Overview

Client‑Side Defense (also known as Code Defender) empowers organizations to monitor, control, and protect all web browser scripts—both first‑party and third‑party—directly within real user sessions. With a lightweight JavaScript agent, it inventories page scripts, analyzes behaviors, and enforces granular, zero‑trust enforcement policies. The product blocks risky actions like formjacking, data scraping, credential access, and digital skimming, while enabling compliance with standards like PCI DSS 4, GDPR, HIPAA, and NIST.

Features and Capabilities

• Real‑Time Script Inventory: Detects all running scripts—including Nth‑party—via a single browser-injected line of code.
• Behavioral Monitoring & Risk Scoring: Continuously monitors DOM, network, cookie, and storage interactions and flags anomalies.
• Granular Client‑Side Mitigation (CSM): Blocks specific script actions—like accessing form fields or network resources—without disabling entire scripts.
• Zero‑Trust Policy Automation: Allow, block, or justify actions on-the-fly with templates and self-service controls.
• Compliance & Reporting: Meets PCI‑DSS 4.0 requirements (6.4.3, 11.6.1), GDPR, HIPAA, etc., with automated audit reports.
• Third‑Party Integration: Seamlessly integrates with AWS WAF, Fastly, Cloudflare, Akamai, SIEMs, ticketing, and messaging platforms.
• Defends Against Supply‑Chain Attacks: Stops Magecart, digital skimming, form‑jacking, malicious redirects from third‑party code.
• Support for Privacy Standards: Automatically enforces PII/PCI denial policies, remediates leakage, and logs activity.
• Policy Templates & Management: Offers customizable templates for defining allow/block actions, plus easy disabling or enabling of sensors.
• Alerting & Intelligence: Generates real‑time alerts, risk scoring, and syncs with security tools for rapid incident response.