+> It is important for developers to be aware of the security implications when choosing the right solution — either Web or Mobile. While both the Web and Mobile solutions conform to iBeta Level 1 and Level 2 ISO/IEC 30107-3 PAD standards, the Mobile solution includes additional Runtime Application Self-Protections (RASP) provided by [GuardSquare](https://www.guardsquare.com/blog/why-guardsquare), which are not available in the Web solution. Notably, the Web solution has limitations inherent to running in browser environments and may be more vulnerable to certain attacks — for example, those involving virtual cameras — due to browser sandbox restrictions that limit runtime attack detection. We recommend using the Mobile solution whenever possible. If you choose the Web solution, it is critical that you closely follow the [shared-responsibility best practices](./liveness-detection-shared-responsibility.md) and consider implementing additional safeguards and monitoring to mitigate potential runtime attacks.
0 commit comments