Pulse proves the person at both ends of an account: a live, legitimate person when it opens, and the same person every time after.
Was a live, legitimate person really behind this identity and device when the account was opened?
Is the same person still behind them now?
Today's checks answer neither for long. If a fabricated identity passes the opening ceremony, every later sign-in faithfully lets the fiction back in. If a real key is later stolen, shared, or coerced, the check approves whoever holds it. A key returning is not a person returning, and the gaps between ceremonies are where fraud lives.
Pulse reads the world your phone actually inhabits: motion, surroundings, interaction rhythm, and the physical behavior of a phone in a real hand. Together those readings form a worldline, the coherent thread of one person, one device, moving through real places and time.
To Pulse, a day reads like chapters: overnight rest with a phone left charging, the morning's first unlock, a walk with its steps and cadence, a drive corroborated by the car it connects to, and the places where you settle. The record is honest about its limits: when the phone saw nothing, a gap stays a gap; if a moment carries no measured value, it is not treated as an event.
Everything is evaluated on the phone, and the phone's own security hardware vouches that its readings are real — Apple's App Attest, the platform certifying that this exact app on this exact device holds the signing key. The raw readings never leave your phone. At the moment of risk, only a single signed claim leaves, chained to that hardware root:
A live person is behind this identity and device, and it is the same person over time.
At the moment an account is opened, Pulse anchors the worldline to a proofed legal identity on the device: a passport chip verified against its issuer, the carrier's record of the phone number, and a driver's license cross-checked against both. From then on the thread is continuous. There is no scheduled moment when nobody is checking.
Establish a live person behind the identity, the evidence, and the device, and lock that proof in place.
Build a privacy-preserving record of coherent human-and-device activity over time: the worldline.
You confirm with your face or fingerprint, and Pulse signs the proof directly into that specific transaction.
Scan a code and two channels see the same moment: the phone in your world and the page in front of you. Pulse scores whether their observations cohere across place, time, network, and rhythm.
No single reading decides. A phone on cellular and a laptop on Wi-Fi still agree the way an ordinary household does. A relay attack cannot: the page lives in the attacker's world while the phone lives in yours. The channels diverge, and each divergence becomes a specific, explainable risk signal.
The bond is not a snapshot. While you stay on the page, your phone holds a live line to it, each heartbeat signed by a key sealed in hardware. When the phone leaves — the app closes, you walk away — the line drops and the page can no longer act. Steal the cookie, replay the traffic; you still cannot hold a line only a live phone can keep.
The result is a claim neither device can make alone: the person bound to the phone is the same person acting on that screen right now, not someone relayed into it.
When your bank calls you, or you call it, Pulse turns your enrolled phone into the second channel: live confirmation that the right person is present and consenting before information, money, or authority changes hands.
That channel also carries your bank's real instructions to your screen, verified. A fraudster coaching you from another line can't forge what your bank actually said. Every confirmed moment becomes a signed receipt both sides can keep.
Pulse is a standards-compliant passkey, a sign-in key that lives on your phone, so a site that accepts passkeys can accept Pulse today. An organization that keeps an approved list adds Pulse with a single identifier, and a QR scan binds Pulse to a page with a lightweight frontend integration. Pulse strengthens the identity checks and sign-in systems you already have; it does not replace them.
That standard is already everywhere. Because Pulse is a real passkey, it signs you in — no password, nothing to phish — at every site that takes one. And where a site or bank builds on Pulse directly, the same key carries the presence proof: a live person, and the same one as before.
Everyday
Banks & government
The Pulse passkey works anywhere passkeys are accepted — this is a partial list. See the full directory →
Remote fraud wins through scale: one operator, fabricated identities, replayed keys, all at digital speed. Against Pulse, every fraudulent act needs a real person behind the account's opening, that person's ongoing relationship with the device, and the same person present again each time. The attack becomes a constrained physical operation instead of an unlimited digital one.
And a standing public bounty invites anyone to prove us wrong. Think it breaks? Try. →
You can’t fake a life in motion.