mvt-project/mvt
Command-line forensics toolkit that scans iOS and Android backups for spyware indicators.
MVT scans iOS and Android device backups against published indicators of compromise to find traces of spyware like Pegasus, built by Amnesty International's Security Lab out of the 2021 Pegasus Project. It's a command-line research tool, not a consumer app — using it means understanding digital forensics, and the project states explicitly it's not intended for end-user self-assessment. It also warns that public indicators alone can't prove a device is clean; real triage needs non-public threat intelligence, available through Amnesty's Security Lab or Access Now's Digital Security Helpline.

What holds up
- +Free and open source (1.3k forks, 13.6k stars), built and maintained by Amnesty International
- +Explicitly warns that public indicators can't prove a device is clean, avoiding false reassurance
- +Covers both iOS and Android through separate mvt-ios and mvt-android commands
Mind the limits
- −Command-line only and requires forensics knowledge — not built for end-user self-checks
- −Public indicators alone are insufficient — real assurance needs non-public threat intel
Picked here? Add the badge
Put it on your site. It links back to this page. Free for every listed product.
<a href="https://stillworks.dev/products/p/mvt-project-mvt/"><img src="https://stillworks.dev/badge/mvt-project-mvt.svg" alt="Picked by StillWorks" width="230" height="54"></a>