Integrity Shield Pro

⤓ Installation

Import the package and you're ready — the core needs no extra packages.

Requirements

⚡ Quick Start — No Code

A non-coder can get working protection by clicking, not scripting.

Built-in profiles

💻 Quick Start — Scripting

Prefer code? Initialize the manager directly. (A code-first Initialize always takes precedence over the no-code Bootstrap.)

C#using IntegrityShield;

public class GameBoot : MonoBehaviour {
    void Awake() {
        // Pass a profile asset, or null for sensible defaults.
        IntegrityShieldManager.Initialize(myProfile);
    }
}

Protect a value and react to threats:

C#// Obfuscated, tamper-evident value.
var coins = new ProtectedInt(100);
coins.Value += 50;

// Subscribe to integrity responses.
IntegrityShieldManager.Instance.ResponseIssued += decision => {
    Debug.Log($"Response: {decision.action}");
};

⚙ How It Works

Detectors observe the runtime, raise threat events, the policy engine decides a response, and evidence is optionally exported.

• Detector scheduler runs detectors within a per-frame budget so protection never spikes your frame time.
• Threat events carry a detector id, signal, severity, confidence and evidence bundle; the bus is thread-safe and bounded.
• Policy engine matches events against rules (severity / confidence / platform / build / repeat-count / time-window) and accumulates a session risk score.
• Responses range from silent logging to exporting evidence, requiring server validation, or quitting — you choose per rule.

🎮 Profiles & Policy

A Profile bundles which features and detectors are on; a Policy defines the rules and responses.

Profile

Create via Assets ▸ Create ▸ Integrity Shield ▸ Profile. The custom inspector shows a plain-language description of the chosen game type and an Apply Preset Defaults button that configures detectors, frame budget and reporting for that scenario. Fields are grouped and tooltipped.

Policy rules

A rule matches by detector, signal, platform, scripting backend, dev/release build, minimum severity, minimum confidence, required event count and time window, then issues a response and a risk-score delta. Tune rules visually in Tools ▸ Integrity Shield ▸ Policy Editor and dry-run them in the Policy Simulator.

🛡 Responses

What happens when a rule matches. You control this entirely; nothing punishes players by default.

🔎 Detectors

Thirteen built-in detectors run on a frame-budgeted scheduler. Enable per profile.

🔒 Protected Values

Drop-in replacements for primitive fields that resist memory editing and reveal tampering.

Values are XOR-obfuscated in memory with a decoy mismatch check — a memory editor that changes the stored value triggers a tamper event. Supported types include ProtectedInt, ProtectedFloat, ProtectedBool, ProtectedString, ProtectedVector2/3/4, ProtectedQuaternion, ProtectedColor and many more, plus protected collections: ProtectedList, ProtectedDictionary, ProtectedQueue, ProtectedStack and ProtectedHashSet.

C#var health = new ProtectedFloat(100f);
health.Value -= 25f;          // use it like a normal float
var inventory = new ProtectedList<int>();
inventory.Add(7);

💾 Protected Storage

Encrypted, authenticated local storage that fails closed when tampered.

Records are encrypted with AES-CBC and authenticated with HMAC-SHA256 (encrypt-then-MAC), with separately derived encryption and authentication keys. Use ProtectedPrefs in place of PlayerPrefs, and ProtectedFileStore for larger JSON/text payloads.

C#ProtectedPrefs.SetInt("coins", 500);
int coins = ProtectedPrefs.GetInt("coins", 0);  // returns default if tampered

• Verified backup recovery and corrupted-record quarantine.
• Key rotation via ProtectedPrefs.RotateKey<T>() and ProtectedFileStore.RotateTextKeyAsync().
• Optional DeviceBoundKeyProvider binds saves to an install/account so a copied save fails to authenticate elsewhere.

🌐 Multiplayer Evidence

Give your server tamper-evident, replay-resistant evidence to act on.

Threat events are wrapped in an EvidenceEnvelope and signed with HMAC-SHA256 (with a per-session nonce for replay protection). Your server verifies with the shared key before trusting the report.

Bundled transports: Mirror, Netcode for GameObjects, FishNet, generic HTTP and WebSocket. Server-side rule validators are included for movement speed, economy delta, cooldown, inventory, match result and session risk.

📡 Remote Policy

Tune detection live without shipping an app update.

Fetch a signed policy from your endpoint; it is verified with HMAC-SHA256 and an expiry timestamp before being applied, and every apply/reject is recorded to an audit log. Tampered or expired policies are rejected.

C#var ok = RemotePolicyService.TryVerifyAndApply(envelope, key, policy, audit, out var error);

📊 Analytics & Reporting

Privacy-aware local and remote reporting.

Route threat events to local JSON Lines files and/or an HTTP endpoint. Exporters enforce a bounded queue and apply privacy redaction (e.g. emails and raw player ids are stripped at the Standard/Minimal privacy levels). Configure via Assets ▸ Create ▸ Integrity Shield ▸ Event Routing Config or the Event Routing window.

🔧 Editor Tools & No-Code Workflow

Everything important is reachable by clicking. This is a headline capability — you can ship protection without writing a line.

Drop-in & scaffolding

• Integrity Shield Bootstrap component — assign a profile or pick a built-in preset; protection auto-starts on Play. Live runtime status in the Inspector.
• GameObject ▸ Integrity Shield ▸ Add Protection (Bootstrap) — one-click scene scaffolding with full Undo.
• Welcome & Help window — opens once on first import; re-openable and dismissible.
• Interactive Welcome scene — a runtime “Start Here” onboarding scene (IntegrityShield_Welcome.unity) with the 3-step quick start and a live built-in-profile browser; open it from the Welcome window.

Authoring assets (no code)

Create from Assets ▸ Create ▸ Integrity Shield ▸ …: Profile, Policy, Known Tool Signature Database, File Integrity Manifest, Event Routing Config. The Signature Database inspector supports CSV import (file picker or drag-and-drop, with automatic delimiter detection — comma, semicolon, tab or pipe), copy-as-CSV, clipboard merge, and reset-to-defaults.

Windows (Tools ▸ Integrity Shield)

📱 Platforms

Builds verified across all desktop and mobile targets, on Mono and IL2CPP.

📙 Scripting API

The most common entry points. The no-code Bootstrap calls these for you.

See APIReference.md in the Documentation folder for the full surface.

💡 Troubleshooting

The issues that come up most, and how to resolve them.

❓ FAQ

Quick answers to the questions that come up most.

📬 Support

Need help? We're here for you.