Quick Start
Install the collector and read your first verdict in under five minutes.
How It Works
Understand the physics, evidence families, and ruling algebra behind every verdict.
API Reference
Full reference for the explain endpoint and verdict JSON schema.
Pricing
The full signal catalogue is free during early access on the apostate tier.
Why verdicts, not scores
Most bot-detection and fraud-prevention tools return a probability score. You pick a threshold, accept the false positives, and live with the ambiguity. Heretic takes a different position: where the physics is binary, the verdict should be binary too. When a session claims Tokyo and completes a TCP handshake in 2 milliseconds from Warsaw — a journey that light alone needs 27 milliseconds to make — no benign explanation exists. The verdict iscontradicted, conclusive: true, and the evidence is right there in the JSON response. You block or challenge. You do not tune a threshold.
When Heretic does not have enough evidence to reach a verdict, it says insufficient. It does not guess.
The six evidence families
Heretic runs six independent measurement families on every session. A verdict requires corroboration across families — a single compromised signal cannot flip a ruling on its own.Network Geometry
RTT measured against the speed-of-light floor for the claimed location.
Transport Stack
Kernel TCP options and QUIC reachability reveal the true OS.
TLS Construction
ClientHello structure and cipher ordering fingerprint the real client.
Compute
CPU model corpus and core performance measured under load.
Render
GPU, canvas, audio, and frame timing under real workload.
Declared
Browser-supplied values read only as claims to check, never as facts.
Get access
Heretic is in early access. The apostate tier is free and includes the full signal catalogue, the explain endpoint, and the live Warsaw bare-metal edge.Request access at heretic.quest. Once approved, sign in to the dashboard to create a site and get your API key.