Automatic CSP headers, script integrity monitoring and Magecart detection — applied to every page request at the edge. Point one DNS record at us and it starts working. Nothing to install, no agent on your server, no code to refactor.
CNAME www.yourstore.com → edge.proxiedguardians.com → That is the entire installation. No shell, no root, no systemd. → TLS certificate issued and renewed automatically. ✓ content-security-policy: script-src 'nonce-kR9v2…' 'strict-dynamic' ✓ Fresh nonce per request — a policy scraped from one page is useless on the next ✓ Every third-party script inventoried and hashed ✓ Magecart sentinel watching outbound requests
Your CMS, framework, or third-party components inject inline scripts, inline styles, and event handlers directly into the HTML. Every time you try to fix CSP violations, you're touching code you didn't write — core files that will be overwritten on the next update.
Teams waste weeks refactoring templates, fighting with plugins, and patching third-party modules — only to have everything break again after an update. It's an endless, losing battle.
ProxiedGuardians solves this in the request path, not in your codebase. Your pages travel through our edge on the way to the visitor, where nonces, security headers and integrity attributes are applied to the HTML as it streams. Not one line of your application changes. Update your CMS freely — your security posture doesn't live in files an update can overwrite.
Fork the CMS core. Patch every template. Refactor inline handlers. Pray updates don't break it. Repeat every quarter.
Point one DNS record at us. Headers, nonces and integrity are applied on every request. Change your stack whenever you like — there is nothing to reinstall.
PCI DSS 4.0 requirements 6.4.3 and 11.6.1 have been mandatory since 31 March 2025. Both are about the scripts running on your payment pages — and neither is answerable with a spreadsheet someone updates by hand.
Keep an inventory of every script on the page, justify why each one is there, and confirm each is authorised. We build that inventory from what actually loads in real browsers — not from what someone remembers adding.
Be alerted when payment page scripts or security headers are tampered with. We hash every script we see and raise an alert the moment the content behind a URL changes.
The deadline has already passed. If your assessor has asked how you monitor payment page scripts, this is an answer you can switch on today.
Six layers of protection, applied at the edge. No code refactoring, no server modifications, no broken updates.
Content Security Policy built in the dashboard and applied at the edge. A fresh nonce is generated for every request, so a policy scraped from one page is worthless on the next.
Every script and stylesheet your pages load is inventoried and hashed. When the content behind a URL changes, you get an alert. Turn on Safe Mode and the changed file is refused by the browser until you approve it.
A runtime sentinel watches outbound requests from the page itself. If a skimmer tries to exfiltrate form data to a host you never approved, you know immediately.
HSTS, X-Frame-Options, Referrer-Policy and Permissions-Policy set consistently on every response — including the scripts and stylesheets your pages pull in, where they matter most.
Every CSP violation your visitors' browsers report flows into your dashboard, grouped and ranked, so you can see what is actually blocked and decide what to allow.
Your checkout doesn't need the same policy as your blog. Scope a strict policy to the pages that handle money and keep a permissive one everywhere else.
No package to download, no daemon to keep running, and no access to your server required — from you or from us.
Sign up and tell us the hostname you want protected, plus where your real server can be reached.
Add a single CNAME with your DNS provider. Your certificate is issued and renewed automatically from that moment on — the certificate on your own server is never touched.
CNAME www.yourstore.com → edge.proxiedguardians.comToggle features, build CSP directives, choose your SRI mode. Changes reach every edge location within about a minute — no deploy, no restart, nothing to roll out.
Watch what a policy would block before it blocks anything. Tighten it using reports from real visitors, then switch to enforcing when you're ready.
No sign-up required. Paste your CSP header and get an instant grade.
Join developers and security teams who trust ProxiedGuardians to protect their applications at the edge.
Free forever on one domain. No credit card required.