Content Security Policy Manager

Smarter Content Security Policy Management Starts Here

Blue Triangle's CSP Manager takes the hassle out of tracking your site's tags and content. Leveraging the data on the websites that we actively measure, we inventory and provide context about how often we see domains so we can advise on which domains are common and secure, and those that aren't. Secure your site quickly and efficiently!

How the Blue Triangle CSP Manager works

With Blue Triangle, you are not alone managing your Content Security Policy. We maintain an extensive, curated library of thousands of the most trafficked websites to provide context where these domains often appear and what percentage of the time.

STEP 1

Inventory your site’s first and third-party domains

We start off by identifying what first and third-party domains are loading on your site. See who owns the domains, what pages they’re loading on, and what files they’re loading. This is powered by our best-in-class Real User and Synthetic Monitoring.

The Blue Triangle Content Security Policy Manager inventories your site's first and third-party domains.

The Blue Triangle Content Security Policy Manager determines what domains to whitelist.

STEP 2

Determine what domains to whitelist.

Now that you know what domains are loading on your site, quickly create a whitelist of approved domains, as well as what type of files they are allowed to load.

STEP 3

Auto-generate your Content Security Policy (CSP).

Once you approve the whitelist, Blue Triangle automatically generates a comprehensive CSP header and meta-tag that you can deploy in seconds.

The Blue Triangle Content Security Policy Manager auto-generates your content security policy.

The Blue Triangle Content Security Policy Manager safely and securely deploys your content security policy.

STEP 4

Deploy your CSP and stay secure.

Your CSP blocks any unknown or malicious domains from accessing your site. We’ll alert you as soon as a domain you have not whitelisted tries to access your site.
Not ready to block? Then stay in report-only mode as you fine-tune your CSP.

A CSP can protect your site from

Credit Card Skimming & Cross-Site Scripting (XSS)

If malicious code is injected on your checkout pages, a CSP automatically blocks the code from sending payment information to the hacker’s domain.

Browser Hijacking & Ad Injection

Computer malware causes unwanted (and often competitive) ads to appear on your site. A CSP prevents these ads from even loading on your customers’ browsers.

Unauthorized Piggyback Tags

One third-party tag could be loading tags from vendors you have not authorized. A CSP eliminates this security and GDPR/CCPA risk.

…and would have prevented these recent attacks

The Blue Triangle Content Security Policy Manager would have protected a site from hacking.

11%
drop in stock price

October 2019

The Blue Triangle Content Security Policy Manager would have protected a site from theft.

565K
credit cards stolen
(and $230M in fines)

Aug 21, 2018 – Sep 5, 2018

The Blue Triangle Content Security Policy Manager would have protected a site from a data breach.

45M
credit cards stolen

Aug 14, 2018 – Sep 18, 2018

New to Content Security Policy?

Download Guide

Blue Triangle’s insights helped us improve average order value by 12% and increase pages per session by 26%!

Arthur Swanburg

Director of eCommerce

Trusted by Fortune 500 Companies
Some of our Delighted Customers...

Stop letting active buyers slip through your fingertips

Schedule a demo