SPIC (Simple Play Integrity Checker) is an open-source Android application designed to showcase the functionality of the Play Integrity API, as well as the now-deprecated SafetyNet Attestation API. This app provides a practical demonstration of how these APIs can be utilized to verify the integrity of a device.
With SPIC, users can check the integrity verdict directly on their device, offering immediate feedback on the device's security status. Alternatively, the app allows for the results to be sent to a remote server for further validation. It's important to note that the remote server component must be self-hosted at this time.
The source code for both the Android app and the server implementation is freely available on GitHub. You can access the Android app's code at /herzhenr/SPIC-android and the server implementation at /herzhenr/SPIC-server. This open-source nature encourages community contributions and allows developers to learn from and build upon the existing codebase.
