Jscrambler

Most privacy programs are built around what happens after data reaches your systems. But what if the biggest privacy blind spot exists before that? ⬇️

In their latest blog, Gareth Bowker and Nathan Coppinger explore why the browser has become one of the most overlooked areas in modern privacy programs - and how third-party pixels, client-side scripts, and consent timing gaps can expose organizations to compliance and business risks they may not even realize. If your privacy strategy starts at form submission, it may already be too late. Read the full blog to learn why client-side governance needs to be part of every privacy program.

Read it now at Jscrambler's Blog https://eu1.hubs.ly/H0wpghz0 📘

What Your Data Privacy Program Can’t See (But Should) Privacy compliance has matured a lot. Data maps, management platforms, vendor risk assessments - most organizations have these foundations in place.

AI coding assistants are helping developers build faster than ever. But speed comes with a trade-off many teams aren't thinking about: what happens when proprietary business logic gets shipped directly to the browser? ⬇️

With vibe coding, it's easier than ever to generate and deploy frontend code at scale. It's also easier to expose pricing models, fraud detection logic, recommendation algorithms, authentication flows, and other competitive IP without realizing it.

And in the age of AI, attackers don't need to manually reverse-engineer your code. They can use LLMs to understand, analyze, and replicate it.
In our latest blog, we explore:
🔹 Why vibe coding amplifies client-side security risks
🔹 Why minification and basic obfuscation are no longer enough
🔹 What LLM-resilient code protection looks like in practice
🔹 How to build security directly into AI-assisted development workflows

If AI is accelerating your development cycle, your approach to protecting client-side code needs to evolve too.

Read it now at Jscrambler's blog https://eu1.hubs.ly/H0w0rjf0 📘

Vibe Coding Risks: Guide to Secure Your APIs When you rush through coding, you can expose your API endpoints. Anyone could access sensitive data. Vibe coding is now more common thanks to new tools.

¡Qué semana tan increíble en SEMEPA México 2026! 🇲🇽

Nuestro equipo tuvo la oportunidad de reunirse con instituciones financieras, líderes de la industria de pagos y profesionales de ciberseguridad para conversar sobre uno de los desafíos más importantes de la actualidad: fortalecer la seguridad del lado del cliente y proteger los datos sensibles en todo el ecosistema de pagos digitales. 👇

Muchas gracias a todos los que asistieron a nuestras sesiones:

🎤 Más allá de PCI DSS: Seguridad del lado del cliente y protección de datos sensibles en el ecosistema de pagos — presentada por Flávio Moritz y Daniel E.

🛠 De PCI DSS a la gobernanza de datos del lado del cliente — presentada por Ricardo Lé

Junto con C3nsusAI exploramos cómo las organizaciones pueden ir más allá de los requisitos de cumplimiento y construir defensas más sólidas frente a las amenazas web modernas, al mismo tiempo que mejoran la visibilidad y la gobernanza de los datos del lado del cliente. 🛡️

Gracias al equipo de SEMEPA y a todos los que se acercaron para intercambiar conocimientos, compartir desafíos e ideas. Esperamos seguir fortaleciendo estas conversaciones y ayudar a las organizaciones a reforzar sus estrategias de seguridad del lado del cliente.

¡Nos vemos en el próximo evento! 👋

---

[ENG]

What a great week at SEMEPA Mexico 2026! 🇲🇽

Our team had the opportunity to connect with financial institutions, payment leaders, and cybersecurity professionals to discuss one of today's most pressing challenges: securing the client-side and protecting sensitive data across the digital payment ecosystem. 👇

A big thank you to everyone who joined our sessions:

🎤 Más allá del PCI DSS: Seguridad client-side y protección de datos sensibles en el ecosistema de pagos — presented by Flávio Moritz and Daniel E.

🛠 Del PCI DSS a la gobernanza de datos en el client-side — presented by Ricardo Lé.

Together with C3nsusAI, we explored how organizations can go beyond compliance requirements and build stronger defenses against modern web threats while improving visibility and governance of client-side data. 🛡️

Thank you to the SEMEPA team and everyone who stopped by to share insights, challenges, and ideas. We look forward to continuing the conversations and helping organizations strengthen their client-side security strategies.

See you at the next event! 👋

JavaScript obfuscation and minification are often mentioned together - but they solve very different problems. ⬇️

In our latest blog, we break down:
✅ What JavaScript obfuscation and minification actually do
✅ Key differences between the two approaches
✅ Real-world examples of each
✅ When to use one—or both—for maximum impact

Read the full guide and learn how to balance performance and security in your web applications at Jscrambler's blog https://eu1.hubs.ly/H0vXBBk0 📘

Understanding JavaScript Obfuscation and Minification Learn the differences between JavaScript obfuscation and minification, how they work, and when to use each for stronger security and better performance.

The era of 'compliance by documentation' is officially over. ⬇️

As of January 1, 2026, the updated CCPA regulations no longer accept a business's word on privacy - they demand technical proof of it. That means independent cybersecurity audits, documented risk assessments, mandatory GPC signal recognition, and real enforcement of opt-out preferences at the browser level.

For any enterprise running on the modern composable web - where first-party code, third-party scripts, and AI agents all interact in real time - this is a significant shift.

Jscrambler's Product Marketing Manager Nathan Coppinger and Head of Security Research Gareth Bowker have written a deep dive covering exactly what's changed, who needs to comply and when, and what 'demonstrable compliance' actually looks like in practice. From dark pattern prohibitions to the governance of automated decision-making technology, it's a practical guide to the new compliance reality.

Read it now at Jscrambler's blog https://eu1.hubs.ly/H0vK7J90 📘

Navigating the New 2026 CCPA Rules | Jscrambler The CPPA issued updates to the CCPA regulations, bringing the era of "compliance by documentation" to an end. Discover the 2026 CCPA rules.

Software Supply Chain Security doesn’t stop at the build - it extends into the browser.

Join us at the OWASP Global AppSec EU 2026 on June 25–26 and discover why runtime protection is becoming essential for modern web applications.

As third-party scripts and AI agents increasingly bypass traditional release cycles, organizations need visibility and control where applications actually execute: the browser runtime.

Meet Pedro Fortuna, Jscrambler CTO & Co-Founder, to discuss:
✔ Continuous Runtime Inventory
✔ Behavioral Monitoring & Drift Detection
✔ Granular Client-Side Access Controls
✔ Real-time privacy & consent enforcement
✔ Payment skimming prevention (PCI DSS ready)

The latest OWASP Top 10 now places Software Supply Chain Risks among the top priorities - and for the first time explicitly calls for runtime inventorying and verification of client-side components.

If you're attending in Vienna, stop by and chat with our team about securing the browser layer beyond the build.

Schedule a meeting with the team at https://eu1.hubs.ly/H0vFBf40 🔗

We’re happy to share this G2 Crowd review from one of our valued clients:

Read the complete review at G2 Crowd https://eu1.hubs.ly/H0vCpR10

Have a story to share? Drop your review on G2 and let us know how we’re helping you succeed! 📣 We love hearing from you!

Your security stack isn't the problem. It's incomplete. ⬇️

Endpoint, network, cloud, identity, dev security. All necessary. The edge is under control. But modern applications don’t stop there.

They execute in the browser, where:

🔹 Dozens of third-party scripts run with persistent access
🔹 Customer data is created, modified, and exposed in real time
🔹 AI-driven interactions and agents operate inside live sessions

In this interview, Rui Ribeiro explains why organizations need runtime enforcement, not just monitoring, and why security must extend into the browser as the new control plane.

If your edge is locked down but your client-side ex*****on isn’t, you’re not secure. You’re exposed where it actually matters.

Read the full conversation: https://eu1.hubs.ly/H0vBDgl0 🔗

Just a moment...

AI isn’t just changing how code is written - it’s changing how applications are attacked. ⬇️

Today’s LLMs can analyze, reconstruct, and deobfuscate client-side code in seconds, dramatically accelerating reverse engineering and exposing critical business logic faster than ever before.

What does resilient protection look like in this new reality?

👉 Join Jscrambler experts Katia Kupidonova, Pedro Pereira, and Duarte Carneiro for a deep dive into the evolving LLM threat landscape and the defensive strategies organizations need to stay ahead.

📅 June 16
⏰ 10 am ET | 3 pm UK

In this webinar, we’ll cover:
🔹 How LLM-powered attacks work step by step
🔹 The risks facing modern applications and business-critical workflows
🔹 What runtime code resilience actually requires
🔹 How Jscrambler is adapting to defend against AI-driven threats — and what’s next

Register now at https://jscrambler.com/resilient-code-age-ai 🔗

Resilient Code in the Age of AI | Webinar In this webinar, we explore how LLMs are being used to deobfuscate, reconstruct, and analyze complex application logic across high-stakes industries.

Jscrambler, the pioneering platform for client-side security, announced the appointment of Sean O'Leary as Vice President of Global Sales. In this role, O'Leary will oversee all sales, alliances and partnerships, and technical pre-sales, helping Jscrambler bring its industry-leading client-side security solutions to businesses worldwide. ⬇️

👉 "Demand for client-side security has never been stronger. Enterprises are waking up to the fact that the browser is where their most sensitive data lives, yet it is also where they are most exposed,” said Rui Ribeiro, CEO and co-founder of Jscrambler. “Sean's deep experience building and scaling revenue organizations at high-growth cybersecurity companies makes him exactly the right leader to help us meet that moment. In this role, he will be instrumental in bringing our Client-Side Security Platform to the security, privacy, and compliance leaders who need it most."

Read the full announcement now at https://eu1.hubs.ly/H0vlntc0 🗞️

Sean O'Leary is the New Vice President of Global Sales The vice president of Global Sales is a strategic hire to accelerate Jscrambler's global expansion and to meet growing demand for client-side security.