Detect Webpage
Security Risks

WASM based scanner that runs locally on your browser and detects your web application's client-side security risks.

Are you into PCI DSS?
Get full script inventory with Domdog Scanner.

Looking for help? Get in touch with us

Domdog Scanner Report
Customer Credit Card data accessed by external scripts
3 Issues found in Content Security Policy
2 Key-loggers detected
6 Dangerous APIs used
16 3rd party JavaScripts found in site

Use cases

Discover how Domdog Scanner is used across teams to extract valuable insights from large-scale and complex websites.

Security Teams

Security teams use Domdog Scanner to evaluate the client-side security of web apps. This includes assessing CSP, 3rd Party JS, Data Security, External Exposures, DOM Manipulations, Data Storage, and Communications.

Developers

Developers use the Domdog Scanner to test and implement Content Security Policy (CSP). They also use it to assess the behavior of 3rd party scripts before adding them to the application.

PCI QSAs

QSAs use Domdog Scanner to assess payment pages for PCI DSS 4.0 compliance, specifically with the new payment page requirements 6.4.3 and 11.6.1.

GRC Teams

GRC teams use Domdog Scanner to perform gap analysis and routine checks to ensure compliance with PCI DSS 4.0, GDPR, CCPA, etc.

Privacy Teams

Privacy teams use the Domdog Scanner to assess what customer data is being captured on the website and determine who it is being shared with.

Get started with Domdog Scanner

  • Domdog Scanner is a WebAssembly application so you can run it on all major web browsers, such as Brave, Google Chrome, Safari, Edge, and Opera.
  • The scanning process, including data collection, processing and report generation occurs locally on your system. We do not collect your browsing data or send it to our servers.
  • You can get started with the Domdog scanner by following these three steps:

Frequently
asked questions

The Domdog Scanner is free to use and does not require any specific licensing. However, its usage is bound to the terms of use.

Don't leave your client-side unprotected

Find out how you can protect your client-side in just a matter of weeks