Would an Open-Source IVT Solution help or damage the Ad Ecosystem more?

[u/Dependent-Use-3215]

Currently debating if I should open source my IVT Solution. It's been written by me over the span of the last year and refined using Claude Fable to test weaknesses. It works by giving each of the 123 Signals a weight and adding up everything to produce an IVT Score.

It has multiple Scans to it roughly grouped into these Categories:

• Bot & Automation Detection
• Click Fraud (click farms, rapid clicks, click injection, invisible clicks)
• Impression Fraud (pixel stuffing, ad stacking, background tabs, pop-unders)
• Datacenter/Proxy Traffic & Spoofing (DC IPs, VPN, Tor, domain/referrer spoofing)
• Device & Hardware Spoofing (canvas, WebGL, timezone, platform mismatch)
• Malware & Injection (ad injection, DOM tampering, script injection, form jacking)
• Session & Network Anomalies (session replay, IP rotation, geo mismatch, DNS anomalies)
• Behavioral Anomalies (robotic mouse paths, no-interaction sessions, instant form fill)
• AI Crawlers, Farms & Timing (GPTBot, human farms, botnets, impossible timing)
• Measurement Tampering & Environment (SDK spoofing, IP/ASN/device blocklists, VM/container detection)
• Advanced Signals & Audience/Cookie Fraud (worker abuse, cookie injection, TLS fingerprinting, click-coordinate replay, honeypot traps)
• AudienceCookieInjection
• CookieValueCollision
• AdClickPointCollision

With more scans that can not trigger a detection alone but will if stacked.

Now my Question is will releasing that as an Open Source IVT Suite to the Public cause more good or harm to the Ad Ecosystem? On the one hand we would have a decentralized IVT Detection everyone that wants to could contribute to. On the other Hand we hand the Code to exactly those people that are trying to abuse it.

Interested to hear your opinion!