Report URI

Report URI provides a browser-native security platform that gives organisations visibility into what executes in users' browsers and lets them enforce policies to control it. The platform collects telemetry that browsers natively emit, such as Content Security Policy (CSP) reports, network error logs, crash reports, and JavaScript integrity data, without requiring an agent, proxy, or infrastructure changes. Using standards like CSP, Permissions Policy, COOP, and COEP, the platform allows customers to define what scripts, frames, and resources are permitted to load or execute on their websites. It also includes monitoring features such as Script Watch, Data Watch, Frame Watch, and Policy Watch, designed to detect client-side threats such as Magecart-style skimming and unauthorised script or data behaviour. Additional capabilities cover diagnostics (network error logging, deprecation and intervention reports) and trust infrastructure monitoring, including DMARC, SMTP TLS reporting, and certificate transparency monitoring. Data can be delivered through webhooks, APIs, email, and MCP integrations to SIEMs, alerting systems, and other workflows. Report URI was launched in 2015, originating from early CSP and HPKP violation reporting, and has since expanded into a broader client-side security and compliance platform. The company positions its offering as relevant to PCI DSS 4.0 requirements 6.4.3 and 11.6.1, which require monitoring of scripts on payment pages. Customers use the platform to reduce third-party script risk, maintain browser security policies, and generate audit evidence for compliance purposes.