Security checks

Softonic has been a trusted destination for software and app downloads since 1997. Our security and trust practices are designed to protect users and maintain a reliable software catalogue, with multiple layers of checks applied to files before and after publication.

This is the developer-facing view of our security process. For the version end users see, visit the Softonic Security and Trust Center.

Multi-layer APK and binary verification: antivirus scanning, malware detection, integrity verification and privacy policy review

Submitted files go through several layers of security checks before they are made available on Softonic:

  • Antivirus scanning: Real-time scanning by multiple antivirus engines via VirusTotal, plus leading partners including Avira, Bitdefender, ESET, Kaspersky, McAfee, Microsoft Defender, and Symantec, along with Google Safe Browsing for URL scanning.
  • Malware & spyware detection: Behavioral analysis to catch malware, spyware, and adware.
  • Integrity verification: Hash checks and digital signature validation to confirm the file matches what was submitted and hasn’t been tampered with.
  • Privacy policy review: For mobile apps, a review of permissions and policies to help protect user data.

If a security issue is identified, the file may be rejected or held for investigation. See Softonic publishing requirements: quality, compliance, and troubleshooting for how rejections work and how to resubmit.

Is my app rescanned when I publish a new version?

Softonic re-scans files when they’re updated, or when there’s a change to the publisher.

What happens if my app is flagged?

If a security issue is identified, the file may be rejected or held for investigation. See Softonic publishing requirements: quality, compliance, and troubleshooting for the difference between a correctable content-quality issue and a final catalog-eligibility rejection.

What happens if a security issue is discovered after publication?

If new threat intelligence flags an issue in a file that’s already live, Softonic can quarantine and take down the affected file while the issue is investigated.

How can I report a security concern?

Email devsupport@softonic.com