Skip to main content
A browser reports its operating system, hardware, timezone, and graphics capabilities. Heretic tests those declarations using browser workloads and a direct connection to its sensor.

Direct connection

The collector connects to the Heretic sensor, which records TCP, TLS, HTTP, and QUIC details. These observations are separate from the values reported by page JavaScript. Keep that connection direct. A CDN or proxy in front of the sensor would change what it measures.

Evidence families

Findings

Each finding names an observed condition. A browser property may have been replaced, two declarations may disagree, or a protocol field may violate a fixed constraint. An absolute or composite contradiction sets the verdict to contradicted. Conditional and weak findings provide context without changing the verdict. Required measurements that do not complete produce refused. The signal reference describes each finding.

Completion

A successful submission produces a result that is ready to read. An opened session with no valid submission becomes refused after 15 seconds. Once finalized, an assessment does not change.

Identity

Available browser inputs also produce site-scoped identifiers. Your application can compare these with its account records. Matching identifiers mean matching normalized inputs; different devices can share them. Identifiers do not affect the verdict. Read verdicts and coverage for the result states, or the identity schema for the fields and comparison rules.