REAL-DEVICE VERIFICATION

Real phones. Real numbers. Real SIMs. Automated evidence.

Witnio verifies that your OTP, calls, pages and consent flows actually work on physical phones with real carrier SIMs — and signs the proof of every run.

Notify me See how evidence works

run.evidence.json · SAMPLEok

{"payload_version": "witnio-run-evidence-v1",
"run_id": "run_8f21c4a0",
"check_id": "chk_access-monitor-01",
"status": "ok",
"ran_at": "2026-09-23T08:14:02Z",
"latency_ms": 412,
"signature": "MEUCIQDsample…SIGNATURE……",
"key_id": "witnio-run-ed25519-2026-09",
"algorithm": "Ed25519",
"canonicalization": "RFC8785-JCS",
"signed_at": "2026-09-23T08:14:03Z"
}

sha256 e41c9a7d2b5f…3c6081

03 — How a run becomes evidence

From your target to signed proof

You register the target

A URL, app, or authorized E.164 sender — never a wildcard.

A real device runs it

Physical Android hardware on a live carrier SIM, on schedule or on demand.

The run is signed

Ed25519 + JCS canonicalization over the manifest, masked content, corridor context.

You get the result

Dashboard, webhook, API, or a monthly compliance report.

04 — Core solutions

Three families. One evidence layer.

Messaging Assurance

Coming soon

OTP, SMS, voice and A2P delivery verified on real carrier SIMs.

Monitor OTP/SMSSMS AssuranceA2P / 10DLC Delivery VerificationVoice / Call AssuranceSpam Label Monitor

See the family

Web & Mobile Assurance

Coming soon

Pages, apps and consent flows tested on physical Android devices.

Access MonitorWeb AssuranceConsent & Cookie CheckLow-end Device CheckGeo / SIM Verification

See the family

Evidence & Intelligence

Coming soon

Signed, exportable compliance evidence across every check you run.

Compliance Evidence Pro

See the family

05 — Platform capabilities

What each service actually measures

Service	HTTP/TLS/DNS	Redirects/403	Screenshot	SMS received + latency	Sender match	Call observe/label	Consent banner	Geo/SIM	Signed evidence	API	Alerts
Access Monitor	✓	✓	✓						✓	✓	✓
Monitor OTP/SMS				✓	✓			✓	✓	✓	✓
SMS Assurance
A2P / 10DLC Delivery Verification				✓	✓				✓	✓	✓
Voice / Call Assurance			✓		✓	✓			✓	✓	✓
Spam Label Monitor						✓		✓		✓	✓
Web Assurance
Consent & Cookie Check			✓				✓			✓
Low-end Device Check			✓							✓
Geo / SIM Verification			✓					✓		✓
Compliance Evidence Pro									✓

06 — Evidence

Every claim you make internally, backed by a file you can verify.

SAMPLE

run.evidence.json · SAMPLEok

{"payload_version": "witnio-run-evidence-v1",
"run_id": "run_8f21c4a0",
"check_id": "chk_access-monitor-01",
"status": "ok",
"ran_at": "2026-09-23T08:14:02Z",
"latency_ms": 412,
"tenant_id": "tn_sample",
"device_id": "dev_SAMPLE00001",
"network": { egress: "wifi" },
"duration_ms": 1830,
"is_backtest": false,
"workflow_version": "v3.2.0",
"evidence": [
{ path: "screens/step-01.png", sha256: "a3f1…SAMPLE…9c2e", bytes: 184203 },
{ path: "logcat/session.log", sha256: "b7d4…SAMPLE…41af", bytes: 9412 },
],
"signature": "MEUCIQDsample…SIGNATURE……",
"key_id": "witnio-run-ed25519-2026-09",
"algorithm": "Ed25519",
"canonicalization": "RFC8785-JCS",
"signed_at": "2026-09-23T08:14:03Z"
}

sha256 e41c9a7d2b5f…3c6081

Verify →

1
Fetch the public key
GET /api/v1/evidence/keys returns every Ed25519 key this deployment has signed with.
2
Verify the manifest
POST /api/v1/public/evidence/verify recomputes the canonical form and checks the signature.
3
Get the verdict
A plain valid: true/false, never a network failure treated as a verdict.

Loading published claims…

Verify an evidence file

07 — Integration

Every check is one API call away

Create a check

http

POST /api/v1/monitor/checks
X-API-Key: $WITNIO_API_KEY
Content-Type: application/json

{
  "name": "Checkout page availability",
  "check_type": "url_load",
  "target": "https://example.com/checkout",
  "country_code": "CR",
  "frequency_minutes": 15,
  "alert_email": "[email protected]"
}

Run response

json

{
  "id": "run_8f21c4a0",
  "check_id": "chk_f7a2",
  "status": "ok",
  "duration_ms": 1830,
  "latency_ms": 412,
  "ran_at": "2026-09-23T08:14:02Z",
  "evidence_json": [{ "kind": "screenshot", "path": "screens/step-01.png" }],
  "evidence_signature_json": { "algorithm": "Ed25519", "key_id": "witnio-run-ed25519-2026-09" }
}

Webhook forward

json

POST <your forward_webhook_url>   // SAMPLE
Content-Type: application/json

{
  "check_id": "chk_f7a2",
  "check_name": "OTP delivery - checkout flow",
  "country_code": "CR",
  "sender": "<E.164 authorized sender>",
  "code": "<masked>",
  "received_at": "2026-09-23T08:14:02Z",
  "latency_ms": 412
}

Forward webhooks are unsigned; verify evidence via the API.

OpenAPI spec Postman collection

08 — Reliability & security

Built to fail closed

Tenant isolation, deny-by-default
MFA on every account
API keys with scope and rotation
Signed evidence, publicly verifiable

Read the trust page

09 — Pricing

Founder pricing for the first 10 customers.

Messaging Assurance

Price on request

Web & Mobile Assurance

Price on request

Evidence & Intelligence

Price on request

See pricing

10 — Get started

See your first signed run this week.

Notify me