# c/side

> c/side is a client-side security platform that protects websites from malicious third-party scripts, e-skimming, and supply chain attacks. Using a lightweight script-based monitoring approach with AI-powered analysis, c/side provides real-time threat detection, PCI DSS 4.0.1 compliance automation, privacy monitoring, chargeback evidence collection, AI agent detection, and VPN detection. Founded in 2024, $7.7M funded.

This site is available in English (default, no prefix), Spanish (/es/), French (/fr/), and Dutch (/nl/). All URLs below use default English paths.

## Core Documentation

- [Documentation](https://docs.cside.com): Complete technical documentation for integrating and using c/side, publicly accessible without sales calls
- [Trust Center](https://trust.cside.com): SOC 2 Type II audit reports, PCI SAQ-D AOC, and ISO 27001 progress
- [Security](https://cside.com/security): Enterprise security practices and compliance framework
- [FAQ](https://cside.com/faq): 81 frequently asked questions about client-side security, deployment, and compliance
- [Glossary](https://cside.com/glossary): 52 client-side security terms defined, including Magecart, digital skimmers, XSS, script injection, and more
- [Changelog](https://cside.com/changelog): Product updates and feature releases

## Product Solutions

- [Client-Side Security](https://cside.com/solutions/client-side-security): Real-time protection against script injections, Magecart attacks, and third-party supply chain compromises
- [PCI Shield](https://cside.com/solutions/pci-shield): PCI DSS 4.0.1 compliance automation for requirements 6.4.3 and 11.6.1, validated by VikingCloud QSA
- [Privacy Watch](https://cside.com/solutions/privacy-watch): Automated privacy compliance monitoring for GDPR, CCPA, and HIPAA
- [Content Security Policy (CSP)](https://cside.com/solutions/csp): Free CSP management tool with automatic policy generation and violation monitoring
- [Chargeback Evidence](https://cside.com/solutions/chargeback-evidence): Device fingerprinting with 96% accuracy and automated forensic analysis for Visa Compelling Evidence 3.0
- [Fingerprinting](https://cside.com/solutions/fingerprinting): Browser fingerprinting that collects 102+ signals (IP, geolocation, VPN/proxy, bot activity) to detect fraudulent sessions, stop AI-bot abuse, and feed risk scores into existing fraud stacks
- [VPN Detection](https://cside.com/solutions/vpn-detection): Detect users masking location via VPN or IP spoofing for compliance with laws like Texas HB1181, Florida HB3, and UK age verification
- [AI Agent Detection](https://cside.com/solutions/ai-agent-detection): Identify and govern AI agents visiting websites using client-side browser signals
- [Solutions Overview](https://cside.com/solutions): Complete overview of all security solutions

## Use Cases

- [Use Cases Overview](https://cside.com/use-cases): Script injection, Magecart, data leak prevention, payment portal security, fraud prevention, and compliance
- [Account Takeover](https://cside.com/use-cases/account-takeover): Detect and prevent account takeover fraud with browser fingerprinting — catches credential stuffing bots, session hijacking, and logins from suspicious environments (VPNs, VMs, headless browsers)
- [Applicant Check](https://cside.com/use-cases/applicant-check): Stop fraudulent job applications by fingerprinting browser sessions to detect VMs, VPNs, bots, deep fakes, and nation-state impostors before they reach the ATS
- [PCI DSS Compliance](https://cside.com/use-cases/compliance/pci-dss): PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 compliance use case
- [GDPR / Privacy Compliance](https://cside.com/use-cases/compliance/gdpr): Enforce GDPR, CCPA, HIPAA privacy requirements via client-side monitoring
- [Compliance Hub](https://cside.com/use-cases/compliance): PCI DSS, GDPR, HIPAA, SOX, DORA, CCPA/CPRA, and ISO 27001 use cases

## Comparisons

- [Compare Overview](https://cside.com/compare): How c/side compares across three market approaches: CSP-based, crawler/agentless, and JS-based detection
- [vs Cloudflare Page Shield](https://cside.com/compare/cloudflare-page-shield-vs-cside): Beyond CSP-only monitoring with full payload analysis
- [vs Akamai Page Integrity Manager](https://cside.com/compare/akamai-page-integrity-manager-vs-cside): Deeper script analysis and forensics
- [vs Jscrambler](https://cside.com/compare/jscrambler-webpage-integrity-vs-cside): Superior bypass protection and incident response
- [vs Imperva Client-Side Protection](https://cside.com/compare/imperva-client-side-protection-vs-cside): Better real-time protection and AI analysis
- [vs Feroot](https://cside.com/compare/feroot-vs-cside): Enhanced dynamic threat detection
- [vs HUMAN Security](https://cside.com/compare/human-security-vs-cside): Better certainty of monitored script contents
- [vs DataDome](https://cside.com/compare/datadome-vs-cside): Beyond bot detection with real-time client-side security
- [vs Reflectiz](https://cside.com/compare/reflectiz-vs-cside): Real-time monitoring vs periodic scanning
- [vs Source Defense](https://cside.com/compare/source-defense-vs-cside): Script-based monitoring vs agent-only approach
- [vs Report URI](https://cside.com/compare/report-uri-vs-cside): Active protection vs passive monitoring
- [vs DomDog](https://cside.com/compare/domdog-vs-cside): Advanced AI analysis vs basic monitoring
- [vs Fastly Client-Side Protection](https://cside.com/compare/fastly-client-side-protection-vs-cside): Full protection comparison
- [vs Security Metrics](https://cside.com/compare/security-metrics-shopping-cart-monitor-vs-cside): Shopping cart security comparison

## Pricing

- [Pricing](https://cside.com/pricing): Free tier available, Pro at $99/month, Enterprise with custom pricing

## Company

- [About](https://cside.com/about): Founded 2024, $7.7M funded, remote team with backgrounds from Cloudflare, Vercel, JP Morgan, Microsoft, and W3C contributors
- [Blog](https://cside.com/blog): 146+ posts on security research, threat analysis, attack discoveries, and compliance guides
- [Contact](https://cside.com/contact): Talk to a security expert
- [Partners](https://cside.com/partners): Partner program for agencies, MSPs, and security consultants with integrations for AWS, Datadog, Okta, Slack, Splunk, and more
- [Careers](https://cside.com/careers): Open positions
- [Press](https://cside.com/press): Press releases and media coverage
- [News](https://cside.com/news): Company announcements

## Optional

- [Learning Center](https://cside.com/learning): Educational guides on client-side security and web protection
- [Domain Directory](https://cside.com/domains): Intelligence database of domains and script security ratings
- [PCI DSS Hub](https://cside.com/pci-dss): Dedicated resource page for PCI DSS compliance
- [Industry: eCommerce](https://cside.com/industry/ecommerce): Magecart protection and payment security for online retailers
- [Industry: Healthcare](https://cside.com/industry/healthcare): HIPAA compliance and PHI protection for patient portals
- [Industry: SaaS](https://cside.com/industry/saas): Client-side protection for SaaS platforms
- [Industry: Payments](https://cside.com/industry/payments): Security for payment processors and gateways
- [Industry: Gaming](https://cside.com/industry/gaming): Protection for gaming platforms and virtual economies
- [Industry: Crypto](https://cside.com/industry/crypto): Security for cryptocurrency and DeFi platforms
- [Client-Side Attack Report](https://cside.com/blog/client-side-attack-report-q2-2025): Quarterly analysis of attack trends. 300K+ incidents detected in 2025
- [VikingCloud Validation](https://cside.com/blog/vikingcloud-approves-c-sides-security-platform-for-pci-dss-v4-0-1-requirement-6-4-3-and-11-6-1): Independent QSA validation of PCI DSS compliance solution
- [Differences in Client-Side Security Solutions](https://cside.com/blog/the-differences-in-client-side-security-solutions): Market analysis of the three approaches to client-side security
- [Biggest Magecart Attacks in History](https://cside.com/blog/the-biggest-magecart-attacks-in-history-so-far): Historical analysis of major e-skimming attacks
- [PCI DSS Webinar with BARR Advisory](https://cside.com/webinar-pci-dss-barr): On-demand webinar on PCI DSS 4.0.1 implementation strategies
- [PCI DSS Webinar with VikingCloud](https://cside.com/webinar-pci-dss-vikingcloud): On-demand webinar on practical PCI DSS compliance and e-skimming defense
- [Book a Demo](https://cside.com/book-demo): Schedule a live product demonstration
- [Privacy Policy](https://cside.com/privacy-policy): Data handling and protection policies
- [Terms & Conditions](https://cside.com/terms-and-conditions): Service terms
- [Blog RSS](https://cside.com/blog/rss.xml): RSS feed for latest security insights
- [Learning RSS](https://cside.com/learning/rss.xml): RSS feed for educational content
- [Press RSS](https://cside.com/press/rss.xml): RSS feed for press releases