c/side is exhibiting at BlackHat USA 2025.
We are in town for BlackHat USA 2025 August 6th and 7th.
You can find us:
Book a meeting ahead of time or just swing on by!
Tabla de Contenidos
Learn why Reflectiz’s scanner-based claims about cside are incorrect and how cside’s real-time client-side security provides deeper protection, full payload forensics, and PCI DSS 4.0.1 compliance.
Magecart attacks steal card data in the browser before traditional tools detect them. Learn how Magecart attacks work and entry points used by attackers.
Deep dive into script integrity vs Subresource Integrity vs behavioral monitoring for PCI DSS 6.4.3, 11.6.1, ISO 27001, and HIPAA compliance.
Get a clear breakdown of Connecticut Data Privacy Act rules, enforcement timelines, and how to manage third-party scripts correctly.
An expired domain reference is all an attacker needs to execute phishing under a trusted origin. This blog looks at an example from Oracle’s code.
On November 18th, Cloudflare had an incident that impacted thousands of customers. This blog explores how we limited impact to our own customers.
Banking "apps" that run on browser environments expose credentials without teams realizing it. This article explores examples of WebView mobile app attacks.
Your checkout is only as safe as your plugins. Discover how WooCommerce handles plugin HTML, why that matters, and the steps to stop malicious code.
Customers diligently ask: “what happens if cside goes down?” or “will it add latency?”. This is how our fail-open architecture is prepared for a bad day.
Reflectiz uses a “proprietary browser” which crawls the website. However, client-side attacks are dynamic. Let's dig in on why we do things differently.