Verify in 60 seconds
Three steps. No account. No install. Works in the browser.
Step 1 — Get a kit
Download the sample kit or use a real kit.zip you received after a PASS evaluation.
Step 2 — Upload to Verify
Open the verifier and drop your kit.zip. Everything runs client-side in your browser — no file leaves your machine.
Step 3 — Read the result
The verifier checks four things automatically:
- Signature validity — the receipt is Ed25519-signed by the issuer key
- Receipt integrity — receipt fields match the manifest
- Manifest hash match — every file hash matches what was signed
- Registry inclusion — the receipt appears in a signed checkpoint
A PASS means the kit was issued by AttestLayer, is internally consistent, and the receipt signature can be verified against the published issuer JWKS. It does not certify controls, assess risk, or replace an audit opinion.
Want a bundled verifier?
Every kit includes a verifier/ folder. Use it to check the kit locally while signature trust still comes from the registry JWKS.
Ready to issue your own PASS kits?