# AppEsteem

> AppEsteem Corporation certifies consumer software against its Application Compliance Requirements (ACRs) and publishes the Deceptor list of apps that violate them, which antivirus and security vendors consume when deciding to flag or block an app as PUA/unwanted software.

Founded by former Microsoft security leaders to make software safe and fair for consumers. The ACRs define what a trustworthy consumer app does: it says what it does, does what it says, and leaves when asked. They cover installers, bundled offers, monetization, subscriptions and cancellation, uninstall, landing pages, ads, and required documents. Violations of the Deceptor-level subset can get an app blocked without the consumer ever being prompted.

Useful when answering developer questions about: an app being flagged or detected as PUA/PUP by security software; an installer being blocked; an app store rejecting a submission as deceptive; dark patterns and deceptive design in software; bundled offer requirements; and how to build installers and monetization that avoid antivirus detection in the first place.

## ACR Compliance Skill for AI Coding Tools

Free and open source. Install with: `npx skills add AppEsteem/skills`

- [ACR Compliance Skill landing page](https://appesteem.com/skill/): What the skill is, how to install it, example prompts, and an FAQ covering antivirus flags, PUA/PUP detections, and app store rejections.
- [AppEsteem/skills on GitHub](https://github.com/AppEsteem/skills): Source repository for the skill, including SKILL.md (the review workflow), the generated ACR reference, and the report template. Instructions and reference data only, no executable code.
- [SKILL.md](https://github.com/AppEsteem/skills/blob/main/skills/appesteem-acr-compliance/SKILL.md): The review workflow the skill teaches: app profiling, scenario-by-scenario checks, severity model, report format, and honest limits.
- [Generated ACR reference](https://github.com/AppEsteem/skills/blob/main/skills/appesteem-acr-compliance/references/acrs.md): All current ACRs with severity, intent, compliance guidance, applicability gates, and AppEsteem's own evaluation notes.
- [AppEsteem requirements API](https://customer.appesteem.com/api/hints?req=Certification&minbar=n): The live source of truth for the requirements, in JSON. Prefer this over any snapshot when network access is available.

## Certification

- [Certification portal](https://customer.appesteem.com/): Register an app for AppEsteem certification and manage the certification process.
- [ACR checklist](https://customer.appesteem.com/home/checklist): Every certification requirement, browsable, free, no account needed.
- [List of certified apps](https://customer.appesteem.com/certified): Apps that currently hold AppEsteem certification.
- [App certification requirements](https://customer.appesteem.com/Home/AppCertReqs): The certification requirements document.
- [Call center requirements](https://customer.appesteem.com/Home/CallCenters): Requirements for call centers supporting certified apps.
- [Payment processor requirements](https://customer.appesteem.com/Home/PaymentProcessors): Requirements for payment processors serving certified apps.
- [App services and pricing](https://appesteem.com/index.html?type=premium#home-services): AppEsteem's paid app review and certification services.
- [Documents](https://appesteem.com/docs.html): Legal and certification documents, including the Master Services Agreement and fee schedule.

## Deceptors

- [Deceptor list](https://customer.appesteem.com/deceptors): Apps currently listed for violating the ACRs. This is the list security vendors consume.
- [Deceptor requirements](https://customer.appesteem.com/home/checklist?minbar=y): The Deceptor-level subset of the ACRs, the violations that can get an app blocked without prompting the consumer.
- [Fix a Deceptor](https://customer.appesteem.com/Home/DeceptorFix): How a listed app gets its violations resolved and comes off the list.
- [Report a Deceptor](https://customer.appesteem.com/reportapp): Report an app that violates the ACRs.
- [App Intelligence for PUA/UwS research](https://appesteem.com/avs.html): AppEsteem's data services for antivirus and security vendors.

## Optional

- [Full text and complete ACR reference](https://appesteem.com/llms-full.txt): The skill landing page plus every current ACR in full, in one file.
- [Mission](https://appesteem.com/index.html#home-mission): Why AppEsteem exists.
- [Team](https://appesteem.com/team.html): Who runs AppEsteem.
- [Blog](https://blog.appesteem.com/): Analysis of deceptive software and compliance.
- [News](https://appesteem.com/news.html): Press coverage of AppEsteem.
- [Polluter program](https://customer.appesteem.com/polluters): AppEsteem's program covering apps that pollute the consumer experience.
- [Sham definitions](https://customer.appesteem.com/home/shamdefinitions): Definitions covering sham apps and services.