Quardian scans, validates, and threat-assesses every QR code before you interact with it. Real-time phishing detection. SSL verification. JavaScript injection blocking. EMV payment validation. HIPAA-grade compliance. All on-device. All instant.
Every scan runs through 14 security checks in under 200ms — all on-device, no data leaves your phone.
Catches JavaScript injection, XSS payloads, <script> tags, 20+ event handlers, eval(), document.cookie, encoded attacks, data URI exploits, and VBScript — before your browser ever sees them.
Performs an async HEAD request to verify the server certificate. Extracts organization name, country of origin (with flag emoji), issuer, and expiration date via raw DER byte parsing. Detects expired, untrusted, and self-signed certs.
Full TLV (Tag-Length-Value) parser for EMV-format payment QR codes. Extracts merchant name, city, country, currency, and amount. Verifies CRC-16/CCITT-FALSE checksum integrity.
Detects brand impersonation (PayPal, Venmo, Cash App), suspicious TLDs, excessive subdomains, IDN/punycode homograph attacks, embedded credentials, and URL shortener obfuscation.
Process-isolated sandbox with JavaScript blocked by default, non-persistent data store, content rule blocking, redirect chain detection, and credential harvesting prevention. Zero cookies. Zero downloads.
Scan QR codes from screenshots and photos. Library Sweep scans up to 500 recent photos for hidden threats using CIDetector with high-accuracy mode.
Optional cloud lookup against Google's malware, social engineering, and unwanted software databases. Local heuristics run first for instant results even offline.
Parses WIFI: QR codes, shows SSID, security type (WPA/WEP/Open), and hidden network status. Flags insecure WEP and open networks. One-tap connection via NEHotspotConfiguration.
Parses BEGIN:VCARD contact QR codes, previews all fields, and saves to your address book with a single tap via CNContactStore.
Recognizes Bitcoin, Ethereum, and Lightning Network payment URIs. Validates address length. Warns that crypto transactions are irreversible.
Full history with search, risk stats, source tracking (camera/photo/sweep/share), and CSV export. Swipe to delete individual records.
Scan URLs, text, or images shared from any app. Automatically extracts QR codes from shared images and validates all URLs found in shared text.
Small and medium widgets show threat count, total scans, and last scan time at a glance. Updates every 15 minutes from shared App Group data.
Scan UPC and EAN product barcodes to instantly retrieve product details, pricing, and a full nutritional and safety breakdown — powered by a database of 50+ harmful substances.
Nutri-Score (A–E) with color-coded grades. NOVA Group (1–4) processing level. Full nutrition facts per 100g — calories, fat, sugar, salt, fiber, protein. Sugar and salt highlighted when exceeding EU traffic-light thresholds.
Three-tier severity system: Danger for EU-banned substances, trans fats, BVO, potassium bromate, TiO₂, very high sugar/salt, Nutri-Score E. Warning for Red 40, Yellow 5/6, HFCS, hydrogenated oils, sodium nitrite, BHA/BHT, NOVA 4. Info for caramel color, carrageenan, artificial flavors. 30+ E-number additives and 20+ ingredient keywords scanned with child safety alerts per EU/EFSA standards.
Detect AI-generated images using 7 on-device analysis signals — no cloud, no API, no data leaves your phone. Quardian examines EXIF metadata (missing camera model, GPS, lens data), resolution patterns (512, 1024, 2048 — common AI output sizes), noise variance (AI images are unnaturally smooth), edge sharpness (diffusion models produce soft edges), color distribution bias, bilateral symmetry, JPEG/PNG structure, and known AI tool signatures (DALL-E, Midjourney, Stable Diffusion, Adobe Firefly, Leonardo, ComfyUI). Each signal contributes a weighted score producing a final AI probability from 0–100%.
Batch-scan up to 100 recent photos in your library to find AI-generated images hiding among real photos. Each image is analyzed with the full 7-signal pipeline. Results sorted by AI probability with thumbnail previews and the top detection signal for each flagged image. Three-tier verdict: Likely Real, Suspicious, or Likely AI-Generated.
Full transparency into every detection signal. See exactly which indicators triggered and their individual weights: missing EXIF (0.8), no camera hardware (0.9), AI tool in metadata (1.0), resolution match (0.6), smooth noise (0.5), soft edges (0.4), color dominance (0.3), symmetry (0.3), PNG format (0.4). No black-box verdicts — every score is explainable.
The only QR scanner designed for clinical environments. Quardian detects Protected Health Information embedded in QR codes and enforces healthcare-grade security policies.
QR code attacks are the fastest-growing phishing vector. Here's what we're seeing.
Real-world incidents, advisories, and research driving the QR threat landscape.
Open Quardian and point your camera at any QR code. Real-time detection with a guided scan frame.
14 security checks run simultaneously: URL validation, SSL verification, phishing detection, JS scanning, EMV parsing, and more.
Clear green/orange/red risk rating with detailed warnings. See the certificate, country, and provider info before proceeding.
If you proceed, Quardian's hardened browser opens the URL in a sandboxed environment with JS blocked by default.
All features are available on the free tier with daily limits. Upgrade for unlimited access.
Payment is charged to your Apple ID at confirmation of purchase. Subscriptions automatically renew unless auto-renew is turned off at least 24 hours before the end of the current period. Your account will be charged for renewal within 24 hours prior to the end of the current period at the same price. You can manage and cancel your subscriptions by going to your account settings on the App Store after purchase. Terms of Service · Privacy Policy
Quardian is built on a novel invention: Continuous Post-Scan Threat Monitoring with Temporal Drift Detection. Unlike every other QR scanner that treats each scan as a one-time event, Quardian establishes a persistent monitoring relationship with every code you scan — continuously re-validating its threat status and alerting you when a previously safe code becomes dangerous.
The content behind QR codes is dynamic. Domains expire and get re-registered by attackers. SSL certificates lapse. URL redirect chains are silently retargeted to phishing sites. A QR code that was safe when you scanned it at a restaurant last week may be dangerous today. No prior art addresses this temporal dimension of machine-readable code security.
System and Method for Continuous
Post-Scan Threat Monitoring of
Machine-Readable Codes with
Temporal Drift Detection
Every QR code you scan without Quardian is a link you can't see, a server you can't verify, and a risk you can't assess. Download now and take control.
iOS 16.0+ · Android 8.0+ · Physical device required for camera scanning