Quick Start
Install the collector and get your first verdict in under five minutes.
How It Works
Understand the physics and signal families behind every ruling.
Explain API
Query the explain endpoint and parse the full verdict JSON.
Integration Guide
Add the collector to your site and start enforcing policy.
What Heretic measures
Heretic runs six independent evidence families on every session. Each family contributes signals measured from the physical layer up — wire data your kernel wrote, hardware outputs, and the gap between what the browser claims and what the physics allows.Network Geometry
RTT vs. speed-of-light floor — physically unreachable locations contradict themselves.
Transport Stack
TCP options and QUIC reachability reveal the true kernel, not the claimed OS.
TLS Construction
ClientHello structure and cipher ordering expose mismatches with the declared browser.
Compute
CPU model count, core performance, and microarchitecture fingerprinting.
Render
GPU, canvas, audio, and frame-rate signals measured under real load.
Declared
Browser-supplied values read only as claims to verify, never as facts.
Get started in three steps
1
Request access
Sign up at heretic.quest for early access. During the apostate tier, the full signal catalogue and explain endpoint are free.
2
Install the collector
Add
@heretic-hq/collector to your site. The collector runs on your origin — no DNS changes, no reverse-proxy tollbooths.3
Read the verdict
Call the explain endpoint with the session ID the collector returns. You get a binary ruling —
contradicted, uncontradicted, or one of three other states — with the evidence attached.