Every identification, live
New events appear within seconds, with the visitor, the external ID and when.
Device identification
for every signup
Know a returning browser even in incognito or with cookies cleared, catch bots and spoofed devices, and confirm every result on your server before you act on it.
See what we can tell about this browser. Running the demo sends its signals to us and stores an ID in it.
What every identification tells you
In the API for your code, and in the dashboard for whoever reviews the case.
Bots and spoofing flagged
Automation, headless browsers, software rendering, replaced natives and time zones that don't match.
Shared devices show up
A device lists every external ID seen on it, so multi accounts stand out.
Verify on your backend
The browser only gets a request ID. Your server fetches the event with its secret key and decides.
Forget an external ID in one call
Delete an external ID and every event and device link of it is gone.
Pay as you go
No plans or commitments. After each billing cycle you pay for the identifications you used, each with every signal, the server API and the dashboard.
See plans and every price →Prices shown do not include applicable taxes or fees (e.g. VAT).
From install to verified in three steps
The browser gets a request ID, your server gets the whole story.
- 1
Add the agent
One script tag served by the api, or a typed ES module from npm.
login.html <script src="https://zenocdn.net/agent.js"></script> <script> const agent = FingerprintAgent.start({ endpoint: 'https://zenocdn.net', publicKey: 'pk_...' }) </script> - 2
Identify in the browser
Start it when the form opens, get a request ID once the user logs in.
login.js // After a successful login: const { requestId } = await agent.get({ externalId: user.id }) await fetch('/api/login/verify', { method: 'POST', body: JSON.stringify({ requestId }) }) - 3
Verify on your server
Read the event with the secret key and decide. The browser never sees a flag.
login.server.ts const response = await fetch(`https://api.zeno.id/events/${requestId}`, { headers: { 'Auth-API-Key': process.env.FP_SECRET_KEY }, }) const event = await response.json() if (event.bot === 'bad' || event.riskScore >= 15) { throw new Error('Review this login') }
REST, no SDK lock-in
GET, PATCH and DELETE on /events, /visitors and /external-ids, with one header.
Keys that are hard to leak
pk_ and sk_ prefixes with a checksum; secret keys are stored as a hash and shown once.
Search every event
Filter by visitor, external ID, IP, flag, bot verdict, risk score and date.
Erase an external ID in one call
DELETE /external-ids/{id} removes every event and device link of that ID.
Questions
Does it work with my framework? +
Yes. The agent is a plain ES module without dependencies, so it runs in React, Svelte, Vue or no framework at all. Without a bundler, load /agent.js and use the global FingerprintAgent.
Is a shared visitor ID proof of a multi account? +
No. Identical devices, like the same phone model on the same OS, have the same fingerprint, so a browser without its stored ID can be matched to another's visitor ID. Treat it as a lead to review together with the external IDs, flags and connection.
What does the agent collect? +
More than 100 device signals: canvas, WebGL, audio, fonts, screen, hardware, locale, plugins and automation leftovers. It never reads WebRTC network addresses.
What happens at a budget or the usage limit? +
Identification pauses quietly: the agent resolves with capped instead of a request ID, so your users never see an error and your login keeps working. Set budgets per day, week or month, and a spend limit per key. Nothing else is rate limited.
What if it's not for me? +
You get your money back. Not satisfied in the first three months after your first paid bill? We refund everything you paid in that time, no questions asked.
Where is the data stored? +
In the EU, in AWS eu-west-1. Events are kept until you delete them, or for 1, 3 or 5 years if you pick that, and one API call erases everything stored for one of your users.
Your first identification, in minutes
Pay as you go, every signal included.