跳转到主要内容

Client-side security

import { Description, Feature, Plan } from "~/components";

Ensures the safety and privacy of your website visitors' browsing environment.

Websites load third-party scripts for analytics, ads, chat widgets, and payment forms. If an attacker compromises one of these scripts, they can steal visitor data directly from the browser, an attack known as a client-side supply chain attack. Client-side security (formerly Page Shield) gives you visibility into these resources and alerts you when something changes or looks malicious.

Client-side security monitors scripts, connections, and cookies loaded by your website visitors. You can set up alert notifications and create content security rules to control which resources are allowed on your pages.

Learn how to get started.


Features

<Feature header="Resource monitoring" href="/client-side-security/detection/monitor-connections-scripts/" cta="Monitor client-side resources"

Displays information about client-side resources loaded in your domain's
pages.

<Feature header="Page attribution" href="/client-side-security/detection/monitor-connections-scripts/#view-details" cta="Find resource occurrences"

Find in which page a resource first appeared, and view a list of the latest
occurrences of the resource in your pages.

<Feature header="Malicious script detection" href="/client-side-security/detection/review-malicious-scripts/" cta="Review malicious scripts"

Detects malicious scripts in your pages using threat intelligence and machine
learning.

<Feature header="Code change detection" href="/client-side-security/detection/review-changed-scripts/" cta="Review changed scripts"

Detects any changes in the scripts loaded in your pages.
Receive notifications about newly detected scripts, scripts loaded from unknown domains, new scripts considered malicious, or code changes in your existing scripts. Content security rules define allowed resources on your websites. Use content security rules to enforce an allowlist of resources, effectively blocking resources not included in your rules.

Availability

Free Pro Business Enterprise Advanced
Availability Yes Yes Yes Yes Yes
Script monitoring Yes Yes Yes Yes Yes
Connection monitoring No No Yes Yes Yes
Cookie monitoring No No Yes Yes Yes
Page attribution No No Yes Yes Yes
New Resources Alerts and New Domain Alerts No No Yes Yes Yes
Malicious script detection and alerting No No No No Yes
Code change detection and alerting No No No No Yes
Malicious connection detection and alerting No No No No Yes
Cookie monitoring advanced fields No No No No Yes
Number of content security rules (positive blocking) 0 0 0 0 5
Number of Logpush jobs 0 0 0 0 4

The Page Shield add-on is now Client-Side Security Advanced. The features and entitlements are unchanged.