RSDevice Risk Signals

React Native security telemetry

Raw device risk signals for React Native

Open-source Android and iOS observations for root, jailbreak, emulator, Frida, tampering, network, and transaction context, collected locally without a vendor backend. Device context. Your decision.

Start integrating Explore signals View on GitHub
Signal Bench example app showing a raw device signals JSON response
local_only: true
transport: host_application
verdict: not_included
probe_outcomes: independent

Observations, not a black box.

The SDK returns explainable fields and per-probe outcomes. Your backend owns calibration, scoring, policy, and review.

No embedded transport

No vendor endpoint, hidden upload, retry queue, or remote configuration.

Data minimization controls

Consent gates, probe selection, field projection, timeouts, and default-off sensitive probes.

Documentation for each decision maker

Start with the implementation path that matches your role, then use the catalog as the shared contract between mobile, backend, privacy, and risk teams.

Mobile integration

Install the TurboModule, configure consent, collect an event, and send it using your existing authenticated API.

Open integration guide

Signal catalog

Review every probe, selectable field, platform boundary, outcome, and backend envelope rule.

Inspect the contract

Backend integration

Implement the same ingestion contract with Django, FastAPI, Express, or Go, including validation, idempotency, indexing, and retention.

Build the endpoint

AI integration kit

Copy source-grounded prompts for explaining the SDK, changing a mobile app, designing the backend contract, and reviewing privacy.

Open prompt library

Technical guides

Understand root, jailbreak, emulator, Frida, platform attestation, and competing React Native library architectures.

Read implementation guides

Product use cases

Follow end-to-end patterns for authentication, payments, account recovery, promotions, and protected actions.

Choose a product flow

Risk team playbook

Turn raw observations into governed model features, quality checks, and explainable investigation context.

Plan feature engineering

Privacy and governance

Apply purpose limitation, retention, consent, access controls, and missing-data semantics before production collection.

Review safeguards

Install and collect

React Native 0.76 or newer with the New Architecture is required. Expo Go is not supported.

npm install react-native-device-risk-signals
import { consentFor, DeviceIntel } from "react-native-device-risk-signals";

const deviceIntel = new DeviceIntel({
  sessionId: checkoutSessionId,
  consent: consentFor([
    "device_identity",
    "application",
    "os_integrity",
    "device_security_posture",
    "network",
    "runtime",
  ]),
});

const event = await deviceIntel.collect();
// Send with your existing authenticated API client.
Collection is local. The package does not create a persistent device identifier and does not send the event anywhere.

Evaluate it with us

The package contains no adoption telemetry. Public compatibility evidence and integration feedback come directly from the React Native community.

Ask an integration question

Discuss architecture, consent, field selection, backend handoff, and platform-specific behavior.

Open Q&A

Report a physical device

Contribute a sanitized Android or iOS result to the transparent compatibility matrix.

Submit a report

Keep the project independent

GitHub Sponsors and TON donations fund maintenance, physical-device testing, documentation, and new raw-signal research without adding a vendor backend or adoption tracking.

GitHub Sponsors

Use GitHub for recurring or one-time support connected to your account.

Sponsor AfanasievN

Every sponsorship helps cover issue triage, React Native compatibility, native QA, and practical integration guides.

Donate with TON

Scan with a TON-compatible wallet or open the pre-filled Tonkeeper transfer.

TON donation QR code for the React Native Device Risk Signals project Open Tonkeeper UQAMfkOwBBk_TZyn7LP2o9UgMrNW3GCLs3IJKOVxYBdzr0IK