Application Description

SPIC (Simple Play Integrity Checker) is an open-source Android application designed to showcase the functionality of both the Play Integrity API and the now-deprecated SafetyNet Attestation API. This tool is particularly useful for developers and security enthusiasts looking to understand and implement these integrity verification mechanisms.

With SPIC, users can locally check the integrity verdict provided by these APIs directly on their device. Alternatively, for more robust verification, the app allows users to send the verdicts to a remote server. It's important to note that the remote server component must be self-hosted at the moment, as there is no centralized service available for this purpose.

The source code for both the Android application and the server implementation is freely available on GitHub. You can access the Android app's code at /herzhenr/SPIC-android and the server's code at /herzhenr/SPIC-server. This open-source approach not only fosters transparency but also encourages community contributions and improvements to the project.

Libraries & Demo