Akamai Client-Side Protection & Compliance
Akamai Client-Side Protection & Compliance is a security solution designed to protect websites from client-side threats and assist with PCI DSS v4.0 compliance. The tool analyzes script behavior in real-time, providing visibility into potential cyberthreats and vulnerabilities within all scripts running on a website. It offers a dashboard for monitoring script activity and delivers actionable alerts to mitigate harmful script behavior. Key features include: 1. Real-time monitoring and assessment of script activity 2. Machine learning techniques to analyze the risk of unauthorized actions 3. Alerts with detailed mitigation information for active threats or attacks 4. One-click restriction of malicious scripts from accessing sensitive data 5. Streamlined workflows for PCI DSS v4.0 script security requirements 6. Flexible deployment options at the edge or from origin 7. Vulnerability-focused policy that analyzes URLs for Common Vulnerabilities and Exposures (CVE) 8. Reporting capabilities with dashboards and detailed incident reports The solution is particularly useful for addressing web skimming and Magecart attacks, providing client-side visibility, and helping organizations comply with PCI DSS v4.0 requirements related to script security.
FEATURES
ALTERNATIVES
Fnord is a pattern extractor for obfuscated code that extracts byte sequences and creates statistics, as well as generates experimental YARA rules.
Static code analysis tool for infrastructure as code (IaC) and software composition analysis (SCA) with over 1000 built-in policies for AWS, Azure, and Google Cloud.
A script that implements Cognito attacks such as Account Oracle or Priviledge Escalation
Cross-site scripting labs for web application security enthusiasts
A next-generation web scanner that identifies websites and recognizes web technologies, including content management systems, blogging platforms, and more.
A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.
InQL is a Burp Suite extension for advanced GraphQL testing and vulnerability detection
PINNED
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.