Exfault is an autonomous mobile security researcher for Android apps, using AI agents, static analysis, dynamic analysis, authenticated workflows, and real Android cloud emulators to produce reproducible security findings. Exfault combines static and dynamic analysis with AI agents. The AI agents have access to real Android emulators to peform navigation, explore functionality and validate vulnerabilities before reporting them, improving both the quality of reports and false positive rates.