Open-source device integrity SDKs for mobile apps
Measure the phone. Read the measurements. Decide on your server.
Necessary switches on the measurements a phone lets an app make — about the phone, its network and your app — records them, and signs every report. We help your team read them, so your server can verify each report and run the checks your own business needs.
1
Root and jailbreak traces, hooking tools such as Frida, debuggers, emulators, changes to your app's code, the network and more — measured on the phone and signed with a key that never leaves it. Measurements that could identify a person, such as the location, stay off unless your app switches them on.
2
Every measurement is described field by field: what it is, how the phone measures it and what a complete answer holds. The integration guide shows your backend how to ask for a scan and check what comes back.
3
Your server checks each report — a fresh challenge, the signature, no replays — and weighs the measurements with your own business rules. The SDK never sends a score or a verdict, and no hosted service sits in between: the decision is yours.
The SDKs share one report format, so one backend can check reports from all of them.