Servers can check if a request comes from a real Apple device running your actual app. Apple provides two tools for this: DeviceCheck and App Attest. These tools help stop fraud and protect your backend.
DeviceCheck gives each device two bits you can use as simple flags. For example, you can mark if a device has claimed a promo. App Attest uses the Secure Enclave to create a cryptographic proof. This proof shows the app is genuine.
By using these techniques you can detect compromised devices and secure sensitive API endpoints. Your server verifies each request with Apple's servers.
Global
mkdir -p ~/.claude/skills/device-integrityProject
mkdir -p .claude/skills/device-integritySource Repository
Azure Compliancemicrosoft/azure-skills
Audit Azure compliance and Key Vault expiration with azqr scans
Firebase Security Rules Auditorfirebase/agent-skills
Find weak spots in Firestore rules and get clear fixes
Golang Securitysamber/cc-skills-golang
Find and fix security flaws in Go code using expert guidance and automated tools
Firestore Security Rules Auditorfirebase/agent-skills
Audit your Firestore security rules and get a detailed vulnerability score from 1 to 5
Skill Vetteruseai-pro/openclaw-skills-security
Manual skill vetting with security checks before any install
Two Factor Authentication Best Practicesbetter-auth/skills
Secure user logins with two-factor authentication using Better Auth
Clerk Nextjs Patternsclerk/skills
Secure your Next.js app with Clerk middleware, server actions, and caching
Persona It Admingoogleworkspace/cli
Keep your digital workspace safe with IT admin security workflows