Live threat detection was one of the standouts when Android 15 was trailed earlier this year. Using on-device AI, the idea is that users will be warned in real time if an app is exhibiting potentially malicious behavior, before it’s flagged across the board by Play Protect.

Google is rolling out Android System SafetyCore, and it'll power the upcoming Sensitive Content Warnings feature in Messages.

Live threat detection analyzes app behavior in real time, examining how apps use sensitive permissions and interact with other apps and services on the device. This active monitoring lets Google Play Protect identify potentially harmful apps that may attempt to conceal malicious behavior or remain inactive for a period before engaging in suspicious activity.

Google is bringing real-time alerts to Pixel devices that will notify you whenever a dangerous app is detected on your device.