SPIC (Simple Play Integrity Checker) is a straightforward Android application designed to showcase the functionality of the Play Integrity API, as well as the now-deprecated SafetyNet Attestation API. This app allows users to verify the integrity verdict provided by these APIs either directly on their device or by forwarding the results to a remote server for validation. Currently, the remote server must be self-hosted.
Being an open-source project, the source code for both the Android app and the server implementation is freely available on GitHub. You can access the Android app's code at /herzhenr/SPIC-android and the server's code at /herzhenr/SPIC-server. This transparency not only aids in understanding the mechanisms of the Play Integrity and SafetyNet Attestation APIs but also encourages community contributions and improvements.
