Cloudflare Page Shield

Website visitors stay safer and business moves faster

Cloudflare Page Shield protects your visitors from Magecart-style supply chain attacks that steal credit card information and sensitive data through malicious third-party dependencies.

teams access improvement plan spot illustration 3x 8
magecart style attack flow diagram 3x

What is a Magecart attack?

A Magecart-style attack is a type of software supply chain attack carried out in a user’s browser. Attackers compromise third-party JavaScript dependencies running across many websites to gain control over the source code served to browsers. When the infected code executes, it can steal sensitive data that end-users enter into the site such as credit card details.

optimize web browser insights spot illustration 601x341 9c285a0

Monitor for new dependencies

Track JavaScript dependencies over time to know when new JavaScript dependencies appear. Investigate if changes were normal and expected or carried out by an attacker inserting a new, malicious JavaScript file.

logs hero illustration 601x565 c30e0b4

Malicious JavaScript alerting

Know instantly if JavaScript is being served from known-malicious URLs by comparing the domains of client-side JavaScript dependencies against threat intelligence.

ssl tls hero illustration

Script change protection

Monitor for suspicious JavaScript dependency activity. When new code behavior is detected to existing files, an alert lets you review changes to determine if the new code is a benign update or the work of an attacker.

security week hero 600x497 a2fec9c

Part of Cloudflare Application Security

Cloudflare Page Shield forms part of our advanced application security portfolio that keeps applications and APls secure and productive, thwarts DDoS attacks, repels bots at scale, detects anomalies and malicious payloads, all while monitoring for browser supply chain attacks.

Our powerful application security capabilities are integrated with the rest of our leading application performance portfolio, all delivered from one of the world’s most connected global cloud platforms.

analytics bots

Bot Management

Deliver great customer experiences by protecting against bot attacks that harm web properties.

security waf

Web application firewall

Stop application attacks - both known techniques and zero day exploits.

security shield protection 230x301 664b7d5

API Shield

Keep APIs secure and productive with API discovery and protection.