What marks is this file carrying?
Drop an image or audio file and Infrisible reads the marks that tools leave behind — Content Credentials, AI-generator metadata, invisible watermarks. The scan runs inside your browser. The file is never uploaded.
More than meets the eye · and more than you hear
It tells you what it found — and what it cannot tell you.
photo-2847.jpg · 3.1 MB · scanned locally
Presence is reported, not cryptographic validity. Validate at contentcredentials.org/verify.
Illustrative example, not a live scan.
Your file never leaves your device.
Not a promise in a privacy policy — a property of how the page is built, and one you can check yourself.
No server
There is no upload button, no account, and no backend to send anything to. The scanner is a WebAssembly module of roughly 160 KB.
No network
The page's security policy forbids any network request other than loading its own files.
Verify it yourself
Open your browser's Network tab and scan a file. You will see the page load, and nothing else.
What it finds
Marks that generation and editing tools leave behind, read directly from the file.
| Mark | What it tells you | File types |
|---|---|---|
| C2PA Content Credentials | Whether a manifest is present, and which tool signed it — for example OpenAI, ChatGPT or Adobe Firefly | JPEG, PNG, WebP, WAV, MP3, MP4/M4A |
| AI-generator metadata | Parameters left by image tools: Stable Diffusion / AUTOMATIC1111, ComfyUI workflows, NovelAI tags | Image formats |
| IPTC / XMP digital source type | Flags marking a file AI-generated or AI-edited, including Google's "Made with Google AI" credit | Image and audio formats |
| Stable Diffusion invisible watermark | The pixel watermark embedded by SD 1.x, 2.x and SDXL, decoded from the pixels with a bit-agreement score | PNG, JPEG (≥ 256×256) |
What it will not tell you
- This is not an AI detector. It reads marks that tools leave behind. No marks found does not mean a file is human-made.
- It does not detect Google SynthID, Meta Stable Signature or Digimarc. Those are proprietary, and the scanner points you to where to check instead.
- It reports C2PA presence, not cryptographic validity. For validation it points to contentcredentials.org/verify.
- The watermark check is skipped for formats it cannot decode in the browser — WebP, GIF, HEIC — and for images under 256×256. It says so each time rather than reporting a clean result.
That candor is the point. A confident answer you cannot check is worth less than an honest one you can.
The free scanner is one part of a larger toolkit.
The desktop app hides, finds and verifies messages and marks across images, audio and video. See pricing.
| Domain | Modes | Notes |
|---|---|---|
| Image | lsb, dct, auto | LSB on PNG/BMP; luma DCT with QIM and bit-repeat survives moderate JPEG |
| Audio | lsb, stream, lowbass, phase, echo, ofdm, infrasound, auto | LSB for capacity; stream is self-syncing for live windows; band modes carry short IDs |
| Video | lsb, dct, auto | Still-frame embed via ffmpeg; keep the export, social re-encode destroys it |
| Monitor | 7 detectors | Live watch over loopback, URL, mic or a watched folder — five detectors need no key |
| Provenance | provenance, c2pa-validate | Content Credentials, XMP/IPTC AI flags, generator metadata — display only |
Encrypted by default
Every payload is compressed, framed, sealed with ChaCha20-Poly1305 (key derived via scrypt), then protected with Reed-Solomon error correction.
Blind steganalysis
Orphan-LSB analysis, band-edge anomaly detection, file carving and an SSTV decoder — finding hidden content without holding the key.
Measure it yourself
bench embeds a payload, applies real distortions, and reports what survived. No robustness claim you cannot reproduce.
What survives what
Stated plainly, because the failure modes matter more than the capabilities.
| Path | Keep as | Survives | Usually dies |
|---|---|---|---|
| Image LSB | PNG | Lossless copy | JPEG re-save, heavy resize |
| Image DCT | PNG | Mild JPEG, often q≈75–90 | Heavy recompress or scale |
| Audio LSB | WAV / FLAC | Lossless rewrite, volume-neutral copy | MP3/AAC re-encode, phone recording |
| Audio lowbass | WAV / FLAC | Clean lossless file workflows | EQ or high-pass, phone, MP3 |
| Video still | MKV / MP4 | Careful lossless copy | Social re-encode, phone share |
Band modes carry short text identifiers, not files. Infrasound is deliberately fragile outside controlled, file-domain use.
Safety is enforced in code, not just documented.
The monitor captures audio, which is a different posture from reading a file on disk. Infrisible treats it that way.
Before you use the capture features
- System loopback captures everything playing on the machine, including video calls and other people's voices. Consent is enforced in the session layer, not merely in the UI.
- Sub-20 Hz energy should never be played loudly. Infrasound mode is for controlled, lossless workflows only.
- Never embed illegal content. Respect copyright and privacy law.
The scanner is free. The desktop app is $49 a year — and you keep it.
Pricing shown for planning; checkout arrives with public release.
Scanner
- The browser page described above
- Runs on your device; nothing is uploaded
- No account, no licence key
- Content Credentials, generator metadata, IPTC/XMP flags, the SD pixel watermark
Desktop · personal
- The full local app
- Real-time monitor with seven detectors
- Cross-media embed and extract
- Cryptographic C2PA validation
- Batch and bench
- After twelve months, you own a version outright
Commercial
- The identical binary
- Licensed for organisational use
- Distinguished by licence terms, not features
- Same perpetual floor
The perpetual floor
Twelve months of continuous payment permanently entitles you to the version that was current when those twelve months began. Each completed year moves the floor forward. It never moves back.
- Pay for one year and you own the version from month 0, for good.
- Pay for two and you own the version from month 12.
- Stop paying and the app keeps working. No expiry, no nag screens, no degraded mode.
- If a newer build falls outside your entitlement, it tells you which version you do own and where to get it — then exits cleanly.
Licensing makes no network request.
Not for activation, not for validation, not for update checks, not for analytics. The licence is a signed token you paste or drop in a file, checked against a public key compiled into the app. No hardware fingerprinting, no machine binding, no seat counting.
This is a local tool with no cloud component, so there is no service to lose access to. The check is plain code that ships with the app, and you can read it.
Questions
Is this an AI detector?
No. It reads marks that tools leave behind. It cannot tell you whether something was made by a person.
Why did an obviously AI image come back clean?
Because the tool that made it left no mark, or the mark was stripped — screenshots, re-saves and most social platforms remove metadata. A clean result is not evidence of anything.
Does it work offline?
Yes. Once the page has loaded it needs no network at all, by design.
Can it validate Content Credentials?
The scanner reports presence and the signing tool. For cryptographic validation, use contentcredentials.org/verify.
Which formats?
JPEG, PNG, WebP, WAV, MP3 and MP4/M4A for Content Credentials. The pixel watermark check covers PNG and JPEG at 256×256 or larger.
How much does it cost?
The browser scanner is free. The desktop app is $49 a year for personal use and $199 per seat per year for organisations. Pricing is planned; checkout arrives with public release.
What happens if I stop paying?
The app keeps working. After twelve months of continuous payment you permanently own the version that was current when that year began, and the floor moves forward with each completed year. Nothing expires and nothing nags.
Does licensing phone home?
No. The licence check makes no network request of any kind. It is a signed token verified locally against a public key in the app.
Infrisible is in beta and the pricing above is planned, not yet live. It is not affiliated with, endorsed by, or a certifier for Google, Adobe, OpenAI, the C2PA, or any other organization whose marks it reads. Results describe the marks found in a file and nothing more. Steganography features are provided for research, watermarking and provenance work; users are responsible for complying with copyright, privacy and applicable law.
More than meets the eye.
And more than you hear.
More than meets the eye. · Built by MadMooze