SPIC (Simple Play Integrity Checker) is an open-source Android application designed to showcase the functionality of the Play Integrity API, along with the now-deprecated SafetyNet Attestation API. This app provides users with a practical demonstration of how these APIs work to verify the integrity of a device.
With SPIC, you can check the integrity verdict directly on your device, or you have the option to send the results to a remote server for further validation. Please note that the remote server component needs to be self-hosted at this time.
For those interested in the technical details, the source code for both the Android application and the server implementation is available on GitHub. You can find the repositories at /herzhenr/SPIC-android and /herzhenr/SPIC-server, respectively.
By exploring SPIC, developers and security enthusiasts can gain insights into device integrity verification, enhancing their understanding of how to protect and validate the security of Android applications.
