Google Play Protect [1] [2] [5] [6] [7] [8] [9], the built-in security feature on Android devices [6] [7], has been updated to enhance its defense against rising threats to Android devices.


The recent update to Google Play Protect includes real-time scanning at the code level, enabling it to proactively defend against rogue apps. It can now detect polymorphic malware and AI that disguise themselves by altering their identifiable features [1]. When users attempt to install apps that have not been scanned before [4], they will be prompted to scan the app or choose not to install it. If an app is deemed harmful, Google will provide a reason [4], such as unauthorized access to data or devices [4]. This new scanning feature analyzes an app’s code during installation and informs users whether the app is safe or potentially harmful.

In addition to these updates, Google Play Protect now utilizes cloud-hosted infrastructure to evaluate side-loaded apps at the code level [7], offering better protection against malicious apps [7] [8]. It also employs on-device machine learning and other methods to check newly installed apps [1], conducts daily scans on downloaded apps [1], and scans apps before downloading them [1]. All Android users with Google Play Services have access to Play Protect [1]. Android devices also have other security measures in place [6], including ongoing security updates [6], app permission controls [6], and Safe Browsing [6], to safeguard user data and privacy. Google Play Protect scans over 125 billion apps daily to protect users from malware [7], even outside of the Google Play Store [7]. This enhancement strengthens Google’s protections for the entire Android ecosystem [3].

The rollout of this update has already commenced in select countries and will be expanded globally in the coming months. Google aims to stay ahead of evolving threats by introducing real-time code-level scanning [2]. The company is committed to continuously improving security measures and protecting against new and sophisticated malware techniques [2].


The updated Google Play Protect provides a more proactive defense against threats to Android devices. By incorporating real-time scanning at the code level [3] [4] [5] [7], detecting polymorphic malware and AI [1], and utilizing cloud-hosted infrastructure [7], on-device machine learning [1], and other methods [1], Google enhances its protection against malicious apps. The global expansion of this update will further strengthen security measures for the entire Android ecosystem. Google’s commitment to continuous improvement and staying ahead of evolving threats ensures ongoing protection for Android users.