How Cipher works
How Surbee scores response quality and detects survey fraud.
Cipher is Surbee's response quality and fraud detection engine. Every response to a Surbee survey is scored automatically, so you can trust your data without manually reviewing each submission.
Cipher combines four kinds of evidence:
- Behavior. How the respondent moved, typed, scrolled, and paused.
- Device and network. Browser fingerprint, automation flags, VPN, proxy, and datacenter signals.
- Content. Whether open answers look human, original, and consistent.
- Coordination. Whether many responses look like the same actor or a fraud ring.
The risk score
Each response receives a Cipher risk score from 0 to 1, where higher means more suspicious. Responses at or above 0.5 are flagged and surfaced in the dashboard (and in your Slack channel, if connected). Every flagged response carries a list of reasons so you know why.
You stay in control
Cipher recommends, it does not delete. Flagged responses are still collected. You decide whether to keep, review, or discard them.
Detection tiers
Cipher runs in tiers. Higher tiers add more checks and cost more credits, so you can match depth to how much fraud risk a study carries.
| Tier | Focus | Example checks |
|---|---|---|
| 1 | Timing and basic behavior | Rapid completion, uniform timing, low interaction, straight lining, minimal effort |
| 2 | Device and automation | WebDriver detected, automation flags, missing plugins, suspicious user agent, paste behavior |
| 3 | Advanced behavior and basic AI | Robotic typing, mouse teleporting, tab switching, basic AI content, contradictions |
| 4 | Network and content quality | Hover and scroll patterns, VPN and datacenter IPs, plagiarism, semantic analysis |
| 5 | Full AI and fraud rings | Full AI content analysis, answer sharing, coordinated timing, device sharing, Tor and proxy detection |
What gets checked
Some of the signals Cipher looks at:
- Timing. Completion that is impossibly fast, suspiciously uniform per question, or accelerating toward the end.
- Interaction. Too few mouse movements, keystrokes, or clicks for a real attempt.
- Typing. Robotic keystroke rhythm, no corrections, heavy pasting.
- Answers. Straight lining (the same option repeatedly), low answer entropy, duplicated or near duplicate responses.
- Automation. WebDriver and headless browser flags, missing plugins, anomalous screen size.
- Network. VPN, proxy, Tor, datacenter IPs, and timezone mismatches.
- Content. AI generated open text, plagiarism, and answers that contradict each other.
- Coordination. Shared devices, shared answers, and synchronized timing across responses (fraud rings).
Using Cipher
- Inside Surbee. Cipher runs automatically on every published survey. Turn it on or off, pick a tier, and override individual checks in the survey's Cipher settings.
- From your own app. Use the Cipher API and SDK to score responses you collect anywhere. See Cipher SDK and API.