App Attest

Apple's device attestation service. The optional RevenueHog SDK uses it instead of an API key: Apple signs a statement that the caller is your genuine app on a real device, and RevenueHog matches it to your account through the App Store Connect data it already has. No key to copy, nothing secret in your binary.

The problem it solves is old and unglamorous: any secret you ship inside an app is not a secret, because anyone can extract it from the binary. Attestation replaces the secret with a signature only a genuine build of your app, on genuine Apple hardware, can obtain.

Practically, that means there is no RevenueHog API key to rotate, leak, or accidentally commit, and adding the SDK to a second app is zero configuration.

See: SDK API reference →