We use cookies to personalise this site. Please read our Privacy Policy for more information.

OK

How it Works

Introduction

Are you curious about how the QRsiren app works? Whilst we can't give away all our secrets, we can share some of the key tests and features that we have built into our system.

Basic Tests

Our basic tests are designed to ensure that the QR code itself is secure and unlikely to be compromised. We test for the following:
  • URL Shortening - Whilst legitimate QR codes do use URL shortening in order to simplify the image (or when creating dynamic QR codes), it is almost always found in malicious QR codes.
  • Cyrillic Characters - These are characters that may not be found in your 'everyday' alphabet, but they are valid characters as far as the web browser is concerned. For example, a malicious URL could be spelled as 'www.goog1e.com' (with a number one instead of a letter l).
  • HTTPS & SSL - These are fundamental to the web nowdays, and guarantee that your communication with the web server is encrypted and secure. The lack of these could be an indication of a malicious site.
  • File Downloads - Whilst QR codes are often used for downloading files, they can also be used to download malicious files.


AI & Crowd Analytics

Our advanced tests build upon the findings from our basic tests to give highly accurate results. We use a combination of Artificial Intelligence and Crowd Analytics to determine the likelihood of a QR code being malicious:
  • Domain Ownership - We check to see if the URL used by the QR code is actually associated with the Company you think it is.
  • Page Contents - Our Artificial Intelligence engine reads the contents of the URL used by the QR code to determine if it is likely to be associated with the Company you think it is.
  • Location & Purpose - We compare where you think the QR should be located and for what purpose with that of other users, thus building a picture of what the QR code is about.

Results

We believe in presenting our results in a clear and concise manner, so that you can make an informed decision about the QR code you have scanned. Our Artificial Intelligence engine will give you a percentage likelihood of the QR code being malicious, will show you the results of our tests (for the more curious users), and will give you a recommendation as to whether you should proceed or not.

If you're still not sure what to do, then you can ask questions to our AI Chat feature about the QR code you have scanned.

Malicious QR Codes

If you have scanned a QR code that we believe to be malicious, then we will give you a popup warning, so that you are totally sure you want to proceed to the URL.

We also catalogue all the QR codes that we have found to be malicious, to build a global picture that can be used to help others, and prevent 'quishing' attacks.

We also offer organisations the ability to be alterted if we believe one of their QR codes has been compromised.

Technical Details

Sorry, some things are trade secrets...