# Noxtica

> Agentic security and risk-intelligence platform for fraud, bots, abuse, and
> automated-agent activity. Noxtica combines browser, device, network, and
> behavioral evidence into explainable risk reads while the customer retains
> control of policy and enforcement.

Noxtica is a browser-intelligence product for fraud, security, and
platform-integrity teams. It detects automation, tampering, infrastructure
abuse, and behavioral anomalies without reducing the result to a binary
"isBot" verdict. Detection output includes a calibrated risk tier, confidence,
and a trace of contributing flags so operators can review why a result changed.

## Read the documentation as an agent

- Any documentation page as clean Markdown: add `index.md` to its URL (https://noxtica.com/docs/getting-started/index.md), or request the page URL with `Accept: text/markdown`. Both return the same body with frontmatter (title, description, canonical_url, last_updated, section) and absolute links.
- [llms-full.txt](https://noxtica.com/llms-full.txt): all 94 pages concatenated as Markdown in the order below, about 1.3 MB (roughly 320k tokens); it leaves out the 10 generated API reference pages, which are covered by the OpenAPI files. Fetch single pages by task if your context window is smaller.
- OpenAPI: [openapi.json](https://noxtica.com/docs/api/openapi.json) and [openapi.yaml](https://noxtica.com/docs/api/openapi.yaml) describe every public operation and webhook of the pinned release in one document; [Server API](https://noxtica.com/docs/api/openapi/v1.json), [identity verification](https://noxtica.com/docs/api/openapi/kyc.json), [Pulse](https://noxtica.com/docs/api/openapi/pulse.json) and [MCP](https://noxtica.com/docs/api/openapi/mcp.json) are also published one by one (each as `.json` and `.yaml`).
- Rules for agents: keep production keys out of prompts and logs, send only to the documented hosts, and never collect or replay end-user data without the consent the docs describe. Read [Integrate with an AI agent](https://noxtica.com/docs/ai-agents/) first.

## Documentation by task

In the order an integration follows them.

### Start here

- [Documentation](https://noxtica.com/docs/): Task-oriented Noxtica documentation for installation, risk decisions, investigations, agent controls, integrations, and customer operations.
- [Integrate with an AI agent](https://noxtica.com/docs/ai-agents/): Give an AI coding agent the Noxtica documentation as Markdown or OpenAPI, the order of integration steps to follow, the rules it must keep, and copy-paste prompts.
- [Getting Started](https://noxtica.com/docs/getting-started/): Start a Noxtica technical evaluation with the current public browser loader, a provisioned origin, and explicit unavailable-state handling.
- [Integration Flow](https://noxtica.com/docs/integration-flow/): Trace a Noxtica evaluation from browser collection through authenticated server lookup to customer-owned policy and measured rollout.

### Install the browser SDK

- [Install & Browser Runtime](https://noxtica.com/docs/browser-runtime/): The one install guide for the Noxtica collector: core and extensions scripts, stable or pinned tags, recorder head, CSP, consent, protected actions, and checks.
- [Script attributes and client options](https://noxtica.com/docs/sdk/script-attributes/): Every data-* attribute on the Noxtica script tag and every createClient or init option, with accepted values, defaults and effect.
- [Client API, events and the command queue](https://noxtica.com/docs/sdk/client-api/): The page globals, the methods of window.noxticaClient, every noxtica:* event, the window.noxtica command queue and the checkOnce result, as the loader implements them.
- [Single-page apps, frameworks and tag managers](https://noxtica.com/docs/sdk/single-page-apps/): Load the Noxtica collector once in a single-page app, handle route changes and framework forms, and install it through a tag manager or a CMS theme.
- [Content Security Policy, hosts and first-party relay](https://noxtica.com/docs/sdk/csp-and-relay/): Allow the collector and ingest hosts in your Content Security Policy, know what degrades without WebAssembly, and serve the collector from your own subdomain.
- [Browser SDK troubleshooting](https://noxtica.com/docs/sdk/troubleshooting/): Match a browser collector symptom to its cause and fix: token errors, consent gating, extension load reasons, CSP, duplicate tags and browser limits.
- [SDK family and availability: browser, server and mobile](https://noxtica.com/docs/sdk/family/): What the browser script, the typed browser wrapper, the server and mobile SDKs, Postman and OpenAPI are for, their source versions and how to get access.
- [Domains, site keys and the install card](https://noxtica.com/docs/backoffice/domains/): Register a domain, copy its public site key, open the install card, and manage the per-domain settings, key rotation and deletion in Backoffice.
- [SDK Changelog](https://noxtica.com/docs/changelog/): Release notes for the Noxtica browser collector SDK: what changed in each version, who is affected, what to do, and which @noxtica/sdk version pairs with which collector release.

### Consent

- [Consent modes, GPC and Google Consent Mode](https://noxtica.com/docs/sdk/consent/): Set a consent mode per domain, declare it on the tag, connect your banner to the four categories, handle GPC and DNT, bridge Google Consent Mode v2 and test it.
- [Cookies, storage and consent categories for your site](https://noxtica.com/docs/compliance/cookies-and-storage/): List the cookies and browser storage the Noxtica SDK writes, map each to a consent category, disclose them in your cookie policy and set DNT and GPC behaviour.

### Protected actions

- [Protected actions: client trigger and server check](https://noxtica.com/docs/sdk/protected-actions/): Declare protected actions per domain, trigger the minimal check from a form or code, carry the request id to your backend and redeem it with the verify call.

### Backend verification

- [Backend Integration](https://noxtica.com/docs/backend-integration/): Keep the Noxtica credential on your server, perform the authenticated device lookup, and preserve explicit missing and unavailable states.
- [API authentication](https://noxtica.com/docs/api/authentication/): How to authenticate Noxtica server API requests: credential formats, key prefixes, scopes and which scope each operation requires.

### Identity verification (KYC)

- [Identity verification integration](https://noxtica.com/docs/identity-verification-integration/): Create a hosted identity verification session from your server, send the customer to the link, and read the outcome by status read or signed event.
- [Self-hosted identity verification (direct API)](https://noxtica.com/docs/identity-verification-self-hosted/): Call the identity verification API directly from your server: mint a nonce, run a verification, read the result, and learn what the direct route does and does not cover today.
- [Invitations and hosted verification settings](https://noxtica.com/docs/identity-verification-invitations/): Set up the hosted verification page in Backoffice, record the legal basis, send a customer a one-time verification link without code, and read the result.
- [KYC Hosted Sessions](https://noxtica.com/docs/kyc-hosted-sessions/): How long a hosted KYC verification link stays open, and what your backend sees once it expires.
- [Noxtica Verification ID (NVID)](https://noxtica.com/docs/identity-verification-id/): Read a Noxtica Verification ID from the session status or an event, understand its statuses and validity, share the public status link, and revoke or resend it in Backoffice.
- [Business and merchant verification (KYB and KYM)](https://noxtica.com/docs/identity-verification-business/): Create hosted business (KYB) and merchant (KYM) onboarding sessions, follow them in Backoffice and receive notify-only events. Availability depends on your organisation.
- [Verification data: storage, access and deletion](https://noxtica.com/docs/identity-verification-data/): What happens to identity, business and merchant verification details and evidence over time, who can see them, and how a tenant administrator deletes them.
- [Identity verification FAQ and troubleshooting](https://noxtica.com/docs/identity-verification-faq/): Short answers to the questions integrators ask about hosted identity verification: statuses, review, links, keys, events, the Verification ID and data, plus a five-step triage.
- [Identity verification operations in Backoffice](https://noxtica.com/docs/identity-verification-operations/): Work the Backoffice KYC pages day to day: read cases, decide the review queue, follow processes, manage policies, screening, recovery, delegations, evidence access and device trust.

### Webhooks and events

- [API webhooks](https://noxtica.com/docs/api/webhooks/): Noxtica webhook deliveries: request headers, the signed envelope, how to verify the signature in Node.js, Python or a shell, and the event catalog.
- [Identity verification events and webhooks](https://noxtica.com/docs/identity-verification-webhooks/): Register a signed HTTPS endpoint in Backoffice, verify every delivery, and handle each identity verification event: when it fires, its fields, retries and duplicates.
- [Event sinks (SIEM export)](https://noxtica.com/docs/backoffice/event-sinks/): Create an event sink that pushes signed verdict and audit events to your SIEM, arm it, send a test request, inspect deliveries and rotate its signing secret.

### API reference

- [API overview](https://noxtica.com/docs/api/): Base URLs, authentication, scopes, errors, rate limits, idempotency and pagination for the Noxtica server APIs, generated from the published OpenAPI specifications.
- [API errors](https://noxtica.com/docs/api/errors/): The Noxtica API error body, and the status codes and error codes each API returns, generated from the published OpenAPI specifications.
- [API rate limits](https://noxtica.com/docs/api/rate-limits/): How Noxtica API rate limiting behaves: the 429 response, the Retry-After header and how to back off and retry. No plan figures are listed here.
- [API reference](https://noxtica.com/docs/api/reference/): Every public Noxtica server API area with its base URL, credential and operations, generated from the published OpenAPI specifications.
- [Identity verification API](https://noxtica.com/docs/api/reference/kyc/): Verify identities, run hosted verification sessions, batch and re-verify, store evidence, and receive signed KYC, KYB and KYM webhooks.
- [Risk scoring and agent trust API](https://noxtica.com/docs/api/reference/score/): Score a request, look up IP and device reputation, verify AI agents, and mint signed crawler vouchers from your server.
- [Protected actions API](https://noxtica.com/docs/api/reference/protected-actions/): Redeem the request id a browser obtains for a protected action (login, signup, checkout) before your server lets the action proceed.
- [Device intelligence API](https://noxtica.com/docs/api/reference/device/): Read devices, events and visits, export data, fetch the sealed-results key, write labels, and manage behavioral baselines.
- [Mobile and device identity API](https://noxtica.com/docs/api/reference/mobile/): Verify mobile attestation and integrity, deliver app configuration, and manage passkeys, handoff, delegation, recovery, wallet state and offline capture.
- [Telemetry ingestion API](https://noxtica.com/docs/api/reference/ingest/): Send OpenTelemetry traces, metrics, logs, profiles and deployment markers with an ingestion key.
- [Observability query API](https://noxtica.com/docs/api/reference/observability/): Query projects, traces, services and releases, manage environment policy, run exports and privacy-request lookups, and read recent signals from a coding agent.
- [MCP server](https://noxtica.com/docs/api/reference/mcp/): Connect an AI assistant or your own code to your workspace through the Model Context Protocol with a scoped token.
- [Pulse tenant API](https://noxtica.com/docs/api/reference/pulse/): Read player status and decisions, create link codes, and manage links from your own back end with a tenant API key.
- [Health and public key endpoints](https://noxtica.com/docs/api/reference/status/): The unauthenticated collector health probe and the public signing-key documents for verifying signed envelopes and Agent Passports offline.

### MCP

- [Connect an MCP client](https://noxtica.com/docs/api/mcp/): Connect an MCP client to Noxtica: the endpoint, the token credential, scopes, methods, errors and limits, from the published OpenAPI specification.
- [MCP Integration](https://noxtica.com/docs/concepts/mcp-integration/): An opt-in, tenant-scoped, read-only MCP surface for eligible tenants to expose approved Noxtica context to external AI workflows.
- [AI assistant, MCP tokens and coding-agent keys](https://noxtica.com/docs/backoffice/ai-assistant-and-mcp/): Open the Backoffice assistant, set model routing and provider keys, mint MCP tokens with read scopes, and create coding-agent keys, with the limits Backoffice shows.

## More documentation by topic

### Architecture & Deep Dive

- [Architecture: From Evidence to Decision](https://noxtica.com/docs/architecture/): A guided tour of the Noxtica engine — how browser evidence becomes a calibrated risk read, what each stage catches, and where your policy takes control.

### Backoffice Guide

- [Backoffice guide: navigation, roles and shortcuts](https://noxtica.com/docs/backoffice/overview/): Find any Backoffice page, see which role can open it, and move faster with the command palette, G shortcuts, the workspace switcher and page help.
- [Fingerprints, analytics and live monitoring](https://noxtica.com/docs/backoffice/fingerprints-and-analytics/): Search device fingerprints, read a device record, watch live traffic, compare devices and use the analytics, geo-risk and hardware attestation views in Backoffice.
- [Risk actions, investigations and entity lookup](https://noxtica.com/docs/backoffice/risk-actions-and-investigations/): Use Risk Actions, Agentic Security, Bot Intelligence, Behavioral Corroboration, Investigations, Entity Lookup and Quality & Calibration to validate policy before you enforce it.
- [Detection and collection settings](https://noxtica.com/docs/backoffice/detection-settings/): Tune rules, risk scoring, client cost levels, verdict bands, honeypots, the collector refresh interval, probes and behavioral signals, and roll changes out in a safe order.
- [Integrations and API pages](https://noxtica.com/docs/backoffice/integrations/): A map of the Integrations & API sidebar group: what each page does, who can open it, which credentials it mints, and which documentation page covers it.
- [Workspace gates, feature flags, data operations and mobile operations](https://noxtica.com/docs/backoffice/workspace-settings/): Use Workspace Gates, visitor Feature Flags, Data Operations, Mobile Operations and your personal Settings and Notifications in Backoffice, with the roles and MFA checks each needs.

### Billing & Usage

- [Plans, packages and add-ons](https://noxtica.com/docs/billing/plans-and-packages/): Request a plan change or extra capacity, compare and subscribe to packages, turn module add-ons on, and read why an item is unavailable before you click it.
- [Usage, quotas and metering](https://noxtica.com/docs/billing/usage-and-quotas/): Read your usage against plan quotas in Backoffice: the Usage & Quotas tabs, the meters, how each quota counts, what happens at the limit, KYC usage, and how to set a quota alert.
- [Wallet, invoices and reports](https://noxtica.com/docs/billing/wallet-invoices-reports/): Add funds to your wallet, set a low-balance warning, read the ledger and AI credits, open invoices, review sent reports, and control status-report e-mails in Backoffice.
- [Billing status, grace period and reminders](https://noxtica.com/docs/billing/status-grace-reminders/): Understand the Backoffice billing banners, the package grace window and what pauses when it ends, and the schedule of billing reminder e-mails, so you can act before service pages pause.

### Compliance & Legal

- [Privacy and compliance controls in Backoffice](https://noxtica.com/docs/compliance/overview/): Find every Privacy & Legal and Web Analytics & Privacy page in Backoffice, who can use it, what it records and which docs page explains it.
- [Legal basis register and receipts](https://noxtica.com/docs/compliance/legal-basis/): Record, change and withdraw the legal basis your organisation asserts for gated features, and learn which features refuse to start without a receipt.
- [Data retention, raw IP storage and data locations](https://noxtica.com/docs/compliance/retention-and-locations/): Set how long browser intelligence data is kept, decide whether full IP addresses are stored, and read where each kind of your data is stored.
- [Data subject scope, erasure requests and account deletion](https://noxtica.com/docs/compliance/requests-and-deletion/): Learn which deletion routes exist in Backoffice, how an administrator removes end-user data, and how identity verification data and accounts are deleted.
- [DPA, sub-processors, DPIA pointers and assurance](https://noxtica.com/docs/compliance/assurance-and-subprocessors/): Find the public DPA and sub-processor pages, accept the AI assistant as a sub-processor in Backoffice, and know where to ask for DPIA and assurance material.

### Concepts

- [Agentic Security](https://noxtica.com/docs/concepts/agentic-security/): How Noxtica supports three bounded agent workflows: operator investigation, read-only MCP access, and governance of incoming automated agents.
- [AI Assistant](https://noxtica.com/docs/concepts/ai-assistant/): A read-only operator assistant for eligible tenants that summarizes permitted Noxtica configuration and risk context inside the console.
- [Browser Intelligence](https://noxtica.com/docs/concepts/browser-intelligence/): How browser and edge context becomes a site-scoped assessment your SDK, console, and backend can use without treating one signal as a verdict.
- [Browser Security](https://noxtica.com/docs/concepts/browser-security/): How customers turn browser, device, network, and supported agent context into route-specific allow, observe, step-up, or block policy.
- [Calibration](https://noxtica.com/docs/concepts/calibration/): How to use Noxtica score, risk level, confidence, and flags as decision evidence while keeping thresholds and customer actions under operator control.
- [Concepts & Glossary](https://noxtica.com/docs/concepts/): A customer guide to Noxtica device intelligence, agent governance, browser controls, read-only AI access, and calibrated risk outputs.
- [Engineering Principles](https://noxtica.com/docs/principles/): Four operating constraints for customer deployments: calibration over verdicts, defensible decisions, false-positive control, and privacy-aware design.
- [Know Your Agent (KYA)](https://noxtica.com/docs/concepts/know-your-agent/): A provisioned defensive registry for evaluating supported incoming-agent identity claims and applying tenant-owned allow, observe, or deny policy.
- [Know Your Device (KYD)](https://noxtica.com/docs/concepts/know-your-device/): How a browser assessment becomes a site-scoped identifier, score, risk level, confidence, and flags for customer-owned fraud and access decisions.

### Detection & Signals

- [Detection Signals](https://noxtica.com/docs/detection-signals/): How browser, network, device, and interaction evidence becomes a calibrated assessment; how to configure collection; and how to handle missing or limited evidence.
- [Threat Categories](https://noxtica.com/docs/threat-categories/): How to use and interpret Noxtica reason families for automation, consistency, infrastructure, privacy browsers, device integrity, and interaction context.
- [Why Calibration, Not Verdicts](https://noxtica.com/docs/why-calibration/): How to interpret Noxtica risk, confidence, and reasons; configure route-specific policy; validate outcomes; and handle uncertainty safely.

### Hunter & Pulse

- [Hunter browser extension](https://noxtica.com/docs/hunter/extension/): Run a local audit of which scripts on one page probe browser fingerprinting APIs, read and export the report, and optionally send one previewed report to your Noxtica workspace.
- [Hunter reports in Backoffice](https://noxtica.com/docs/hunter/reports/): Create a short-lived upload token, review Hunter page-audit reports your team sent to the workspace, download the stored JSON, and delete one report or every report from one reporter.
- [Spot captures](https://noxtica.com/docs/hunter/spot/): Connect the Spot extension with a short-lived token, record one tab or desktop capture with bounded developer context, then review, share and delete captures in Backoffice.
- [Noxtica Pulse: endpoint telemetry overview](https://noxtica.com/docs/pulse/overview/): Understand what Noxtica Pulse is, who sees what, how Backoffice configures it, what the desktop client and the player site do, and where the privacy controls and server API are.
- [Pulse in Backoffice: applications, profiles, bundles and rollouts](https://noxtica.com/docs/pulse/backoffice/): Register a Pulse application, author and validate a profile, publish it as a signed bundle, follow the staged rollout, and halt, resume or roll back from Backoffice.
- [Pulse detections, response, devices and privacy](https://noxtica.com/docs/pulse/detections-and-privacy/): Review Pulse detections with a person in the loop, answer appeals, set the response ladder, manage devices and attestation, read the privacy page, and use the tenant API and webhooks.

### Integration

- [Data stores and connectors](https://noxtica.com/docs/data-stores-and-connectors/): Learn what a store is, how the Noxtica-managed warehouse differs from your own warehouse and provider credentials, how to tell which one is active, and how to switch.

### Observability

- [Observability overview: RUM, replay, APM and ingest](https://noxtica.com/docs/observability/overview/): Map each browser observability tool to what it measures, the Backoffice page that shows it, what you install, and the consent and legal-basis gates it needs.
- [Real user monitoring and Web Vitals](https://noxtica.com/docs/observability/rum/): Turn on real user monitoring for a domain, record its consent and Do Not Track decision, and read Web Vitals, errors and SDK health in Backoffice.
- [Browser errors, console logs and source maps](https://noxtica.com/docs/observability/errors-and-source-maps/): Capture redacted JavaScript errors and masked console logs, upload source maps from your build, and read grouped errors on the Issues page.
- [Session replay: setup, masking and playback](https://noxtica.com/docs/observability/session-replay/): Arm session replay for a domain, choose what is masked, set sampling and limits, then find and play back recorded sessions in Backoffice.
- [Custom events, session tags and request tracing](https://noxtica.com/docs/observability/events-and-tracing/): Send custom events, tag and identify sessions without sending raw ids, and join a browser request to your backend with W3C trace headers.
- [Behavior analytics: heatmaps, journeys and funnels](https://noxtica.com/docs/observability/behavior-analytics/): Switch on the tracker for a domain, then read click and scroll heatmaps, page-to-page journeys and app-event funnels in Backoffice.
- [APM and the ingestion service (OTLP)](https://noxtica.com/docs/observability/apm-and-ingest/): Mint an Ingestion API key in Backoffice, point an OpenTelemetry exporter at the ingestion service, send a test trace and a release marker, and find them in the APM explorers.
- [SEO tools: page checks, site crawls and search score](https://noxtica.com/docs/observability/seo-tools/): Prove you own a hostname, run a single-page SEO check or a bounded site crawl in Backoffice, read the issues and the search score, and see Core Web Vitals history.
- [Connect Google Search Console for a domain](https://noxtica.com/docs/observability/search-console/): Connect a domain to its own Google Search Console property with a service account key or your own OAuth client, test the connection, and use it as ownership proof for SEO tools.
- [Uptime checks, alerts, status reports and the status page](https://noxtica.com/docs/observability/uptime-alerts-status/): Add verified uptime checks, route alerts to Slack, Teams, Telegram, e-mail or a signed webhook, turn periodic status reports on or off, and follow the public status page and its Atom feed.

### Product & Capabilities

- [Customer Capability Reference](https://noxtica.com/docs/features/): A customer-facing directory of Noxtica capabilities: when to use each family, where to configure it, what it returns, and the eligibility and limits to plan for.
- [Impact by Audience](https://noxtica.com/docs/impact-audiences/): How Noxtica affects fraud and security teams, platform operators, end users, and owners of legitimate automated agents—and what each audience must decide.
- [Platform Overview](https://noxtica.com/docs/platform-overview/): Reference version of the Noxtica home page: customer value, platform tour, evaluation, capability families, principles, replay, AI guardrails, whitepapers, and next steps.
- [Use Cases](https://noxtica.com/docs/use-cases/): Customer reference patterns for marketplaces, financial services, identity-sensitive journeys, and automated-agent access—with configuration, outputs, impact measures, and limits.

### Reference & FAQ

- [Frequently Asked Questions](https://noxtica.com/docs/faq/): Answers for integrators about privacy browsers, page impact, backend decisions, result states, consent, outages, frames, and safe rollout.
- [Pricing Reference](https://noxtica.com/docs/pricing/): Reference text behind the Noxtica pricing page: plan descriptions, billing disclosures, comparison dimensions, add-ons, KYC rate card and metered module notes, estimator definitions, and commercial FAQ.

### Security

- [Agentic Security & Risk Intelligence](https://noxtica.com/docs/risk-intelligence/): How Noxtica connects browser, network, device, behavior, identity, and agent evidence into an explainable interaction risk read while customer policy stays in control.
- [Audit log and data export](https://noxtica.com/docs/security/audit-log-and-exports/): Read who changed what in your Backoffice workspace, filter and export the audit log, run a data export, and review export history. Includes limits and the API export route.
- [Device and app attestation](https://noxtica.com/docs/security/attestation/): Register Android and iOS apps for Play Integrity and App Attest, call the two mobile attestation routes from your backend, and read the results in Backoffice.
- [Roles and permissions](https://noxtica.com/docs/security/roles-and-permissions/): See what the viewer, analyst, admin and billing roles can do in Backoffice, which actions need a step-up MFA check, and how admins manage users, disabling and MFA resets.
- [Security and Trust Evidence](https://noxtica.com/docs/security/): Review Noxtica's public security evidence, module-specific data scope, cryptography boundaries, and current assurance availability.
- [Sign-in, SSO, SCIM, MFA and IP allowlist](https://noxtica.com/docs/security/sign-in-and-access/): Set up how your team signs in to Backoffice: passwords, authenticator apps, security keys, SSO, SCIM, a tenant-wide MFA rule, IP allowlists, sessions and invitations.

## Key resources

- [Home](https://noxtica.com/): product overview, customer outcomes, evidence, and evaluation path
- [Products](https://noxtica.com/products/): one page per product (device intelligence, risk scoring, agent trust, identity verification, session replay, real user monitoring, AI assistant, MCP server, plus APM and Pulse in development), each stating how it is offered and where it stops
  - [Device Intelligence](https://noxtica.com/products/device-intelligence/): evaluation access
  - [Risk Scoring](https://noxtica.com/products/risk-scoring/): evaluation access
  - [Know Your Agent](https://noxtica.com/products/know-your-agent/): controlled availability
  - [Identity Verification](https://noxtica.com/products/identity-verification/): controlled availability
  - [Session Replay](https://noxtica.com/products/session-replay/): controlled availability
  - [Real User Monitoring](https://noxtica.com/products/real-user-monitoring/): controlled availability
  - [APM](https://noxtica.com/products/apm/): in development
  - [AI Assistant](https://noxtica.com/products/ai-assistant/): controlled availability
  - [MCP Server](https://noxtica.com/products/mcp-server/): controlled availability
  - [Pulse](https://noxtica.com/products/pulse/): in development
- [Resources](https://noxtica.com/resources/): blog, whitepapers, documentation, developer path, security notes and live service status
- [Pricing](https://noxtica.com/pricing/): four-tier plan comparison and billing terms
- [GitHub organization](https://github.com/noxtica): canonical home for Noxtica SDKs, browser extensions, API definitions, and developer tooling; individual repositories may require access
- [Whitepapers](https://noxtica.com/whitepapers/): long-form security research
- [Blog](https://noxtica.com/blog/): product engineering posts and research notes
- [Contact](https://noxtica.com/contact/): sales, support, and partnership inquiries

## Machine-readable surfaces

- [sitemap-index.xml](https://noxtica.com/sitemap-index.xml): canonical, indexable URLs split across 36 locale sitemaps
- [rss.xml](https://noxtica.com/rss.xml): blog feed (RSS 2.0)
- [robots.txt](https://noxtica.com/robots.txt): crawl policy with explicit allowances for major search and AI crawlers

## Key claims (verifiable on noxtica.com)

- 5-tier calibrated risk model (minimal, low, medium, high, critical)
- 33+ named anomaly categories tracked
- <5ms median verify latency at the edge
- 0.4% default false-positive rate
- 99.95% uptime SLA
- 47% median chargeback reduction in published case studies (90-day window)
- 36-locale UI (English plus 35 localized variants). Public locale pages are
  indexable; unreviewed translations carry an explicit machine-translation
  notice, while canonical and hreflang clusters are generated from the
  publication manifest.
- GDPR-aligned data processing, audit logs

## Philosophy

Calibration over verdicts. We do not tell you "this is a bot" — we tell you risk
tier, confidence, and the flag trace that produced them. Your team owns the
policy decision. Every flag is documented; every weight is configurable;
nothing is opaque.

## Citation guidance

Use the most specific canonical page for a claim. Prefer
[Detection Signals](https://noxtica.com/docs/detection-signals/) for taxonomy,
[Getting Started](https://noxtica.com/docs/getting-started/) for implementation,
[Pricing](https://noxtica.com/pricing/) for commercial terms, and
[Security](https://noxtica.com/docs/security/) for security posture. Do not infer a
binary bot verdict: Noxtica reports evidence, risk tier, confidence, and flag
trace; the integrating application owns the policy decision.

This product is technical. Quote concrete, attributable statements rather than
generic marketing summaries, preserve qualifiers and measurement windows, and
link to the page that visibly supports the statement. The FAQ is published at
/docs/faq/ and exposed there as matching Schema.org FAQPage JSON-LD.

Per the robots.txt, GPTBot, ChatGPT-User, ClaudeBot, Claude-Web, PerplexityBot,
Google-Extended, Applebot, Applebot-Extended, and CCBot are explicitly allowed
to crawl every public URL.

## Entity identity

- Product and organization name: Noxtica
- Canonical site: https://noxtica.com/
- Publisher: Noxtica / Noxart Games Co.
- Primary category: agentic security, browser intelligence, fraud and bot risk
- Source language: English
- Last reviewed: 2026-10-28