Cryptographic trust for AI-generated content

Post-quantum Dilithium signatures on every piece of content — immune to future quantum attacks. RSA and ECC are never used, anywhere in the stack.

An invisible watermark spread across 4 independent frequency coefficients per block. Survives JPEG recompression, resizing, and social media upload.

Optional TrustMark (image) and WavMark (audio) neural marks survive the regimes where frequency-domain watermarks fail — screenshot re-capture, heavy recompression, MP3 transcode, and full video re-encodes. A neural match returns high-confidence provenance even after a Twitter/TikTok round-trip.

Sign JPEG/PNG/WebP images, MP3/FLAC/WAV audio, PDF/HTML/plain-text documents, and MP4/MOV/MKV/WebM video. Format detected from magic bytes — no guesswork. Each format gets a native token container and a resilient watermark.

Anyone can verify provenance without an account. Upload an image, get a cryptographic verdict in under a second. Unlimited and always free.

Only hashes and signed records are stored — content never touches Certivu servers beyond the verification request.

A single changed pixel changes the hash, fails the ML-DSA signature, and returns tampered: true immediately.

Revoke a compromised generator and all its signatures become invalid across every past and future verification — no migration needed.

Rotate a generator's signing key on demand. New content is signed with the fresh key while everything signed earlier stays fully verifiable — refresh keys on a schedule without disrupting past provenance.

Writes real, embeddable C2PA manifests into JPEG and PNG — signed with ML-DSA instead of the classical RSA/ECC the ecosystem uses today. Structurally interoperable with Content Credentials, with quantum-resistant signatures only Certivu provides. Also reads third-party C2PA manifests on verification.

64-bit pHash fuzzy lookup via Hamming distance recovers provenance even when watermarks are destroyed by resize, reformat, or heavy recompression.

Sign content straight from the dashboard — drag in a file, pick a generator, download the signed copy. Every format supported, no SDK or API code required.

Drop a live 'Verified by Certivu' badge onto any page with one line of HTML. Self-updates from the public status endpoint, themable, and works embedded anywhere.

Verify AI assets in CI with one CLI step and fail builds that lack provenance. Build against a free sandbox with isolated data and test keys that never consume quota.

Share a public, org-branded verification certificate for any signed asset — your logo, accent color, and name on a page anyone can open. Powered by the public status endpoint, no login required. Growth plan and above.