Examine the evidence. Do not outsource the decision.
The verifier is built on one principle: show what the evidence establishes. It does not compress a five-level model into a single green verdict, and it does not turn the absence of a higher-level proof into an accusation.
01
Verify a request
Don’t trust us. Test us.
Pick a request and watch Atestan put five questions to it, one at a time. The five are the A→E rungs in plain language — the letters belong with the security team, the questions are what a finance director needs answered.
The result must match the proof
It never implies that everything is proved when only the first part of the model has been established. And the other way round: a level that stays dark does not mean the request is a forgery — it means the corresponding claim has not been established by the evidence available.
ABC SAS is enrolled, and this change really was authorised by them.
ABC SAS · billing@abc-sas.example
Change of bank details — invoice 2026-0431
Following a change of bank, please update our details for all future payments. New IBAN below. Kindly confirm once done — the next invoice falls due Friday.
Channel checks PASS — the domain is authentic
- Does this payment request really come from that company? Waiting.
- Does this internal request really come from my own management? Waiting.
- Did that company actually receive it? Waiting.
- Was what it asks for actually carried out? Waiting.
- Could all of this be proved again in six months? Waiting.
02
The code printed on the request
Twenty-six characters, from an alphabet with no 0, O, 1 or L, so that it can be dictated over a telephone without spelling. The verifier examines the evidence that corresponds to it — and a mistyped code is answered as a mistyped code, never as an absent seal.
Verify a request
Someone is asking you to pay, or to change an account. Put in the code from their message and read what the evidence establishes — today, that page can reach no service, and it says so rather than guessing.
Before you act
For a high-value request, verification is one part of the decision. A finance team may still need an existing supplier contact, an independent telephone channel, internal approval, separation of duties and its normal payment controls. Atestan is designed to strengthen that process with evidence, not to remove it.