Easy
integration
Three ways to run a check: one script tag, a call from your backend, or a link you send to someone. Pick the one that fits how much you want to build.
Choose your integration method
Embed the widget
One script tag on your page
Drop the verification widget into your site. No build step, no framework requirement.
<script src="https://verify.cognau.com/embed.js"></script>
<script>
const v = Cognau.open({
link: 'cgn_vl_…',
onVerdict: r => { v.close(); console.log(r.passed, r.sessionId) }
});
</script>Server API
Create sessions with your secret key
The production shape: your backend opens the session, the browser only ever holds a single-use token.
// Your server, with your secret key
POST /api/v1/session/create
Authorization: Bearer cgn_sk_live_…
{
"platform": "web",
"clientReference": "user_4821"
}
// Returns a single-use token for the browser
{ "sessionId": "…", "sessionToken": "cgn_st_…" }Verification links
No integration at all
Send someone a URL, they complete the check, you get the result. Useful for trials, support flows, and one-off verifications.
POST /api/v1/cockpit/verification-links
Authorization: Bearer cgn_sk_live_…
{
"label": "Acme onboarding",
"clientReference": "user_4821",
"maxUses": 1
}
// → https://verify.cognau.com/?link=cgn_vl_…How It All Works Together
Session Creation
Your server opens a session with your secret key, or you send someone a verification link
The check runs
The widget opens the camera and issues a short sequence of prompts, drawn at random for that session
Analysis
Frames are analyzed as they arrive, never on the user device, so the result cannot be tampered with
Result
A pass or fail with a confidence score, delivered by signed webhook to your server
Capture pruned
An abandoned session's frames are deleted within 24 hours. A scored one keeps a small sample as evidence, on a schedule published in our biometric data policy
Built for Enterprise
Enterprise Security
Encrypted transport, single-use credentials, time-limited sessions, and deletion enforced by the database rather than by a job that can be forgotten.
Scored as it runs
Frames are scored as they arrive over a persistent connection, so the result lands as soon as the check itself is over, usually inside a minute.
Developer Friendly
Comprehensive APIs, detailed documentation, and modular architecture for easy integration.
Ready to secure your platform?
Confirm a real person is on the other end, before the decision that depends on it. Create an account and run your first check in the sandbox, free.