Security Checks
Actionable security checks with what to measure, why it matters, and how VANTAGE surfaces the evidence.
JavaScript runtime
13 articles
Detecting new JavaScript on production frontends
Detecting new JavaScript on production frontends explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
DOM drift monitoring for security teams
DOM drift monitoring for security teams explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Wallet connect flow monitoring for dApps
Wallet connect flow monitoring for dApps explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Frontend route integrity for launch pages
Frontend route integrity for launch pages explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Client-side redirects as a security signal
Client-side redirects as a security signal explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Frontend localStorage and sessionStorage exposure review
Frontend localStorage and sessionStorage exposure review explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Runtime evidence for checkout and payment pages
Runtime evidence for checkout and payment pages explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Content Security Policy report triage
Content Security Policy report triage explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Frontend dependency evidence for auditors
Frontend dependency evidence for auditors explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Production JavaScript baseline governance
Production JavaScript baseline governance explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Frontend error telemetry during compromise response
Frontend error telemetry during compromise response explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Browser cache and stale asset security checks
Browser cache and stale asset security checks explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Runtime frontend monitoring maturity model
Runtime frontend monitoring maturity model explains how to turn browser-observed frontend behavior into security evidence instead of relying only on repositories or deploy logs.
Frontend supply chain
8 articles
Third-party script inventory for dApps
Third-party script inventory for dApps gives teams a practical way to review the outside code that runs inside trusted browser sessions.
CDN compromise detection for protocol frontends
CDN compromise detection for protocol frontends gives teams a practical way to review the outside code that runs inside trusted browser sessions.
Subresource Integrity for dApps
Subresource Integrity for dApps gives teams a practical way to review the outside code that runs inside trusted browser sessions.
Tag manager risk on wallet-facing pages
Tag manager risk on wallet-facing pages gives teams a practical way to review the outside code that runs inside trusted browser sessions.
CDN origin failover and frontend trust
CDN origin failover and frontend trust gives teams a practical way to review the outside code that runs inside trusted browser sessions.
Package-lock changes versus deployed JavaScript
Package-lock changes versus deployed JavaScript gives teams a practical way to review the outside code that runs inside trusted browser sessions.
Payment provider script allowlisting
Payment provider script allowlisting gives teams a practical way to review the outside code that runs inside trusted browser sessions.
Frontend supply-chain risk register template
Frontend supply-chain risk register template gives teams a practical way to review the outside code that runs inside trusted browser sessions.
Exposed secrets
5 articles
Client-side environment variable review
Client-side environment variable review separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
Mapbox, Stripe, and analytics keys in browser apps
Mapbox, Stripe, and analytics keys in browser apps separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
Source-map exposure in Next.js deployments
Source-map exposure in Next.js deployments separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
Client-side RPC keys and quota abuse
Client-side RPC keys and quota abuse separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
Frontend GraphQL endpoint exposure review
Frontend GraphQL endpoint exposure review separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
AI-era security
2 articles
JavaScript comments as reconnaissance material
JavaScript comments as reconnaissance material separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
AI-era shipping checklist for browser security
AI-era shipping checklist for browser security separates acceptable public configuration from browser-shipped material that gives attackers capability or leverage.
Domain security
4 articles
DNSSEC for crypto teams
DNSSEC for crypto teams maps domain-control posture to observable records, policies, and drift that defenders can retest.
Subdomain takeover evidence and triage
Subdomain takeover evidence and triage maps domain-control posture to observable records, policies, and drift that defenders can retest.
RDAP and WHOIS evidence for domain ownership
RDAP and WHOIS evidence for domain ownership maps domain-control posture to observable records, policies, and drift that defenders can retest.
Domain control-plane security checklist
Domain control-plane security checklist maps domain-control posture to observable records, policies, and drift that defenders can retest.
Email and brand abuse
2 articles
DMARC, SPF, and DKIM for protocol domains
DMARC, SPF, and DKIM for protocol domains maps domain-control posture to observable records, policies, and drift that defenders can retest.
MX records and phishing blast radius
MX records and phishing blast radius maps domain-control posture to observable records, policies, and drift that defenders can retest.
TLS and HTTPS
2 articles
Certificate transparency monitoring for dApps
Certificate transparency monitoring for dApps maps domain-control posture to observable records, policies, and drift that defenders can retest.
HTTPS redirect integrity for protocol sites
HTTPS redirect integrity for protocol sites maps domain-control posture to observable records, policies, and drift that defenders can retest.
Incident response
2 articles
Frontend hijack response checklist
Frontend hijack response checklist focuses on the evidence that separates noisy brand similarity from active abuse and urgent response work.
Wallet-drainer landing page indicators
Wallet-drainer landing page indicators focuses on the evidence that separates noisy brand similarity from active abuse and urgent response work.
Lookalikes and threat intel
3 articles
Threat-intel aggregation without alert fatigue
Threat-intel aggregation without alert fatigue focuses on the evidence that separates noisy brand similarity from active abuse and urgent response work.
Homoglyph domain monitoring for brands
Homoglyph domain monitoring for brands focuses on the evidence that separates noisy brand similarity from active abuse and urgent response work.
Support impersonation domain monitoring
Support impersonation domain monitoring focuses on the evidence that separates noisy brand similarity from active abuse and urgent response work.
Buyer education
5 articles
Public score pages for pre-sales trust
Public score pages for pre-sales trust shows how to turn external security posture into evidence that buyers, partners, and internal owners can inspect.
Continuous monitoring versus point-in-time audits
Continuous monitoring versus point-in-time audits shows how to turn external security posture into evidence that buyers, partners, and internal owners can inspect.
Buyer guide to JavaScript attack surface tools
Buyer guide to JavaScript attack surface tools shows how to turn external security posture into evidence that buyers, partners, and internal owners can inspect.
What to include in a frontend security review
What to include in a frontend security review shows how to turn external security posture into evidence that buyers, partners, and internal owners can inspect.
Operationalizing remediation across domain portfolios
Operationalizing remediation across domain portfolios shows how to turn external security posture into evidence that buyers, partners, and internal owners can inspect.