SPIC - Play Integrity Checker

SPIC (Simple Play Integrity Checker) is a straightforward Android application designed to illustrate the functionality of the Play Integrity API and the now-deprecated SafetyNet Attestation API. This app serves as a practical example for developers interested in understanding how these APIs work within an Android environment.

The core feature of SPIC is its ability to retrieve integrity verdicts using both the Play Integrity and SafetyNet Attestation APIs. Users have the flexibility to check these verdicts directly on their device or transmit them to a remote server for validation. It's important to note that the remote server aspect requires self-hosting at the moment, as there is no centralized service provided for this purpose.

As an open-source project, SPIC offers transparency and accessibility to its codebase. The source code for both the Android application and the server implementation are available on GitHub. You can explore the Android app's code at /herzhenr/SPIC-android and the server's code at /herzhenr/SPIC-server. This open-source approach not only aids in learning but also encourages community contributions and improvements to the project.

For developers looking to enhance their understanding of device integrity verification on Android, SPIC provides a valuable resource. By examining its implementation, developers can gain insights into integrating these APIs into their own applications, ensuring robust security and integrity checks tailored to their needs.