers could be better protected, reducing the chance user data is read while in transit.
    • The app integrates a large number of advertising and analytics services, each of which receives information about user activity. Reducing the number of these integrations would limit how broadly user data is distributed.
    • The app provides limited options to opt out of tracking or data collection, giving users little control over how third parties use their information.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of the scan and may not account for updates released afterward.

    App Details

    • App Name: ToolBox
    • Package ID: ir.shahbaz.SHZToolBox_demo
    • Version: 6.14.0
    • Scan Date: 2026-03-04

    Right of Reply

    Developer not yet contacted