What it is
Client-side security covers the attack surface inside the visitor's browser after page load: JavaScript execution, third-party scripts, requests to external domains, and DOM manipulation. Server-centric defenses such as WAF, IDS, and file integrity monitoring do not see this surface because the malicious code executes in the client — often from a compromised third-party dependency — and never passes through the origin.
Real-world examples
- A compromised tag manager injecting a skimmer.
- A hijacked CDN script running with the page's full privileges.
- A backdoored npm dependency loaded at runtime.
How ExploitShield detects it
Rather than proxying traffic, ExploitShield re-renders monitored pages in a real browser every 5 minutes, captures every executed JS body and every outbound destination, and enriches them with threat intelligence — making the client-side surface as visible as the server side has ever been.