AI-based audit engine to expose spoofed, replayed, and injected liveness sessions that were previously marked as live, running inside the companys own AWS account.
Many liveness checks approved in past onboarding and authentication flows were never truly live. Replay attacks, injected video streams, virtual cameras, and AI-generated faces frequently pass older liveness controls without triggering alerts.
Shufti Face Liveness Detection allows companies to replay historic liveness sessions and identify where live decisions were technically incorrect. The AMI runs entirely inside the companys AWS environment and VPC, ensuring that face images and video data never leave existing cloud boundaries.
This audit provides compliance, fraud, and risk teams with an evidence-based view of liveness blind spots in historic onboarding, account recovery, and high-risk transactions. Results are based on actual customer data rather than simulated attack scenarios.
The engine can operate both as off-flow, processing sessions in batches or single checks. Companies can focus on specific cohorts and re-check the customer base at minimal cost, without changing production journeys or interrupting active users.
Key Features:
Detect replay, injection, and spoofed sessions that passed legacy liveness checks
Expose historic liveness failures tied to silent fraud accounts
Support regulatory and internal reviews with measurable audit outcomes
Liveness failures often remain hidden until losses or regulatory scrutiny emerge. Shufti Face Liveness Detection enables companies to re-evaluate historic approvals and close blind spots created by outdated controls.
Deploy directly from AWS Marketplace to assess liveness exposure inside your own AWS environment.
Highlights
One-click AMI deployment inside existing AWS infrastructure with no long-term contracts or procurement delays.
No integrations delays and no disruption to live verification flows.
No external data movement with fully on-premise like processing, eliminating data-privacy concerns.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You buy this product through a single pricing dimension based on Verifications (Units). Each unit represents one verification request you submit. Pricing scales with the number of units you purchase under your contract. You commit to a quantity of verification requests, and each face liveness check consumes one unit. There are no separate tiers or instance sizes to choose from. Your cost depends only on how many verification requests you expect to run. This structure lets you match your purchase to your verification volume.
Top-of-mind questions for buyers
What counts as one verification unit for billing purposes?
One unit equals one face liveness verification request you submit. Each time a user faces the camera for a real-time liveness check, that consumes one unit. Additional features like age estimation or duplicate account detection run within the same request and do not count as separate units.
Does a failed or declined verification still consume a unit?
A unit is consumed per verification request you submit, regardless of whether the result is accepted or declined. The liveness check runs and returns a decision each time. Note that if a liveness check fails, add-on steps like age estimation are not performed within that request.
Can I use the same verification unit across different fraud checkpoints like login or account recovery?
Yes. You can run face verification at onboarding, login challenges, account recovery, withdrawals, payouts, and resets. Each check at any of these points counts as one unit. You are not limited to onboarding, so plan your unit volume across all checkpoints you expect to use.
developers.shuftipro.com+1
Helpful?
Vendor refund policy
Usage based charges are generally non refundable. If you believe you were charged due to a service defect (e.g., container unavailability), open a ticket within 7 days with timestamps and logs. Verified incidents may be credited or refunded at our discretion. Refunds are processed through AWS Marketplace per AWS refund procedures.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Shufti Face Liveness Detection
Additional details
Usage instructions
Before deploying the Shufti Face Liveness Detection AMI, ensure you have an AWS account with permissions to launch EC2 instances and create IAM roles and instance profiles, an active subscription to the product in AWS Marketplace, and a network setup including a VPC, Subnet, and Security Group with HTTP (port 80) open. The recommended instance type is r7i.4xlarge or larger (Nitro Enclave support required).
To deploy, launch a new EC2 instance using the AMI and paste the provided Shufti initialization script in Advanced Details User Data. Provisioning typically takes about 25 minutes. After provisioning completes, open the EC2 Console, copy the Public IP of the instance, and access the application at: http://<EC2_PUBLIC_IP>:80.
Ensure the Security Group allows port 80, and if provisioning exceeds 25 minutes, review EC2 system logs or console output. For detailed deployment instructions and API usage, see the full Shufti user guide: https://developers.shuftipro.com/docs/marketplaces/aws/user-guide
For technical enablement (e.g., feature flags), contact Shufti Tech at:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Batch audit of historic KYC selfies to uncover AI-generated faces and face swaps that passed earlier checks, deployed fully inside the companys own AWS environment.
Forensic audit engine to uncover AI-generated and fabricated ID documents that passed existing KYC controls, running fully inside the companys AWS account.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.