Ross ROSS = Recommend OSS · open-source software intelligence for agents

mvt-project/mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. observed · 2026-08-28

github.com/mvt-project/mvt · homepage · Python · NOASSERTION (other) observed · 2026-08-28

Health v2 · maintenance only

94/100

  • Activity 99
  • Release rhythm 83
  • Longevity 100

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 77
  • age_days: 1874
  • days_rel: 35
  • days_push: 7
  • n_releases_24m: 6

Full methodology

Adoption not part of the score

12967 stars · 1280 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Mobile Verification Toolkit (MVT) is a Python command-line toolkit for conducting forensic analysis of Android and iOS devices to detect traces of spyware compromise. Developed by Amnesty International's Security Lab during the Pegasus Project, it scans devices and backups against indicators of compromise from known spyware campaigns.

Use cases

  • scan an iPhone for traces of Pegasus spyware
  • check an Android device for signs of compromise
  • analyze iOS backups and crash logs for forensic evidence
  • run indicators of compromise against a mobile device
  • perform consensual forensic triage of a client's phone
  • investigate suspected spyware targeting of civil society

When to choose

  • you are a forensic investigator or technologist analyzing Android or iOS devices for spyware
  • you need to scan devices against published IOC lists from research groups
  • you want an open-source, community-maintained mobile forensics tool

When to avoid

  • you are an end user wanting to self-check your device without forensic expertise
  • you need a point-and-click GUI tool
  • you require native Windows support without WSL
  • you need guaranteed detection - public IOCs alone can miss recent compromises

Facets

cli-tool · maturity active

security cli developer-tools security mobile-development privacy developer-tools cli python digital-forensics spyware-detection indicators-of-compromise android ios pegasus mobile-security linux macos

5 sources

Member repositories

RepositoryRoleHealth v2
mvt-project/mvtmain94

For agents

markdown · JSON · MCP: product_card(name="mvt-project/mvt")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem