Identify every device. Trust the right ones.

Multi-tenant device intelligence that survives reinstalls, spots spoofed hardware, and scores every visitor by integrity.

POST /api/v1/collect

// server response
{
  "visitor_id": "vid_c615c3fb54eb4845",
  "hardware_bound_id": "hwid_9f2ad1c7b0e34a56",
  "device_signature_id": "fp_585ef663e46947be",
  "integrity_tier": "hardware",
  "confidence": 0.97,
  "is_bot": false
}

How it works

Three calls from challenge to verdict.

The client requests a nonce, signs it with a hardware-bound key, and sends device signals. The backend verifies the attestation and returns a stable identity plus an integrity tier.

Challenge

Issue a nonce

The server mints a single-use nonce bound to the tenant and device session.

Verify

Prove the hardware

The device signs the nonce with a Keystore or Secure Enclave key and attests through Play Integrity or App Attest.

Collect

Return identity

Signals are normalized into identifiers and a risk-tiered integrity verdict, with no personal data collected.

Identifiers

One device, three lenses.

Each identifier answers a different question, so you can tell a returning install from a reinstalled device from a spoofed signal set.

vid_

visitor_id

Install-scoped and stable within an app install. Your day-to-day handle for a visitor.

hwid_

hardware_bound_id

Server-issued and hardware-bound. Survives reinstalls and app-data clears.

fp_

device_signature_id

Derived from normalized device signals. Catches clones and drifted fingerprints.

Risk-tiered, never pass or fail.

Every visitor lands in one of four integrity tiers. You set the policy for each, instead of forcing a binary block.

Hardware

Hardware-attested key and platform integrity both verified.

strongest

Software

Signed signals present, hardware attestation unavailable.

strong

Basic

Fingerprint identity only, no cryptographic proof.

limited

None

Insufficient signals to establish a trustworthy identity.

unverified