●Provenance · Content Credentials
C2PA checker.
Read the Content Credentials inside an image or video: who signed it, what captured it, and every edit since. No credentials? Witness runs AI detection anyway.
●Platform
Detect it. Explain it. Act on it.
Every scan returns the same three things: a result, the signals that produced it, and a decision you can route on.
01
Detect
Every file is scanned by independent models for images, video and faces, in the web tool, the extension or by API.
3 / 4 signals corroborateCalibrated likelihood
02
Explain
See which signals fired and how strongly. No single model decides; every result comes with its reasons.
Rule: likelihood ≥ 0.85 → Unsigned<3s
03
Route
Branch your workflow on the result. Clean items pass, flags go to review with a full audit trail.
●Coverage
What a credential tells you.
C2PA is an open standard for signed provenance. When it’s present, it’s the strongest signal there is.
Manifest
History
●Method
Three checks, one answer.
Each check runs as an independent model. Results corroborate before a result is returned.
01
Content Credentials
Signed C2PA manifests, validated against the issuer certificate.
02
EXIF & metadata
Camera data, timestamps, generator signatures and signs of stripping.
03
AI detection fallback
Most files carry no credentials. When they don’t, the full detection ensemble runs.
●Who uses it
For anyone who needs the chain of custody.
Confirm a source image came from a real camera before publishing.
Check provenance of exhibits and document it for discovery.
Verify claim photos taken on provenance-enabled devices.
Read and display credentials on uploaded media.
●How it works
Three steps. One result.
Upload or paste a URL
JPG, PNG, WebP or MP4.
Read & validate
The manifest is parsed and the signature checked.
Full history
Signer, device and edits, or an AI result if there are no credentials.
●Integration
Three ways in.
Start with the web app.
Scan in the web app or Chrome extension today. The REST API and MCP server for your AI agents are coming soon. Same detectors, same result, same audit trail.
Web app
AvailableUpload in the web app. Images, video and voice, up to 50 MB. Full results in seconds.
Chrome extension
AvailableScan any image or video from inside the tools your team already uses. No download, no upload.
API
SoonSingle scans, batch jobs and webhooks. Structured JSON with result, likelihood, signals and audit ID.
curl -X POST https://witness.vision/api/v1/detect \ -H "Authorization: Bearer $WITNESS_KEY" \ -H "Content-Type: application/json" \ -d '{"media_url": "https://…/press_photo_0918.jpg"}' → 200 OK · 412ms result: ai_generated · Valid
●Why Witness
Built to be checked.
We say what the system does, what it returns and where its limits are.
Detection built per signal
Specialized models per signal, so you get more coverage and fewer false positives than one classifier.
Reasons, not just a score
Every result shows the signals behind it and where in the file they fired.
Analysed, then gone
Media is never stored, shared or used for training.
Provenance, when it exists
Reads Content Credentials from capture device to current file.
●Explore
One engine. Every surface.
The same detection, result and audit trail across every team that handles media.
Enterprise
Insurance
Screen damage photos and injury documentation for AI generation before they reach your adjusters.
Explore →Enterprise
Legal
Know which exhibits warrant forensic review.
Explore →Enterprise
Fraud detection
Detect AI-generated images, face-swapped video and cloned voices inside your fraud stack.
Explore →Enterprise
E-commerce
Screen damage, missing-item and not-as-described evidence for AI generation and reuse, before the refund is issued..
Explore →Product
Chrome extension
Scan media on any site, social feeds, news, claims portals, case files, and get a result in the side panel..
Explore →What is C2PA?
The Coalition for Content Provenance and Authenticity standard: a signed record of where media came from and how it was changed.
What if a file has no credentials?
Most don’t yet. Witness reads EXIF and runs AI detection so you still get a result.
Can credentials be removed?
Yes, stripping metadata removes them. That’s why a missing manifest is not proof either way, and why detection runs as a fallback.