Real-time code-level scanning

Client: Google, Android Security & Privacy, Google Play Protect

Overview

Google Play Protect, Android's built-in antivirus, scans over 125 billion apps daily to protect against malware and unwanted software. Enabled on all Android devices with Google Play Services, it now includes real-time code-level scanning to detect emerging threats from unscanned apps.

When installing unscanned apps, users receive a real-time safety analysis, identifying whether the app is safe or potentially harmful. This enhancement strengthens protection against evolving malicious apps, including those using AI to evade detection.

Outcome

• Released globally: 1B+ scans and 200M+ warned/blocked side-loads (Dec–Apr 2024)
• Improved antivirus test scores (industry benchmark)
• Boosted user trust in Android
• Positive press and PR for Google Play Protect, reinforcing its user protection narrative

Press

The Verge, Tech Crunch, Google Security Blog

My role

I took ownership and lead the design of this feature when I joined the Android Security & Privacy Team

My responsibilities

• Interaction & Visual Design
• Reusing and creating new UI components in Google Material Design 3
• Designing an accessible UI which passed accessibility benchmarks
• Creating prototypes for all feature scenarios which were used in usability testing
• Creating a UX Design System with a comprehensive view of all UX/UI/UXW to streamline design
• Design specification & handover
• Presenting to Design Leads at various stages for sign-off

Team members

1 UX Researcher, 1 UX Writer, 1 Visual Designer (part-time), 2 Engineers, 1 QA Engineer, 1 Product Manager
‍

Core flow

Background scanning

Result states - Dialog

Result states - Notification

Aligning styling, typography and colour with GM3

Figma Prototype for Usability Testing

Moderated usability studies for UX validation

Release

The feature was announced at the Google For India event and was released globally in 2024. During the first month of release, there were 100 million+ scans and 15 million warned/blocked side-loads (December - April 2024).

It improved Google Play Protect's antivirus tests scores (industry benchmark) and boosted trust in Android.
‍