Proof-of-Life confirms that a real person is physically present, with a 9-second motion check on the phone they already own. No camera, no face, no fingerprint, no documents. Replace your CAPTCHA in two lines, and add a presence check where MFA and security keys cannot tell a person from a bot.
Bot figures: Imperva (Thales) 2025 Bad Bot Report, 2024 data.
What your users see
On a phone, the check runs in the page: three random moves with the phone in the hand, then a confirmation with the phone's own screen lock. On a computer, the widget shows a QR code and the person finishes on their phone. A Verified Human Pass then lets them through on your site for 30 days, usually with one screen-lock confirmation.
This demo is simulated in the page, so nothing is sent anywhere.
PoL Gate widgetSimulated demo
Products
Every product runs the same Proof-of-Life engine and returns the same signed result: a live person was present, plus a uniqueness confidence score.
A drop-in widget for sign-ups, logins, checkouts and votes. People verify once and carry a reusable Verified Human Pass.
For: NGOs and aid programmes, airdrops and DAOs, ticketing, marketplaces
A presence check at risky moments, bound to the exact action and, after the first trusted step-up, to the person who owns the account. A security key proves the device. Proof-of-Life shows a live person is holding it.
For: fintechs, platforms, online voting
Confirms a live person holding an enrolled passkey bound to the account, without SMS codes or help-desk calls. Combine it with your own recovery controls such as a waiting period and notifications.
For: company IT and security teams, fintechs
How it works
Three random moves of the phone, such as tilt left, lift and turn it over. The encrypted motion stream is checked on Helius servers for the right moves in the right windows, the small natural tremor of a hand holding a phone, realistic timing and replays.
A passkey-based device anchor, proof of history across days and places, co-verification by a verified person in the same area, and phone-farm detection, combined into a confidence score you set the threshold for.
A signed pass any service can verify against our published keys. A hash can optionally be anchored on Solana for public tamper evidence.
Each site sees a different pseudonymous ID for the same person, so passes cannot be used to follow people from site to site.
Compare
Swipe the table sideways to see every column.
| Tool | Question it answers | Stops AI bots | Evidence of one person | Uses biometrics |
|---|---|---|---|---|
| CAPTCHA (reCAPTCHA, hCaptcha, Turnstile) | Human or bot? | Increasingly not | No | No |
| MFA (SMS, authenticator apps) | Is this the account owner? | No | No | No |
| Security keys and passkeys | Is this the owner's device? | No | No | No |
| Iris and face registries | Is this a unique human? | Yes | Yes | Yes |
| Proof-of-Life | Is a real person present, and how likely is it they are unique? | Designed to (early access) | Confidence score | No |
Launch pricing
A ceremony is a full Proof-of-Life check that passed. A pass check is a server check of an existing Verified Human Pass, and is always unlimited. Failed or abandoned checks are not billed.
Growth
Business
Enterprise
Secure checkout by Stripe: card, Apple Pay or Google Pay. Prices in EUR, excluding VAT; add your VAT number at checkout. Cancel any time from the link in your receipt. Impact pricing: registered charities and NGOs get 50% off any paid plan. Email us for your code, then enter it at checkout.
Privacy and trust
The Proof-of-Life engine runs on HeliusOS, which is designed to pass every request through five layers: Sovereign Vault (encryption of every upload and of sensitive records at rest, keys rotated every 30 days), Perception Shield (request and client-signal inspection), Cognitive Firewall (real-time anomaly detection and blocking), Device Binding (passkey-based device keys) and a Data Integrity Ledger (a tamper-evident, signed audit log).
PoL Gate is a bot-prevention service. In regulated payments, PoL Step-up is an additional anti-fraud layer, not a PSD2 strong customer authentication factor, until it is certified for that use. No biometric or special-category data is processed. A data protection impact assessment and legal opinion are pending.
In an early field test with 50 people on 50 devices, 20 of 20 spoofing attempts were blocked. Thresholds are now being recalibrated on real-device recordings. An independent audit is planned before general availability. Read the full privacy notice.
Early access
We are onboarding early-access partners now, starting with impact organisations, crypto communities, ticketing, fintech and move-to-earn apps. Tell us what you are protecting and we will set up a pilot.
Prefer email? Write to hashim@heliusnetwork.com