Application Description

This Android application, SPIC (Simple Play Integrity Checker), showcases the functionality of the Play Integrity API and the now-deprecated SafetyNet Attestation API. It provides a practical example of how to utilize these APIs to assess the integrity of an Android device.

The app retrieves an integrity verdict from both APIs. This verdict can be verified locally on the device itself or sent to a remote server for validation. Currently, the remote server implementation requires self-hosting.

The SPIC app is open-source. The source code for both the Android app and the server component are available on GitHub (see /herzhenr/SPIC-android and /herzhenr/SPIC-server).

Libraries & Demo