> For the complete documentation index, see [llms.txt](https://docs.talsec.app/freerasp/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.talsec.app/freerasp/freemalwaredetection/integration-guide/requirements.md).

# Requirements

Before configuring the freeMalware Detection module, ensure the application environment meets the following baseline technical prerequisites.

{% stepper %}
{% step %}

### Core Integration

The freeMalware Detection module operates as an extension of the core security suite and cannot function standalone. You must complete the standard integration for your framework before proceeding.

<p align="center"><a href="https://docs.talsec.app/freerasp/freerasp/integration" class="button primary">freeRASP Integration</a></p>

{% hint style="info" %}
**Version Requirement**

To utilize the V2 configuration API (`SuspiciousAppDetectionConfig`) and its advanced heuristic controls, the project must be updated to the following minimum SDK versions:

**Android:** `18.1.0` | **Flutter:** `8.0.0` | **React Native:** `5.0.0` |

**Capacitor:** `3.0.0` | **Cordova:** `9.0.0` | **KMP:** `2.0.0`
{% endhint %}
{% endstep %}

{% step %}

### Application Visibility

By default, the detection engine successfully evaluates all standard, executable applications (packages with a `MAIN` launcher activity) without requiring broad visibility permissions on Android 11 (API level 30) and higher.

**Deep Scanning (Optional)**

If the specific threat model requires auditing "headless" packages (e.g., background services, daemons, or UI-less plugins), the application must explicitly request broad package visibility.

To enable this deep scanning capability, add the following to your `AndroidManifest.xml`:

```xml
<uses-permission android:name="android.permission.QUERY_ALL_PACKAGES" />
```

{% hint style="warning" %}
**Play Store Policy Constraint**

Google classifies `QUERY_ALL_PACKAGES` as a highly sensitive permission. Including this permission subjects the application to an extended Google Play Policy Review. A valid justification explaining why the application requires visibility into all installed device packages must be provided to the review team.
{% endhint %}
{% endstep %}

{% step %}

### Detection Configuration

The freeMalware Detection module is inactive by default. It activates only when at least one detection parameter is explicitly provided — either via the V2 `SuspiciousAppDetectionConfig` API or the legacy V1 configuration fields.

Without a valid detection configuration, no scan is performed and no threat callback is triggered.
{% endstep %}
{% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.talsec.app/freerasp/freemalwaredetection/integration-guide/requirements.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.