> ## Documentation Index
> Fetch the complete documentation index at: https://docs.insightsecure.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Device Intelligence — Overview

> What Device Intelligence covers, and how the pieces fit together

Device Intelligence (DI) answers one question at the point of login, checkout, or any sensitive action: **is this device and session trustworthy right now?** It combines three layers:

<Steps>
  <Step title="RASP — on-device detection">
    A mobile/web SDK that runs entirely on the user's device: root/jailbreak detection, emulator detection, debugger and dynamic-instrumentation (Frida) detection, app tamper checks, and more. See [RASP in detail](/device-intelligence/rasp).
  </Step>

  <Step title="Beyond RASP — network and identity signals">
    Signals that only make sense with a backend and history behind them: device-to-user graph mapping (is this device shared across many accounts?), device binding, SIM/network signals, and SSL pinning enforcement. See [Beyond RASP](/device-intelligence/beyond-rasp).
  </Step>

  <Step title="Delivery — SDKs, APIs, and live telemetry">
    Native Android/iOS SDKs (and a Flutter plugin wrapping both), a signed ingest API, and real-time delivery to your systems via webhook or live socket channel. See [SDKs](/device-intelligence/sdks) and [API Authentication](/api-reference/authentication).
  </Step>
</Steps>

## What Device Intelligence is built to catch

<CardGroup cols={2}>
  <Card title="Account takeover" icon="user-lock">
    New-device + VPN + credential-stuffing patterns at login, before a session is trusted.
  </Card>

  <Card title="Card testing / BIN attacks" icon="credit-card">
    Pasted card numbers combined with rapid OTP failures — a classic bot signature.
  </Card>

  <Card title="Repackaged / tampered apps" icon="triangle-exclamation">
    Signature-mismatch detection hard-blocks regardless of every other signal — a repackaged APK is a different binary, not a risk gradient.
  </Card>

  <Card title="Multi-accounting / device farms" icon="diagram-project">
    Device-to-user graph mapping surfaces one device transacting across many unrelated accounts.
  </Card>

  <Card title="Automated / scripted abuse" icon="robot">
    Behavioral entropy (mouse/touch timing, form-fill speed) and headless-browser/instrumentation detection.
  </Card>

  <Card title="MITM / traffic interception" icon="user-secret">
    SSL certificate pinning, enforced at the SDK level, independent of the OS trust store.
  </Card>
</CardGroup>

## Where to go next

<CardGroup cols={3}>
  <Card title="RASP in detail" icon="shield-halved" href="/device-intelligence/rasp" />

  <Card title="Beyond RASP" icon="network-wired" href="/device-intelligence/beyond-rasp" />

  <Card title="SDKs & integration" icon="code" href="/device-intelligence/sdks" />
</CardGroup>