Skip to main content

Is accrescent.app a Scam? Security Check Results - Accrescent Reviews

accrescent.app favicon

Is accrescent.app Safe? Security Analysis for Accrescent

Check if accrescent.app is a scam or legitimate. Free security scan and reviews.

TechnologyN/asmall
HTML5CSS3
Analyzed 9/7/2025Completed 8:59:08 AM
61
Security Score
MEDIUM RISK

AI Summary

Accrescent is a small technology company operating an Android app store focused on security, privacy, and usability. The platform targets security-conscious Android users and developers by offering features such as app signing key pinning, signed repository metadata, and no requirement for user accounts. The business is currently in alpha stage and positions itself as a niche alternative to mainstream app stores, emphasizing privacy and developer control. Technically, the website is built with standard HTML5 and CSS3, optimized for mobile devices, and includes proper meta tags for SEO. The site is accessible without any WAF or blocking mechanisms. However, no advanced frameworks or CMS are detected, and hosting details are not disclosed. The site performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the platform demonstrates strong application-level security practices such as key pinning and repository signing. However, the website itself lacks published security policies, security headers, and vulnerability disclosure mechanisms. No privacy or cookie policies are present, which limits privacy compliance. Contact information is minimal but includes a valid company email and multiple social media channels, including open source code on GitHub, which enhances trust. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance documentation, security headers, and incident response information. The risk level is moderate with no critical vulnerabilities detected in the website content. Strategic improvements in transparency and security posture would enhance user trust and compliance readiness.

Detected Technologies

HTML5CSS3

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Accrescent operates in the technology sector as a specialized Android app store emphasizing security and privacy. Its competitive advantage lies in its developer-friendly approach and robust security features uncommon in typical app stores. The business model focuses on direct APK distribution without user accounts, appealing to privacy-conscious users. Revenue streams are not explicitly stated but may include donations as indicated by a donate page. The company maintains an active community presence across Matrix, Twitter, Mastodon, Bluesky, and GitHub, supporting engagement and transparency. The market position is early-stage with growth potential in niche privacy-focused Android users. No parent or subsidiary companies are identified, and the company size is small. The lack of detailed business registration data limits deeper corporate intelligence.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

c*****@accrescent.app

Security Posture Analysis

Comprehensive Security Assessment

The security posture of Accrescent is solid at the application level, with key features such as app signing key pinning, signed repository metadata, and no remote APK signing, which mitigate common supply chain risks. The website itself lacks several standard security best practices, including security headers (e.g., CSP, HSTS), published security policies, and vulnerability disclosure mechanisms. No incident response contacts or security.txt files are provided, which could hinder timely vulnerability reporting and response. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the security maturity is moderate, with strengths in product security but gaps in website security and compliance documentation.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish a comprehensive privacy policy and cookie policy to improve privacy compliance and user trust.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Accrescent

Description:

Accrescent is a private and secure Android app store focused on security, privacy, and usability, providing a developer-friendly platform and pleasant user experience with modern security and privacy practices.

Key Services:
Android app storeSecure app signing key pinningSigned repository metadataAutomatic unprivileged updatesSplit APK optimizationNo remote APK signingNo user account requirement
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
HTML5CSS3
Platforms:
Android
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
70/100
Best Practices:
  • App signing key pinning
  • Signed repository metadata
  • No remote APK signing
  • No account required to improve privacy

Analytics & Tracking

Tracking Level:minimal
Privacy Compliance:poor

Advertising & Marketing

Transparency Level:poor

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is accessible with full content and no WAF blocking.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

90/100
Score

Weak X-XSS-Protection configuration

LOW

Current value: "0"

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

35/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Third-party services without privacy policy

HIGH

Detected services: Twitter

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: transport

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

70/100
Score

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

Strict DMARC Alignment

LOW

Strict alignment may cause legitimate emails to fail

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:mailbox.org ~all
DNS Lookups:1/10
Policy:~all
DMARC Details
Policy:reject
Aggregate Reports:dmarc@accrescent.app
Forensic Reports:dmarc@accrescent.app

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

95/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 54 days

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:accrescent.app
Issuer:R11
Valid Until:10/31/2025 (54 days)
SANs:accrescent.app

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DNS Records

A Records:135.148.139.45
AAAA Records:2604:2dc0:101:200::39
Name Servers:
jeff.ns.cloudflare.comDNS only
venus.ns.cloudflare.comDNS only
MX Records:
10: mxext2.mailbox.org
10: mxext1.mailbox.org
20: mxext3.mailbox.org
SOA:Serial: 2382261409, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:73ms

SPF Analysis

SPF Record:
v=spf1 include:mailbox.org ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

40/100
Score

Service Exposed: SSH

MEDIUM

Port 22 (SSH) is publicly accessible - SSH - Secure but can be brute-forced

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built using basic HTML5 and CSS3 technologies without detectable advanced frameworks or CMS. It is optimized for mobile devices and includes proper meta tags for SEO and social sharing (Open Graph and Twitter cards). Hosting and infrastructure details are not disclosed, limiting assessment of backend robustness. Performance is moderate with no visible broken elements or errors. Accessibility is basic but could be improved. The absence of JavaScript libraries or analytics scripts suggests minimal tracking and a lightweight site. Technical debt appears low given the simplicity, but modernization opportunities include adding accessibility features and security headers.
Analyze Another Website