The product
DOMPurify is a fast XSS sanitizer for HTML, MathML, and SVG.
The closest DOMPurify alternatives are Aikido Zen, Source Defense How it works and Source Defense Platform. Picking a DOMPurify alternative comes down to fit: Runtime Application Self-Protection coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
29 alternativesClosest matches: Aikido Zen, Source Defense How it works, Source Defense PlatformPage updated Nov 2026
The product
DOMPurify is a fast XSS sanitizer for HTML, MathML, and SVG.
DOMPurify is a free Runtime Application Self-Protection solution. The closest matches by shared tags and NIST CSF 2.0 coverage are Aikido Zen, Source Defense How it works, Source Defense Platform, PreEmptive Dotfuscator, and Approov Runtime Application Self Protection. All 29 alternatives on this page are ranked the same way.
These 8 solutions overlap most with DOMPurify. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Runtime application security library blocking zero-days & OWASP Top 10 attacks
Key features: 10 listed. See them on the Aikido Zen page.
View Aikido ZenAikido Zen alternativesDOMPurify vs Aikido Zen
Client-side security for websites against 3rd party vendor attacks
Key features: 8 listed. See them on the Source Defense How it works page.
View Source Defense How it worksSource Defense How it works alternativesDOMPurify vs Source Defense How it works
Client-side security platform protecting against JavaScript-based threats
Key features: 10 listed. See them on the Source Defense Platform page.
View Source Defense PlatformSource Defense Platform alternativesDOMPurify vs Source Defense Platform
C# obfuscation & encryption tool for .NET, MAUI, and Xamarin apps
Key features: 10 listed. See them on the PreEmptive Dotfuscator page.
View PreEmptive DotfuscatorPreEmptive Dotfuscator alternativesDOMPurify vs PreEmptive Dotfuscator
RASP solution securing mobile apps and APIs across Android, iOS, and HarmonyOS at runtime.
Key features: 9 listed. See them on the Approov Runtime Application Self Protection page.
View Approov Runtime Application Self ProtectionApproov Runtime Application Self Protection alternativesDOMPurify vs Approov Runtime Application Self Protection
Developer-first security SDK for bot detection, rate limiting, and attack protection
Key features: 10 listed. See them on the Arcjet page.
Client-side JS obfuscation and third-party script protection platform with compliance.
Key features: 10 listed. See them on the Jscrambler Client-Side Protection and Compliance Platform page.
View Jscrambler Client-Side Protection and Compliance PlatformJscrambler Client-Side Protection and Compliance Platform alternativesDOMPurify vs Jscrambler Client-Side Protection and Compliance Platform
Blue Cedar Enforce is a mobile application security product that provides runtime application self-protection (RASP) and data protection with on-device policy enforcement, including offline scenarios. The RASP component monitors and defends mobile apps against exploits and attacks in real time. It enables self-monitoring for suspicious behaviors and self-defense against techniques such as app tampering, hooking, injection, jailbreak/rooting, man-in-the-middle attacks, and unauthorized debugging. It continuously monitors memory, network traffic, and the file system to identify and block threats. The data protection component safeguards sensitive mobile app data through device-independent AES-256 encryption for locally stored data, protecting it even if the device is compromised. Device posture policies restrict app launch or foreground access unless requirements such as PIN locks or minimum OS versions are met. Additional controls include authentication, data loss prevention, and blocking of screenshot capabilities. The product is applied to mobile applications to add these protections at the app level.</description> <parameter name="summary">Mobile RASP and data protection with on-device policy enforcement for mobile apps
Key features: 10 listed. See them on the Blue Cedar Enforce page.
Runtime application security library blocking zero-days & OWASP Top 10 attacks
Client-side security for websites against 3rd party vendor attacks
Client-side security platform protecting against JavaScript-based threats
C# obfuscation & encryption tool for .NET, MAUI, and Xamarin apps
RASP solution securing mobile apps and APIs across Android, iOS, and HarmonyOS at runtime.
Developer-first security SDK for bot detection, rate limiting, and attack protection
Client-side JS obfuscation and third-party script protection platform with compliance.
Use runtime application intelligence to stop dangerous builds before production.
Runtime Application Self-Protection (RASP) for apps and APIs
Prevent malicious code from being executed. CVE or No CVE.
Runtime monitoring and automated mitigation for execution anomalies
Mobile app security solution protecting against reverse engineering & attacks
JavaScript obfuscation tool for protecting code from reverse engineering
Real-time web application firewall with runtime protection for PHP apps
AI-driven mobile app hardening with cryptographic individualization
Mobile app shielding and in-app protection for mobile applications
Client-side platform for controlling third-party script behavior and preventing data
Client-side platform securing browser scripts, detecting fraud & ensuring PCI compliance.
Runtime RASP platform securing Android & iOS apps with no-code deployment.
Python3 code protection against reverse engineering via opcode obfuscation.
App hardening platform with RASP, obfuscation, and threat monitoring.
Runtime app security platform for ADR, data flow tracking, and threat modeling.
Real-time web service protection using AI-MTD (Moving Target Defense) tech.
Mobile RASP solution offering in-app threat detection and automated protection.
Mobile fraud & device trust platform with 9-layer RASP, hardware binding & agentic AI.
Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security
Runtime protection for apps and APIs detecting and blocking exploits and attacks
Runtime vulnerability prioritization using code execution and attack path analysis
Common questions when weighing alternatives to DOMPurify.
The closest matches to DOMPurify by shared tags and NIST CSF 2.0 coverage are Aikido Zen, Source Defense How it works, Source Defense Platform, PreEmptive Dotfuscator, and Approov Runtime Application Self Protection. All of them are Runtime Application Self-Protection products.
This page shows 29 alternatives to DOMPurify, all in the Runtime Application Self-Protection category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
DOMPurify is a free Runtime Application Self-Protection product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
DOMPurify is a Runtime Application Self-Protection product in the Application Security category. You can compare it with the 29 other Runtime Application Self-Protection products on this page.
No Runtime Application Self-Protection shortlist yet. This is the closest one.
Updated 2026-11-02
See the shortlist
