GDF Software for Phone Monitoring and Stalkerware Checks
DeSpy Checks a Phone for Monitoring Without Installing Anything
If you suspect a phone is being tracked, the last thing you should do is upload its contents to an unknown service or install yet another app on the device in question. DeSpy scans a supported phone from a desktop over a cable, installs nothing on the phone and explains each signal it finds in plain language. When a finding needs to be preserved for a protective order or a court, a GDF examiner can take it from there.
Platforms, Availability and Who Builds It
Supported Operating Systems and Platforms
Confirm current desktop and phone support for the available build with the product team before planning a scan, because the supported combination of computer and phone determines what the review can reach.
Software Licensing and Deployment Models
Contact us for current availability, evaluation eligibility and licensing, and we will confirm the build and the supported workflow before arranging access.
Engineering Development and Enterprise Support
Developed, supported and owned by Global Digital Forensics, whose examiners handle mobile device evidence in litigation.
The product
What De
People who suspect device monitoring need useful evidence and calm next steps, not another alarm. They should not have to upload the contents of a phone to an unknown service or install another application on the very device being checked, either of which adds risk to a device that may already be compromised.
DeSpy uses a desktop application to scan a supported phone over a cable. The product is designed around local review, so the scan runs from the user's computer and nothing is installed on the phone. Each finding describes the detected signal, its possible privacy implications and the evidence or research that supports the next step, so the user, or the advocate helping them, can decide what to do with a clear head.
Tracker and stalkerware signals
Check supported package names, applications, background services and other traces associated with monitoring, and explain why each one was flagged.
Profile and control review
Flag supported device management profiles, account paths and settings that may allow unauthorized control or visibility into the phone.
Local first processing
Keep the phone scan and the review on the user's own computer rather than sending phone contents to a remote analysis service.
No phone installation
Connect the phone to a computer for review without adding a scanner application to the device, so the phone is left as it was found.
Reviewable findings
Show the detected signal, the reason it was flagged and the supporting context instead of relying on a warning label alone.
Preservation and next steps
Help the user preserve useful findings, revoke access or seek qualified assistance based on what was actually found.
If a phone in a protective order matter may be monitored, speak with an examiner before anything is scanned so the findings can be preserved.
Methodology
From Connected Phone to Informed Next Step in Four Stages
-
Connect
Use the supported desktop application and cable workflow for the phone being reviewed, with nothing installed on the phone itself.
-
Scan
Collect and assess the supported application, profile, account and monitoring signals that the workflow can reach on that device.
-
Review
Read the reason behind each flag and check the linked context before deciding what it means, because a legitimate profile and a covert one can look alike at first glance.
-
Act
Preserve the evidence, change access or escalate for professional assistance based on the specific finding rather than on a general warning.
Operating note
What DeSpy Checks and What Comes Next
DeSpy focuses on detection, explanation and safer next steps, and the product team updates it as phones and operating systems change. Confirm the current build and the supported workflow for your phone before you connect it, and bring in an examiner when a finding needs to be preserved for a court or a protective order.
Visit DeSpyRelated Proprietary Software and Forensic Services
Confirm Your Phone and Computer Are Supported Before You Connect
Contact the product team for the current build, the supported desktop and phone combinations, evaluation eligibility and access terms, and confirm the combination your device needs before arranging a scan. Describe the phone model, the operating system version, the desktop environment, the access you have and the monitoring concern.
Confirm the cable workflow, the permissions involved, the records inspected and whether any phone setting or source record will change, because a review that alters the phone can complicate what a court later sees.
Ask where the findings and diagnostic logs are stored, what if anything leaves the computer and how the evaluation data is removed when the review is finished.
Review each flag with its source and its detection basis. A clean scan covers the checks DeSpy runs, and if the behavior that worried you continues, a full forensic examination of the phone is the next step.
An illustrative finding identifies a management profile and explains its permissions, so you can tell an employer's legitimate device management from something nobody authorized. Plan any access change or removal with safety and preservation advice, particularly where a protective order may follow.
DeSpy product information and access inquiry
Not sure whether your phone and computer combination is supported? Describe both to the product team, without sending credentials, and we will confirm before you connect anything.
Talk with an examiner
Bring a Monitoring Concern to an Examiner First
Tell us the phone, the computer you have available and what you have noticed. A GDF examiner will call or write back promptly to confirm the supported workflow and when a finding should be preserved.
Global Digital Forensics has examined digital evidence since 1992 and GDF owns its software, so the people who built DeSpy are the examiners who understand what a finding means in a dispute.
Reviewed by Joseph Caruso, Founder, CEO and CTO, CISSP. Last reviewed .