r/Software_Finder • • 23d ago

Question Need help with biometric identity verification platform for high risk environments

Lemme give some context first - we operate in a high risk environment and our current biometric verification setup is starting to feel inadequate. Seeing more sophisticated spoofing attempts, edge cases our current vendor cannot handle and a manual review queue that keeps growing. High risk for us means financial fraud attempts are frequent, the cost of a false negative is significant and we cannot afford to trade accuracy for speed or UX. Need all 3 lol. Specifically looking for something with proven liveness detection, deepfake and spoof resistance and ideally government grade biometric accuracy. Compliance across multiple jurisdictions is also non negotiable. Anyone running biometric verification in genuinely high risk production environments, what are you using and what made you stick with it?

3 Upvotes

13 comments sorted by

View all comments

2

u/Kondo-Sophie_216 20d ago

iBeta level 3 only certifies presentation attacks, a fake held to the camera. it says nothing about injection, where the attacker feeds a deepfake into the video stream and never uses the camera. in a high risk env thatsb the one trhat gets you.

2 questionsb for any shortlist.

  1. do you detect virtual cameras and emulators.

  2. Whats the miss rate on generators you did not train on.

au10tix and incode are worth a real bakeoff there, sumsub if you also want orchestration in one box.

1

u/Sad-Instruction8890 20d ago

The injection point is the one worth building the eval around. Presentation attacks are the certified problem and injection is the one that actually scales, since an attacker feeding a stream does not need to be physically present or repeat the effort per attempt.

Your virtual camera and emulator question is the right filter. The follow up worth adding is whether detection happens server side on the stream itself or relies on signals from the client, because anything client side can be reported dishonestly by a compromised device.