— For digital forensics specialists
Built for evidentiary standards, not demos.
Most detection tools are optimized to impress in a clean-image demo. Yours has to survive cross-examination on a screenshot of a WhatsApp image. That gap is exactly what Vestige Forensics is built around.
— The problem
Naive thresholds collapse under cross-examination
Run a public detector at its default 0.5 cutoff and it will flag a fifth of genuine messenger photos as AI — treating compression artifacts as evidence of synthesis. One inflated false-positive rate is all it takes to lose a court's trust in the method.
Measured on our benchmark (run full_v4)
27%
real photos flagged by a public detector @ 0.5 under a messenger re-encode
≤5%
our standard cap — by construction
≤1%
our strict cap for evidentiary work
Vestige verdicts never use 0.5. Thresholds are set on a named calibration run so the false-positive rate on real photographs is capped — and the cap is printed on the report.
— Capabilities
What the lab actually needs
Every feature below exists because a report has to hold up months later, in front of someone paid to break it.
FPR-capped verdicts
Standard (≤5%) for triage, strict (≤1%) for evidence. tpr@fpr1 is the number a defense expert will ask about — it's on the report before they ask.
Chain of custody
SHA-256 of the exhibit bytes, a hash of the report document, pinned pipeline versions, and deterministic re-analysis of identical bytes.
Condition-aware power
Detection rates are quoted under the image's estimated condition — including social_chain, the screenshot-of-a-WhatsApp-image that actually walks into your lab.
Expert-witness support
Detector provenance from peer-reviewed venues, calibration disclosures, methodology pack, and a limits section on every report.
A named checkpoint, not a black box du jour
The primary detector is a pinned fine-tuned checkpoint (sha-256 on record) calibrated on a named run. Nothing retrained between your intake and your testimony.
Zero retention, verifiable custody
Exhibits are scored in memory and never stored — nothing to subpoena, breach, or leak. Detector versions stay pinned by hash, so the same exhibit can be re-analyzed identically if the matter reopens.
— Workflow
Intake to testimony
01
Intake
The exhibit is SHA-256-hashed on arrival; every downstream artifact references that hash. Identical bytes always produce the same report id.
02
Analyze
A fine-tuned primary detector — pinned by checkpoint hash — scores under a pinned pipeline version; independent supporting signals corroborate. No tunable knobs to defend.
03
Report
Verdict at your chosen FPR cap, detection power under the estimated condition, limits, and a hash of the report document itself.
04
Testify
Methodology pack, detector provenance (CVPR 2023–2025), calibration disclosures, and the exact numbers a defense expert will probe — already on the record.
“At a 1% false-positive standard, the calibrated detection rate under this exhibit’s condition is 43%. A flag is strong evidence; the absence of one is not.”
— the kind of sentence our reports put on the record, with the calibration run named
Bring a defensible number to your next case
Run one exhibit free and read the full report — thresholds, limits, hashes and all. Then talk to us about lab plans and the methodology pack.