c/side

No entries match these filters. Clear filters

1. Introducing CSP Builder seen Aug 15, 2026 · issue 046

   c/side adds CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. Builder to turn observed script hosts into a deployable Content-Security-Policy across seven directives.

   ⤢
   • New CSP Builder feature generates a suggested Content-Security-Policy from hosts c/side has already observed on your site, covering seven directives: script-src, connect-src, img-src, style-src, frame-src, font-src, and media-src.
   • Lets you review, toggle off unexpected hosts, and add hosts not yet observed before deploying the policy.
   • Supports a report-only header workflow — deploy in report-only mode first, monitor violations in the dashboard, then switch to enforce mode once the policy is clean.

   3 details in Everything

2. Introducing CSP Builder Aug 14, 2026 · release notes

   Introducing CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. Builder to generate Content-Security-Policy directives from observed script hosts

3. Cmd+K command palette seen Jul 23, 2026 · issue 023

   c/side adds a Cmd+K command palette for keyboard-first navigation across domains, features, and settings.

   └──▷ HOW TO FIND IT
   Jump directly to any domain or setting without mouse navigation — useful when triaging alerts across many monitored domains.
   📍Press Cmd+K from anywhere in the dashboard, then type the domain name or setting to jump to it instantly.
   • New Cmd+K command palette enables instant keyboard-driven search and navigation to any domain, feature, or setting in the dashboard.

   1 detail in Everything

4. Fingerprint Dashboard is now generally available seen Jul 23, 2026 · issue 023

   c/side's Fingerprint Dashboard is now GA — monitor device fingerprints and filter AI agent traffic from a single view.

   └──▷ HOW TO FIND IT
   Separate bot and AI agent traffic from legitimate users to investigate suspicious script activity.
   📍In the console, go to the Fingerprint Dashboard and apply the AI agent signals filter to view only automated visitors.
   • Adds generally available Fingerprint Dashboard for monitoring device fingerprints across all traffic.
   • Enables filtering by AI agent signals to distinguish automated visitors from real users.
   • Provides unified single-view management of fingerprint data, billed within existing c/side subscriptions.

   3 details in Everything

5. JA4 TLD fingerprinting seen Jul 23, 2026 · issue 023

   c/side adds JA4JA4A network fingerprinting method that hashes observable TLS handshake fields into a short, readable tag, giving cyber tools a stable, version-agnostic way to classify clients and detect anomalies. TLS fingerprinting to detect VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. clients masquerading as browsers

   • Adds per-connection JA3JA3A method for fingerprinting TLS clients by hashing fields from the ClientHello message, producing a short string that identifies the TLS library or application making a connection regardless of IP or port./JA4 TLS fingerprinting using the full ClientHello (cipher suites, extensions, ALPN, elliptic curves) to detect VPN client software impersonating web browsers.

   1 detail in Everything

6. New Notifications Engine supporting Linear and Jira seen Jul 23, 2026 · issue 023

   c/side adds Linear and Jira integrations to automatically create issues from security alerts.

   ⤢
   └──▷ HOW TO FIND IT
   Route c/side security alerts directly into your Linear or Jira project to keep remediation in your existing issue tracker.
   📍In the console, go to Settings › Notifications, connect your Linear or Jira account, and configure which alert types create issues.
   • New Notifications Engine lets you configure which alerts route to which destinations, giving granular control over alert delivery.
   • Integrates with Linear to automatically create issues from c/side alerts (Business and Enterprise plans).
   • Integrates with Jira to automatically create issues from c/side alerts (Business and Enterprise plans).

   3 details in Everything

7. Onboarding that matches your use case seen Jul 23, 2026 · issue 023

   c/side adds use-case-guided onboarding for PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. compliance, fraud prevention, AI agent detection, and device fingerprinting.

8. Script Ad Injection Detection seen Jul 23, 2026 · issue 023

   c/side adds ad injection detection, flagging client-side scripts that trigger 5+ redirects or suspicious iframe behavior.

   • New detections identify ad injection via client-side scripts, including iframe data population and URL resolution.
   • Alerts customers when scripts exhibit suspicious redirect behavior (5 or more redirects).

   2 details in Everything

9. Self-service SSO for enterprise customers seen Jul 23, 2026 · issue 023

   c/side enterprise adds self-service SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. setup for Okta, Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., and Duo Security.

   ⤢
   └──▷ HOW TO FIND IT
   Onboard your organization's identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. without waiting on support — configure SSO directly in the dashboard.
   📍In the cside dashboard, go to Settings › SSO and select your identity provider (Okta, Microsoft Entra ID, or Duo Security) to complete setup.
   • Supports self-service SSO configuration for Okta, Microsoft Entra ID, and Duo Security directly in the cside dashboard — no support ticket required.

   1 detail in Everything

10. We now detect when bots try to hide seen Jul 23, 2026 · issue 023

    c/side now automatically detects bots that spoof browser automation properties to appear as legitimate users.

    • Detects bots that spoof browser automation properties to evade fingerprinting, surfacing the signal in fingerprint data.

    1 detail in Everything

11. Fingerprint Dashboard is now generally available May 29, 2026 · release notes

    Fingerprint Dashboard GA allows monitoring device fingerprints, filtering by AI agent signals, and unified management.

    └──▷ HOW TO FIND IT
    Use the dashboard to distinguish automated bot traffic from human visitors by filtering on AI agent signals.
    📍In the console, navigate to the Fingerprint Dashboard and apply the AI agent signals filter.
    • Monitors device fingerprints across traffic via the new Fingerprint Dashboard.
    • Filters traffic data by AI agent signals to separate automated visitors from real ones.
    • Manages all fingerprinting configuration from a single unified view.

    3 details in Everything

12. Onboarding that matches your use case May 29, 2026 · release notes

    Guided onboarding flow based on use cases like PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. compliance or fraud prevention.

13. We now detect when bots try to hide May 29, 2026 · release notes

    cside detects bot automation spoofing via new fingerprint signal

    • Adds detection of bots attempting to hide by spoofing browser automation properties.

    1 detail in Everything

14. JA4 TLD fingerprinting Mar 18, 2026 · release notes

    c/side adds per-connection JA4JA4A network fingerprinting method that hashes observable TLS handshake fields into a short, readable tag, giving cyber tools a stable, version-agnostic way to classify clients and detect anomalies. TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type. fingerprinting to detect VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. clients masquerading as browsers

    • Computes the JA4 hash from the full TLS ClientHello (including cipher suites, extensions, ALPN, and elliptic curves)
    • Detects VPN client software that attempts to masquerade as a standard web browser

    2 details in Everything

15. New Notifications Engine supporting Linear and Jira Mar 17, 2026 · release notes

    New Notifications Engine allows connecting cside alerts to Linear and Jira issue creation.

    └──▷ HOW TO FIND IT
    Connect cside to Linear to auto-create issues for high-severity alerts.
    📍In the console, go to Notifications Settings and enable the Linear integration.
    Connect cside to Jira to auto-create issues for high-severity alerts.
    📍In the console, go to Notifications Settings and enable the Jira integration.
    • Adds Linear integration for automatically creating issues from alerts.
    • Adds Jira integration for automatically creating issues from alerts.

    2 details in Everything

16. Script Ad Injection Detection Jan 20, 2026 · release notes

    New detections for ad injection via client-side scripts and iframe analysis

    • Adds detection of ad injection via client-side scripts.
    • Alerts when scripts exhibit suspicious redirect behavior (e.g., 5 or more redirects).

    2 details in Everything

17. Self-service SSO for enterprise customers Dec 18, 2025 · release notes

    cside enterprise adds self-service SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. setup for Okta, Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments., and Duo via dashboard

    └──▷ HOW TO FIND IT
    Onboard an enterprise identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. without opening a support ticket
    📍In the cside dashboard, navigate to Settings › Identity Provider and select Okta, Microsoft Entra ID, or Duo Security.
18. Notifications Engine Released Jul 17, 2025 · release notes

    c/side releases a new notifications engine supporting webhook endpoints and AWS S3 export for real-time alert visibility.

    • Adds webhook notification support to the dashboard domain settings, enabling real-time alerts to Slack, Discord, or other platforms via an endpoint URL.

    1 detail in Everything

19. Script Pattern Matching feature Jul 1, 2025 · release notes

    Script Pattern Matching groups dynamic script URLs to reduce repetitive items in the dashboard.

    • Adds pattern matching for dynamic script URLs to group similar requests into a single item for review.

    1 detail in Everything

20. Channel partner program Apr 14, 2025 · release notes

    c/side launches Channel Partner Program with multi-tenant dashboard and 3-tier identity model for managing client projects.

    • Adds a unified dashboard for channel partners to manage all client projects in one place
    • Introduces a 3-tier identity access model (Organization -> Team -> Domain) for partner client management
    • Enables inviting end customers to teams within the partner's Organization structure

    3 details in Everything

21. PCI DSS compliance report Feb 17, 2025 · release notes

    cside now provides weekly automated PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. compliance reports including script justifications and security header changes for enterprise customers.

    • Adds automatic weekly delivery of PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. DSS compliance reports to cside enterprise customers who opted into the PCI DSS dashboard
    • Adds download capability for the PCI DSS report within the PCI DSS dashboard

    2 details in Everything

22. Introducing the cside sidebar Dec 27, 2024 · release notes

    Introduces the cside sidebar for better navigation and feature access in the new dashboard layout

    • Adds a new cside sidebar UI element that houses custom views and provides easier access to frequently used features

    1 detail in Everything

23. Multi-Factor Authentication for everyone! Jul 16, 2024 · release notes

    cside adds native MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. support for all plans with dashboard session management

    • Adds native multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. (MFA) support for all plans, including authenticator apps and hardware tokens like YubiKey and Apple Touch ID.
    • Enables viewing active account sessions and revoking previous sessions directly from the dashboard.
    • Notifies users of new login attempts.

    3 details in Everything