Protect the actions that matter, with nothing for the people taking them to solve. Sign-in, account creation and checkout are common targets for automated abuse. MANDATE verifies the browser behind those actions and leaves the decision with your application.
Proof travels with the request
The browser produces short-lived, opaque proof and sends it with the protected request. It is not a JWT or a readable summary of the browser.
Checked against live state
Your server submits that proof for hosted verification, which cross-references server-side state, including replay and session continuity.
Nothing to solve
The core flow has no CAPTCHA, checkbox, puzzle or branded interstitial. Your application keeps its own success and error states.
Your application decides
Browser evidence is one input. Authentication, permissions and business rules stay in your code.
02 — PRINCIPLES
Invisible to people.Honest with your team.
Two ideas shape how MANDATE is built, from the browser script to the dashboard.
I — FOR THE PEOPLE ON YOUR SITE
Nothing to solve
Verification runs behind the actions people already take, such as signing in or checking out.
No CAPTCHA, checkbox or puzzle in the core flow
No branded interstitial
Your application owns its success and error states
Opaque proofHosted verificationYour decision
II — FOR YOUR TEAM
Evidence before enforcement
Protection starts by observing one route. Anything stronger is a separate, deliberate step.
A new connection starts paused; you choose when to observe
Grouped evidence, without raw browser fingerprints
Capability pages label what is in preview or beta
PausedObserveReview
03 — COMPANY
MANDATE Security Inc.
The company behind MANDATE.
Company
MANDATE Security Inc., a Delaware corporation formed on September 28, 2026.
Product
MANDATE launched in 2026 and is in public beta. Each capability page states its current status.
Public beta
The public beta is provided at no cost and on a best-effort basis. MANDATE offers no public uptime guarantee or service-credit program. Any commitment must be in a separate signed agreement.