About GuestSpy
The story behind the GuestSpy name, and what the product does today.
GuestSpy finds stalkerware and spyware on phones. It is free, and it shows the evidence behind every result.
What GuestSpy does
GuestSpy has three parts. Each one shows the evidence behind its verdict.
Android app
Reads the real installed-app list and scans each app on the phone.
iPhone app
Guides you through a security checklist and analyses configuration profiles.
Free reports
Export any report as PDF or JSON, free.
About the name
The GuestSpy name once belonged to a phone-monitoring app. It was part of the TheTruthSpy family, with Copy9, MxSpy, iSpyoo, FoneTracker and others. Those apps hid on phones and sent messages, calls and location to a web dashboard. They were stalkerware, and people were hurt by them.
That product line is gone. The name now belongs to an anti-spyware tool, built from scratch.
Our scanner flags the old builds like any other stalkerware. The package com.guest, the family’s signing certificates and its servers all sit under danger code GS-STK-AND-1405. Scan an old GuestSpy APK and it comes back red.
How we work
Evidence first
Every finding lists its permissions, certificates, domains, rule ID and danger code.
Files stay with you
The Web Scanner runs in your browser and never uploads files.
Sharing is optional
An anonymous result holds only the verdict, danger code and package name or hash.
Watchware has its own label
Visible parental apps are marked apart from hidden stalkerware. The difference is consent.
No invented numbers
We publish no user counts, awards or testimonials, only database counts.
Where the data comes from
Detection is built on the stalkerware-indicators project by Echap. Echap is a French non-profit that works against tech-enabled abuse. Its data is licensed under CC-BY 4.0, and we credit it in every report.
176 families
149 stalkerware families and 27 watchware families.
640+ package names
The app IDs that known families have shipped under.
470+ certificates
Signing keys used by monitoring vendors.
About 2,950 hashes
Exact fingerprints of known spyware files.
900+ domains
The servers that stalkerware reports back to.
93 rules
Behaviour checks for unknown apps, each mapped to MITRE ATT&CK for Mobile.
Confirmed community finds go back to the Echap project.
Who we are
GuestSpy is built by a small team of security engineers and writers. We follow research from the Coalition Against Stalkerware and its members. If you find a mistake, a wrong menu path or a false positive, tell us. We will fix it.
We are not a domestic violence service and do not offer counselling. We link to people who do.
Contact
Email [contact email] about the scanner, false positives, press or app access for support groups.
If you are in immediate danger, call your local emergency number. The Coalition Against Stalkerware lists support services by country at stopstalkerware.org. In the US, call the National Domestic Violence Hotline on 1-800-799-7233.
Frequently asked questions
Is this the same app as the old GuestSpy?
No. The old monitoring product is gone, and GuestSpy now flags its builds as stalkerware.
Does GuestSpy cost anything?
No. The Web Scanner and both apps are free, with no plans, trials or ads.
Does GuestSpy upload my files?
No. The Web Scanner reads files in your browser. Only an anonymous verdict is sent, and only if you leave sharing on.
Check your phone now. It's free.
Scan in your browser in about two minutes, or get the app for Android and iPhone.