Attestation verifier
Verify a signed scan record
Every Vysiro scan can be exported as a signed evidence envelope: a compact JSON record carrying the domain, its TrustScore, the grade, per-category points, the scoring-model version, and a hash of the exact check set used. Paste one below to confirm it is authentic.
This check is public and needs no account, so an auditor, a security vendor, or a customer can confirm a Vysiro score without trusting a screenshot and without re-running the scan. The record is verified against the versioned scoring model it was signed under. We show you exactly what the signature proves, and just as plainly what it does not.
What this check does and does not prove
Verified
- The record was issued by Vysiro and signed with its key.
- No field has changed since signing: domain, score, grade, per-category points, scoring-model version, and registry hash.
- The scan-evidence envelope schema version is one we accept.
Not verified
- Freshness. A valid signature is not proof the record is recent. Check the signed-at timestamp yourself.
- Live state. The record is a point-in-time snapshot; the domain configuration may have changed since it was signed.
- Model currency. If the scoring model shown is older than the current one, the score reflects that older methodology.
- Verification runs on Vysiro servers with a symmetric key. It confirms Vysiro authorship; it is not an offline public-key proof you can check without contacting Vysiro.
Building an integration? The same check is available at POST /api/v1/verify-evidence - post the envelope as the request body and read the valid field in the response.