Attestation verification
Integrations can verify supported platform signals using the relevant provider mechanisms.
Products Developer tools
Available for trialApp integrity & attestation
AppGuard
Add platform evidence to your API decisions.
AppGuard is a service for verifying supported platform attestation signals before protected API access. It can help teams use that evidence in a documented policy and understand why requests need further attention.
Guided evaluation · Technical discovery · Trial access through our team
Apple App AttestApple DeviceCheckGoogle Play IntegrityServer verification API
Core capabilities
Built around the
work that matters.
Explore how AppGuard works, then talk with us about trial access for your workflow.
Configurable access policy
Describe how verified, missing, or unsuccessful attestation should influence access to selected endpoints.
Diagnostic records
Records can give developers context when an integrity check does not complete as expected.
Observation before enforcement
An observation mode can help teams study expected client behavior before applying access restrictions.
How it works
A clear path from
setup to everyday use.
Choose a protected operation
Identify the API operation and the platform evidence relevant to its access policy.
Verify the signal
The service can validate supported attestation evidence for the request flow.
Apply and inspect policy
Your backend can combine the result with authentication and other application checks.
Architecture
How AppGuard
fits together.
A clear division between the product interface, processing layer, and the systems your team already owns.
01Client challenge
The app requests a short-lived server challenge for a protected operation.
02Provider verification
The gateway validates supported Apple or Google attestation evidence.
03Policy response
Your backend combines integrity, authentication, risk, and business context.
Technical profile
Built for integration,
not a closed box.
Trial onboarding confirms the exact environment, product boundary, and success criteria for your implementation.
Platforms & surfaces
Apple App AttestApple DeviceCheckGoogle Play IntegrityServer verification API
Connects with
AuditKitDebugStreamLicenseDeskAPI gateways
ModeObserve, challenge, enforce
EvidenceProvider-specific verdicts
Replay defenseNonce and expiry validation
PolicyEndpoint and risk tier
ResultAllow, limit, challenge, deny
Security & control
Deliberate boundaries
from the beginning.
- Attestation augments rather than replaces authentication
- Observe mode establishes a baseline before enforcement
- Unsupported devices receive an explicit application policy
- No verdict is presented as proof that a client is harmless
Who it's for
Made for real workflows.
Mobile API owners
For teams adding integrity evidence to requests for valuable backend operations.
SDK and platform teams
For developers evaluating a consistent integration around platform attestation.
Security engineers
For teams that need inspectable policies and evidence when reviewing client access.
Guided product trial
Evaluate AppGuard
against real work.
We scope the trial around one meaningful workflow, the environments you use, and evidence your team can assess.
- 01
Select one protected, reversible API action
- 02
Integrate challenges and provider verification
- 03
Observe supported and unsupported client populations
- 04
Define staged policy with recovery and support paths
What the evaluation includes
Discuss trial access ↗Product access for the agreed scope, technical onboarding, implementation guidance, and a review of the findings.
A few answers
Explore with confidence.
A closer look at the scope and trial experience for AppGuard.
How can I try AppGuard?
AppGuard is available through a guided trial. Tell us about your requirements, platform, and evaluation goals; our team will discuss fit, access, and the right trial scope with you.
Can AppGuard detect every compromised or automated client?
No. Attestation provides bounded evidence with platform-specific limitations. It can be one input to a layered access policy, not a guarantee that a client or request is trustworthy.
Can attestation replace user authentication?
No. Your application still needs authentication, authorization, and appropriate request controls. AppGuard provides additional evidence about the app and device context.
Explore AppGuard
Bring us your
real workflow.
Share your platform, requirements, and evaluation goals. We'll discuss the product and arrange a focused trial where it fits.