We provide a full-featured dashboard with live script monitoring such as live script monitoring, search capabilities, and automated compliance reporting. A summary of any script or security header changes in PDF is sent to you every week. On the other hand, any critical event triggers an instant webhook alert to your security team. We designed the dashboard with PCI compliance in mind, providing auditor-ready reports that align directly with testing procedures. Exporting data to CSV, integrating with your SIEM, or sending logs to your own S3 bucket are also some of its features.
Does a CSP provide enough security?
CSP is a great base-layer for client-side security, but it cannot see script contents. Depending on your needs and risk profile, it may or may not be sufficient.
Why doesn't a Content Security Policy (CSP) make us PCI compliant?
PCI DSS requires monitoring scripts for changes. CSP can only control sources, not inspect payloads, so it cannot meet PCI DSS requirements.
Why do you offer CSP for free?
We fundamentally believe every individual and operation should be able to secure themselves, regardless of resources.
Can cside work alongside my existing WAF without conflicts?
We monitor an entirely different dimension of the application stack; hence, there is no interference.