Most hardening tools in this space are either paid SaaS (upload your APK to someone's server) or "open source" in name only — the GUI is public but the actual protection logic is a closed binary.

Shellsmith is my attempt at doing it properly: the Rust core, the Android stub module, and even the licenses for the third-party components it depends on are all in the repo. Everything runs locally — no upload step.

MIT OR Apache-2.0, cross-platform desktop GUI (Tauri + React), CLI for automation, full CI/CD building release artifacts for Windows/macOS/Linux with checksums.

https://github.com/kairowan/Shellsmith — feedback and PRs welcome, it's still early (first public release).

submitted by /u/PutParticular9911
[link] [comments]