Skip to content

Open Source

Built in the Open

Our client SDK is MIT-licensed. You can read every line that runs in your users' browsers. Transparency is not a feature — it's how we build.

github.com/Tracio-App/sdk — MIT-licensed, public now

Our Open Source Philosophy

We believe that security software must be transparent to be trusted. Three pillars guide how we build.

Transparency

Our client SDK source code is public: you can read every line of the package you install, its network calls and its endpoints. The collection agent it loads is generated dynamically and rotates, which is what keeps it hard to reverse-engineer — the SDK around it hides nothing.

Auditability

Security teams can audit what leaves the browser, the data we send, and the endpoints we contact. Compliance reviews take hours, not weeks.

Community

Bug reports and feature requests are welcome on GitHub. The public repository is a read-only mirror of our primary source tree, and issues filed there reach the engineering team directly.

What's Open Source

MIT License — use it however you want

Client SDK

Full source for the JavaScript agent that collects device signals. TypeScript, zero dependencies, MIT license.

Framework SDKs

React, Vue, Angular, and Svelte wrappers live in the same public monorepo as the core SDK — one place to read how every integration works.

Signal Documentation

Every category of signal we collect is publicly documented with its purpose and stability characteristics — see the Signal Library and docs. The exact probe set and its weights stay internal, because publishing them would hand attackers the test suite.

What's Proprietary

Our server-side competitive advantage

AI Engine

Our advanced matching and identification algorithms that achieve 99.5% accuracy. This is our core IP.

Server Processing

Backend infrastructure for real-time signal processing, scoring, and visitor identification at scale.

Infrastructure

Multi-region deployment, ClickHouse analytics, Kafka streaming, and our anti-tampering detection layer.

Read the Code

The client SDK and framework wrappers are public under the MIT license. Audit the signals, file issues, or just see how it works.