Advanced Protection for Instart Customers

Ensighten 

Instart 

JavaScript injection mitigation

Also known as online skimming protection, web skimming protection and formjacking protection. Prevents data from being stolen through malicious code that has been injected into JS libraries which are used within websites

Yes 

Yes 

CSS injection mitigation

Prevents data from being stolen through CSS injection techniques, including brute-force stuffing

Yes 

No 

Form replacement mitigation

Prevents attackers from replacing forms, such as checkout forms, with fake data stealing forms by utilizing components such as iFrames 

Yes 

No 

Malicious ad injection prevention 

Prevents malicious ads being injected into websites through exploited components or through rogue browser extensions 

Yes 

No 

Network whitelisting

Prevents data from being transmitted from a web page to remote locations other than those specifically defined in a whitelist 

Yes 

No 

Full event-loop reporting

Provides comprehensive reporting regarding client-side attack protection, including attempted and mitigated attacks 

Yes 

Limited 
 
The Instart solution lacks the ability to report on attempted or mitigated attacks 

Simple setup and configuration

Allows organizations to configure the solution simply by keeping configuration requirements to a minimum but still delivering a secure application 

Yes 

Limited 
 
The Instart solution requires web page document content to be whitelisted – this can be extremely complex 

Performant-focused solution 

Ensures that website performance is not affected by the implementation of an additional security layer 

Yes 

 
Ensighten’s filter applies when an attempt is made to transmit data from a web page to a remote location 

Caution 
 
Instart’s filter applies every time IO is attempted on DOM objects, such as form fields. For sites with lots of content, this can be negative to performance