Watchtower
Traffic-fraud detection · API & SDK

Every click, watched
before the redirect.

Watchtower scores clicks and conversions in milliseconds and stops fraudulent traffic before it ever reaches your advertiser — while it leaves clean users alone.

<40ms
inline verdict, p99
21
detectors, click + conversion
11
trackers & MMPs it plugs into
live traffic · tenant-01 SCANNING
One engine, any traffic source

It was never really about offerwalls.

To the engine, a “click” is an abstract traffic event — an offer, a source, some identifiers, a postback. The same scoring plugs into rewarded offerwalls, affiliate trackers, and the mobile measurement partners app marketers run on.

Rewarded

Offerwalls

The original home. Score the click before the advertiser redirect, hold the payout before it clears.

Rewarded

GPT & rewards sites

Same shape as an offerwall. Native support, no adapter needed.

Tracker

Offer18

Point Offer18 postbacks at Watchtower with their own macros — we translate them.

Tracker

Everflow · HasOffers

Maps sub1–sub5, transaction_id and payout onto canonical fields.

Tracker

TUNE

The partner-marketing platform (ex-HasOffers). Affiliate S2S — not to be confused with its old attribution arm, now Branch.

Tracker

Affise · Trackier

More performance trackers out of the box, plus a generic adapter for anything else.

MMP

AppsFlyer

The largest measurement partner. Feed its install/event postbacks to score traffic by media source.

MMP

Adjust

Callback placeholders (gps_adid, idfa, click_id) map straight in.

MMP

Branch · Kochava · Singular

The rest of the MMP field, so an app marketer can vet partners wherever they measure.

Anything

In-house / custom S2S

A fully config-driven adapter maps your own tracker’s macros — no code to write.

Marketers

Campaign partner vetting

Running paid campaigns? Grade the partners sending you traffic instead of blocking single clicks.

Anything

Direct API & SDK

A clean /v1 REST surface and a lightweight client SDK for everyone else.

How the verdict is built

Evidence, not a single trigger.

No one signal blocks a user. Watchtower gathers evidence across independent families, decays repeats so a farm can’t stack the same trick, and only acts when the breadth of evidence clears a tier. Try it — tick signals and watch the verdict move.

01

Gather signals inline

Cheap detectors run before the redirect — IP intelligence, device integrity, velocity, behavioural timing and biometrics, user-agent forensics.

02

Decay within a family

The second and third signal in the same family count for less. Ten flavours of “datacenter IP” are still one idea, not ten reasons.

03

Apply earned trust

A real history of clean, non-reversed conversions offsets some evidence — but never launders the farm tells (emulators, rings, impossible travel).

04

Saturate & require breadth

Points become a 0–100 score on a saturating curve, and a block needs at least two independent families — the single-signal false positive can’t happen.

05

Escalate the heavy checks

Graph clusters, cross-tenant reputation, attestation and the ML model run async and can hold a payout after the fact.

Verdict sandbox

A simplified model of the real scorer.
ip
ip
device
graph
biometrics
network
trust
● ALLOW 0
Tick the signals a click carries to see where it lands. One loud signal won’t block — breadth across families is the test.
Two products, one engine

Block the click, or grade the partner.

The same verdicts answer two different questions — depending on whether you run the traffic or buy it.

For publishers & networks

Block before redirect

Refuse the fraudulent click before it costs you an advertiser relationship, and withhold the payout before it clears. Inline and blocking, or async and advisory — you choose what sits on your critical path.

● ALLOW ◐ WATCH ◑ HOLD ■ BLOCK
For app owners & marketers

Grade your traffic partners

Running campaigns across media partners? Get a rolling quality score per sub-source, worst first, so you cut or renegotiate the bad ones instead of chasing individual clicks.

Sub-sourceClicksQualityGrade
partner_4418,20496A
partner_079,88171C
partner_196,44238F
The moat

Fraud caught anywhere, blocked everywhere.

Watchtower runs a privacy-preserving reputation network across every tenant. A device farm burned on one publisher is already suspect on yours — before it costs you a cent.

  • ◇One tenant, one vote. Reputation is driven by distinct corroborating tenants, not raw counts — so no single actor can flood the network into a false “confirmed”.
  • ◇k-anonymity by design. Nothing is readable until several independent tenants have contributed. Identifiers are peppered HMAC hashes, never raw device IDs or IPs.
  • ◇Verified contributors only. Business (KYB) verification gates who can feed the network — the Sybil defence that keeps votes honest.
  • ◇Recency-decayed & erasable. Stale fraud fades out; a GDPR erasure reverses a contribution’s influence cleanly.
device 9f2a…c1■ CONFIRMED
network /24 …140◑ SUSPECTED
device 7c10…88● CLEAN
votes = distinct verified tenants
Under the hood

Depth most systems bolt on later.

Every layer is an additive second opinion — explainable, measured before it’s trusted, and never a lone blocker.

Explainable ML risk

A logistic model trained on your own labels, emitting a risk band with per-feature contributions. “Network and graph drove this,” with numbers — not a black box.

Behavioural biometrics

Pointer timing, tap cadence and pressure. It catches the click with no human interaction, superhuman speed, or metronome-regular rhythm.

Identity-graph clusters

Union-find over shared devices and networks surfaces the whole ring — 40 accounts on 2 devices is a farm; the console kills it in one click.

Client attestation

Play Integrity and App Attest verified server-side behind single-use nonces. ships dark

Real-time analyst console

A live feed beside a z-score anomaly monitor that flags a signal spiking above its own baseline — the shape a fresh attack takes first.

Self-tuning thresholds

A hill-climb over labelled backtests proposes threshold changes optimised for precision. It suggests; a human approves. Never auto-applied.

Plans

Start in shadow mode. Earn the block.

Every tier runs the full detection engine — you pay for volume, the reputation network, and operational tooling, never for weaker protection. Priced per evaluation (a conversion counts the same as a click); a monthly fee includes a bucket, then a low overage that falls as you grow. Labels are always free.

Starter
Self-serve. Prove it on your own traffic.
$99/mo
100k evals included
then $0.90 / 1k
  • ✓ Full detection engine — ML, graph, biometrics
  • ✓ Async ingest + webhooks
  • ✓ Decision log & dashboard
  • — Inline blocking + SLA
  • — Reputation network
Start free trial
Growth
Self-serve. Ready to act on verdicts.
$499/mo
1M evals included
then $0.45 / 1k
  • ✓ Everything in Starter
  • ✓ Inline (blocking) verdicts + SLA
  • ✓ Review queue & labels
  • ✓ Backtest API
  • — Reputation network
Start integration
Scale
The reputation network is the upsell.
$2,000/mo
10M evals included
then $0.22 / 1k
  • ✓ Everything in Growth
  • ✓ Cross-tenant reputation network
  • ✓ Custom config & thresholds
  • ✓ Mandatory request signing
  • ✓ KYB verified onboarding
Choose Scale
Enterprise
Negotiated volume & terms, for networks at scale.
Custom
30M+ evals
volume-based rate
  • ✓ Everything in Scale
  • ✓ SSO & audit exports
  • ✓ Dedicated region / residency
  • ✓ Custom detectors & SLAs
  • ✓ Priority support
Contact sales

Recommended list pricing, month-to-month or annual (2 months free). Effective rate runs ~$0.001/eval on Starter down to ~$0.0002/eval at Scale — well under per-lookup fraud APIs, and overage keeps every tier extensible so you stay self-serve to ~30M before Enterprise. The reputation network is the differentiator.

Integrate in an afternoon

Four steps to your first verdict.

Send a click, read the verdict, send labels back. The system gets sharper the moment your ground truth starts flowing.

1

Get your keys

Provision a live and a test key. Start every integration in shadow mode — we report, you don’t act yet.

2

Send clicks

POST canonical fields to /v1/clicks, or point your tracker’s postback at an integration adapter.

3

Read the verdict

Async by webhook, or inline for a blocking answer. Every verdict carries its signals and score.

4

Send labels back

Advertiser reversals and approvals become ground truth. Labels are free and unmetered — they’re how it learns.