Blog

As leading voices in client-side security, our team of experts provides timely commentary on all of the latest industry news, trends, and highlights. Explore the Feroot blog to learn more about what is happening in client-side security.

Subscribe to blog

PCI-DSS 4.0 Requirement 6.4.3 compliance report Feroot.

How to Use Feroot to Comply with PCI DSS 4.0 Requirement 6.4.3 on Your Payment Pages

Reducing the Noise: Why Vulnerability Types Matter

Data Asset Classification: Why it's Important for Client-Side Protection

Magecart Attack: Hacker steals credit card info from Canada’s largest alcohol retailer

Blog

User Guide: PCI 4.0 Requirement 11.6 – Detecting and Responding to Unauthorized Changes on Payment Pages with Feroot

PCI-DSS 4.0 Requirement 6.4.3 compliance report Feroot.

How to Use Feroot to Comply with PCI DSS 4.0 Requirement 6.4.3 on Your Payment Pages

Ensuring PCI DSS 4.0 Compliance with Feroot: A Deep Dive into Requirement 6.4.3

Patient Privacy: Preventing Data Leakage in Healthcare

PCI DSS 4.0 Compliance

PCI DSS 4.0 Compliance: A Guide to Requirements 6 & 11

The Risks of Using ChatGPT to Write Client-Side Code

The Risks of Using ChatGPT to Write Client-Side Code

Reducing the Noise: Why Vulnerability Types Matter

Data Asset Classification: Why it's Important for Client-Side Protection

Magecart Attack: Hacker steals credit card info from Canada’s largest alcohol retailer

Feroot

3 Important Things to Know About Cookie Security

Five Client-Side Web App Risks Banking & Investment Should Know

Feroot

Web Tracker Security: Lawsuit Filed Against Hospitals for Data Privacy Violations

How to Create and Deploy a Content Security Policy.

How to Create and Deploy a Content Security Policy

Web Trackers. Your Next JavaScript Security Nightmare.

Web Trackers: Your Next JavaScript Security Nightmare

Dear AppSec: I was the credit card skimming attack victim (and it sucks!)

Dear AppSec: I Was a Credit Card Skimming Attack Victim. (And It Sucks!)

Hell Yeah, I Want an Automated Content Security Policy

Hell Yeah, I Want an Automated Content Security Policy!

5 Things Developers Should Know About JavaScript Web Application Security

What does PCI DSS 4.0 mean for client-side security?

What Does PCI DSS 4.0 Mean for Client-Side Security?

Everything you need to know to prevent JavaScript supply chain attacks

Everything You Need to Know to Prevent JavaScript Supply Chain Attacks

The TTPs of JavaScript Supply Chain Attacks

10 JavaScript Security Best Practices for Business Websites

Why Web Application Visibility Is Important to JavaScript Security

Why Web Application Visibility Is Important to JavaScript Security

E-commerce Website Security: 5 Threats & Security Solutions

Everything you need to know to improve JavaScript security.

Everything You Need to Know to Improve JavaScript Security

Feroot

What Is Client-Side Security and Why Is It Important for Your Business?

One of the most important actions any business can take is protecting their customers from JavaScript threats.

The 5 Most Important Things Businesses Need to Know About JavaScript Security

3 Reasons Why JavaScript Security Is Important When Using Third-Party Code in Web Frameworks

There is more to security than just protecting the back end. Both the server side and the client side need protecting.

Ivan Tsarynny and Vitaliy Lim on Feroot’s $11 Million Seed Funding to Improve Client-Side Security

Anuradha Kumari, Front-End Developer

Women of JavaScript: Front-End Developer, Anuradha Kumari

#BreakingtheBias. As an immigrant, woman, Arab, and married, we set out to break bases every day of our lives, even outside the 9-5 hustle. This theme just means that there are so many already breaking biases every day, and that feels nice in a way, to know you're not alone and that you're heard.

Women of Cybersecurity: Marketing Guru, Maria Velasquez

Women of JavaScript: Developer, Jessica Cregg

Women of Software Engineering: CivTech Specialist, Alsia Plybeah

Women of Web Development: Code Warrior, Luciana Hernández

What is Shadow Code and Why Should I Worry?

What is Shadow Code and Why Should I Worry?

Highlights from the Ultimate Guide to Client-side Security

Highlights from the Ultimate Guide to Client-Side Security

How to Protect the Supply Chain from Vulnerable Third-party Code

How to Protect the Software Supply Chain from Vulnerable Third-Party Code

CAPTCHA Risks: More dangerous than useful?

Client-side Kill Chain - JavaScript Malware Attack Defense

Client-Side Kill Chain: JavaScript Security Attack Defense

Ultimate Guide to Client-side Security

The Ultimate Guide to Client-Side Security: Executive Overview

How to Check If your JavaScript Security is Working

How to Check If Your JavaScript Security Is Working

How to Recover from a Client-side Attack

How to Recover from a Client-Side Attack

What is Customer Journey Hijacking?

What is Customer Journey Hijacking?

The importance of web security

Hackers gonna hack: The importance of web security

What is the difference between client-side and server-side?

What is the difference between client side and server side and why is it important to your everyday security?

Client-side Attack Surface Monitoring

Everything You Need to Know About Client-side Attack Surface Monitoring

Everything You Need to Know About Code Obfuscators

Everything You Need to Know About Code Obfuscators

How Synthetic Users Enhance Client-Side Security

Realities About the Security of the Software Supply Chain

Supply Chain Shock: Realities About the Security of the Software Supply Chain

7 Ways Hackers Skim Data

7 Ways Hackers Skim Data from Your Website While Flying Under the Radar

OWASP-Top-10-Mapping

OWASP Top 10: What’s New in the 2021 Release

10 ways to improve website security and keep your customers safe at the same time.

10 Ways to Improve Your Website Security (and Keep Your Customers Safe at the Same Time!)

Secure marketing icon

Clash of the Titans: Marketing and Security

websockets graphic

What are WebSockets and How do Hackers Exploit Them? How does Feroot Security Inspector Protect Customers?

Driving DevSecOps effectiveness with PagerDuty and Feroot

GRC Impacts 3rd Party Web Client Interactions

Governance, Risk, & Compliance Impacts of 3rd Party Web Client Interactions

Why JavaScript and Github Aren’t Always Safe

Magecart and E-skimming: Why JavaScript and Github Aren’t Always Safe

Operationalize Web Application Client-side Security

How to Operationalize Web Application Client-Side Security

Cross-site Scripting (XSS) Attacks

Everything You Need to Know About Cross-site Scripting (XSS) Attacks

Magecart and Other Skimming Attacks

Everything You Need to Know About Magecart and Other Skimming Attacks

Formjacking Attacks

Everything You Need to Know About Formjacking Attacks

Client-side Vulnerability Scanning

Everything You Need to Know About Client-Side JavaScript Vulnerability Scanning

JavaScript Security Permissions

Everything You Need to Know About JavaScript Security Permissions

Everything Testing & Assessments

Everything You Need to Know About Client-side Pentesting, Vulnerability and Security Assessments

Everything You Need to Know About Web Application Firewalls

Everything CSP

Everything You Need to Know About Content Security Policies (CSP)

Love It or Hate It, JavaScript is Here to Stay

client-side security risk management

Client-Side Security Risk Management: The Root-Cause Solution Approach

Threat actors are increasingly targeting web applications with Magecart and e-skimming attacks.

How Magecart and e-skimming attacks are accelerating

The Importance of Defending the Client-Side Attack Surface

Learn How to Detect Threats on Your Web Applications Today

See Client-Side Security in Action!