Open Source
Built in the Open
Our client SDK is MIT-licensed. You can read every line that runs in your users' browsers. Transparency is not a feature — it's how we build.
github.com/Tracio-App/sdk — MIT-licensed, public nowOur Open Source Philosophy
We believe that security software must be transparent to be trusted. Three pillars guide how we build.
Transparency
Our client SDK source code is public: you can read every line of the package you install, its network calls and its endpoints. The collection agent it loads is generated dynamically and rotates, which is what keeps it hard to reverse-engineer — the SDK around it hides nothing.
Auditability
The SDK source is published as a read-only mirror: security teams can read what leaves the browser, the data we send, and the endpoints we contact. Building it from source is not documented yet.
Community
The public repository is a read-only mirror of our primary source tree and does not accept issues or pull requests. Send security reports to security@tracio.ai.
What's Open Source
MIT License — use it however you want
Client SDK
Full source for the JavaScript agent that collects device signals. TypeScript, zero dependencies, MIT license.
Framework SDKs
React, Vue, Angular, and Svelte wrappers live in the same public monorepo as the core SDK — one place to read how every integration works.
Signal Documentation
Every category of signal we collect is publicly documented with its purpose and stability characteristics — see the Signal Library and docs. The exact probe set and its weights stay internal, because publishing them would hand attackers the test suite.
What's Proprietary
Our server-side competitive advantage
AI Engine
Our advanced matching and identification algorithms that achieve 99.5% accuracy. This is our core IP.
Server Processing
Backend infrastructure for real-time signal processing, scoring, and visitor identification at scale.
Infrastructure
Multi-region deployment, ClickHouse analytics, Kafka streaming, and our anti-tampering detection layer.
Read the Code
The client SDK and framework wrappers are public under the MIT license. Read which signals we collect and see how it works.