About

Keep the risk in the box.

For journalists, activists, families, and organizations protecting thousands of employees.

Who's behind this

GuardBox Labs is an independent privacy & security research team based in Stockholm. We built GuardBox after seeing how a single WhatsApp image — or an APK disguised as a PDF — could silently compromise a phone. Our mission is simple: keep the risk in the box, whether you are a journalist, an activist, a family, or an organization protecting thousands of employees.

Security first

Isolation, zero device exposure, and EU data residency are non-negotiable defaults.

Built to protect activists and journalists targeted by surveillance.

Built for Sovereignty and Autonomy, aligned with GDPR and NIS2.

Open Source

Open-source components, public threat data, and a community we listen to.

The threat

The rise of AI-powered automation for finding vulnerabilities and crafting payloads means a PDF, JPG, or DOC can now compromise your phone on a much larger scale.

Researchers are tracking a sharp rise in malicious file campaigns spreading through messaging apps — especially against activists and journalists. Attackers send what looks like a PDF invoice, a JPG invitation or a DOC receipt. In reality, it's an Android APK or RAR payload carrying remote-access malware. One tap, and 2FA codes, photos, contacts and chat history are exfiltrated within seconds.

Trust is hijacked

Files arrive from a known contact, group, or verified channel — not a stranger.

Speed beats defense

Patches arrive weeks behind each new vulnerability.

Awareness has limits

"Don't open unknown files" fails the moment the sender looks legitimate.

Recent campaigns ship malicious APKs disguised with .png or .jpg extensions and image previews. Once tapped, the APK installs and quietly takes over the device.

Who it's for

Your phone holds your digital life. It deserves little extra protection.

You don't have to be a security expert. GuardBox is built for anyone who uses a phone daily — and especially for people who handle sensitive information every day.

Everyday users

Anyone who wants a safer digital life — without extra effort.

Professionals

People receiving files from clients, partners, or unknown contacts.

Journalists & activists

Researchers and reporters targeted because of what they publish.

Parents & families

Safer devices for children and less-technical family members.

Critical infrastructure

Workers protecting systems where one bad file has real-world impact.

Civic & human-rights teams

NGOs and organizations operating under repressive conditions.

Protecting individuals also strengthens the public good — safer journalism, safer civic engagement, and safer access to the open internet for everyone.

Roadmap

From pilot to European scale — see the full multi-year roadmap.