Jscrambler launches Unified Client-Side Security Platform for the AI era. new product July 30, 2026 First platform to unify software integrity and data governance at browser runtime, helping enterprises continuously enforce security against AI-powered threats and data harvesting risks PORTO, Portugal, July 30, 2026 /PRNewswire/ - Jscrambler, the Client-Side Security Platform for the modern enterprise, today announced the launch of its Unified Client-Side Security Platform, introducing a new approach to securing applications and customer data where AI-powered risks increasingly operate: inside the browser. Key Highlights * Jscrambler launched a Unified Client-Side Security Platform that merges software integrity and data governance to close the enforcement gap at browser runtime. * The platform is built on a proprietary Behavioral Enforcement Core that gives AppSec and data governance teams a single deployment and enforcement architecture. * The platform is backed by new browser security research, showing how AI is accelerating client-side software and data risks while exposing the need for continuous browser runtime enforcement. AI is fundamentally changing how software is attacked and how customer data is collected inside the browser. As organizations rapidly adopt AI-powered applications, agents, and third-party services, existing security architectures built around isolated application security, privacy, and governance tools are no longer sufficient. Jscrambler is the first Client-Side Security Platform to unify software integrity and data governance through a common browser runtime architecture, enabling enterprises to continuously enforce security where applications execute and customer data is created. "AI didn't create browser risk - it dramatically accelerated it," said Rui Ribeiro, CEO and Co-Founder of Jscrambler. "Today, software compromise and AI-driven data harvesting occur simultaneously inside the browser, yet most security architectures still treat them as separate problems. Our Unified Client-Side Security Platform changes that by bringing software integrity and data governance together through a single runtime enforcement architecture. Organizations can now continuously secure multiple initiatives through one platform instead of managing disconnected tools." For years, application security teams have focused on protecting software while privacy, governance, and compliance teams concentrated on securing customer data. While this approach was sufficient at one point in time, AI has exposed a critical blind spot inside the browser where applications execute, third-party code runs, AI agents operate, and sensitive customer information is assembled. This convergence is forcing security leaders to rethink how browser security is managed. Rather than deploying isolated point solutions, enterprises need a unified platform capable of protecting software integrity, governing customer data, detecting evolving threats, and enforcing policy continuously throughout the browser runtime. A Unified Platform for Enterprise Security Initiatives The Jscrambler Unified Client-Side Security Platform addresses this new reality by enabling organizations to extend critical security initiatives into the browser through a single runtime architecture. This architecture provides: * LLM-Resilient Code Protection: Defends application code against AI-powered attacks at execution time * Software Supply Chain Security: Provides runtime enforcement against third-party script risks that static pipeline scanners cannot see * AI Data Governance: Detects and controls AI-powered data harvesting at the point of data creation * Data Privacy and Compliance: Extends beyond consent management with runtime enforcement against unauthorized data collection * Fraud and Abuse Prevention: Detects and blocks fraud, automation, and identity abuse at runtime * Threat Detection & Response: Extends active threat hunting, real-time telemetry, and incident response into the browser runtime to neutralize client-side threats * Compliance Enforcement: Features automated technical proof for PCI DSS v4, GDPR, EU AI Act, HIPAA, and CCPA Organizations can deploy individual solutions based on their priorities or expand across initiatives over time, giving CISOs, security architects, AppSec, Security Engineering, Privacy, GRC, and SOC teams shared visibility, continuous runtime enforcement, and a common operational foundation through a single platform. Powered by the Behavioral Enforcement Core Every solution is powered by Jscrambler's proprietary Behavioral Enforcement Core, the platform's centralized runtime engine that continuously monitors, analyzes, and enforces browser behavior through a single deployment, turning enterprise policy into active protection at the point of data creation. Purpose-built for the AI era, the Behavioral Enforcement Core introduces new runtime enforcement capabilities spanning the enterprise security lifecycle. These capabilities include: * Identify: AI-powered script discovery and access mapping that continuously inventories AI agents and third-party scripts accessing sensitive customer data * Protect: LLM-resilient code hardening and proactive AI agent controls that prevent code manipulation, unauthorized runtime access, and AI-powered data harvesting * Detect: Behavioral AI script drift detection that identifies execution anomalies and emerging client-side threats * Respond: AI browser telemetry workflows that reconstruct incidents and accelerate investigations for security operations teams * Comply: Real-time vendor risk assessments and browser telemetry that continuously validate third-party behavior while providing technical evidence for regulatory requirements Research Highlights the Growing Need for Runtime Enforcement The platform launch follows Jscrambler's latest browser security research, Beyond the Vault: What Banking Sites Quietly Share Before You Ever Log In, which uncovered widespread unauthorized third-party tracking and AI-enabled data collection occurring before user consent across leading financial institutions. The findings reinforce a growing industry challenge: software integrity and data governance can no longer be managed separately once applications reach the browser. The Jscrambler Unified Client-Side Security Platform is now available to enterprise organizations worldwide. About Jscrambler Jscrambler is the Client-Side Security Platform for the modern enterprise. The first vendor to unify software integrity and data governance at browser runtime, Jscrambler's Behavioral Enforcement Core gives AppSec and data governance teams a single control plane to protect, enforce, and comply - from one deployment. Built on 15 years of browser runtime expertise and proprietary research, Jscrambler serves Fortune 500 companies, financial institutions, airlines, online retailers, and media organizations whose success depends on what happens in the browser. Learn more at jscrambler.com. AAPR aggregates press releases and media statements from around the world to assist its news partners with identifying and creating timely and relevant news. All of the press releases published on this website are third-party content and AAP was not involved in the creation of it. Read the full terms.

Security alert: multiple Jscrambler packages compromised in supply chain attack. Post Views: 15 A series of malicious iterations of Jscrambler's NPM package were released over the weekend as part of a supply chain attack leveraging stolen credentials. Attack details. The NPM package is integral to Jscrambler Code Integrity, a JavaScript protection tool designed to make web and mobile applications resistant to tampering. The breach began on July 11 when an adversary exploited NPM publishing credentials to deploy a modified version of the package. This version included a preinstall hook intended to deploy malicious binaries during installation. Compromise timeline. Jscrambler addressed the initial compromise, but the threat actor continued to release additional malicious variants, including versions 8.16, 8.17, 8.18, and 8.20. The first unaffected version, 8.22, was later published. Malicious components. The compromised packages contained a preinstall hook, two new files in the dist/ directory (setup.js and intro.js), and platform-specific binaries targeting Linux, macOS, and Windows. During installation, the hook triggers the execution of setup.js, which loads and runs a binary from intro.js. Impact on related projects. Due to the NPM library's role as a dependency, related projects such as Jscrambler-webpack-plugin 8.6.2, gulp-Jscrambler 8.6.2, grunt-Jscrambler 8.5.2, and Jscrambler-metro-plugin 9.0.2 were also impacted. Technical analysis. According to supply chain security firm Socket, the binaries, written in Rust, function as information stealers, extracting credentials, secrets, cryptocurrency wallets, seed phrases, AI coding assistant data, cloud configurations, messaging app data, browser information, Steam sessions, and OS keyring entries. The malware also attempts to escalate privileges, establish persistence, and conduct host reconnaissance. Data exfiltration occurs via TLS using the rustls library, likely directed to a command-and-control server. Additionally, the malware uses stolen credentials to query cloud and orchestration APIs. Response and mitigation. Jscrambler confirmed that the attacker accessed the NPM publishing credentials and stated that all relevant credentials, passwords, and secrets have been revoked and replaced. The company added enhanced security measures to its publishing process as the investigation continues. Recommendations. Users are urged to uninstall affected Jscrambler NPM package versions, perform system malware scans, and rotate all credentials, tokens, and API keys. Conclusion. The incident highlights vulnerabilities in software supply chains, emphasizing the need for rigorous credential management and continuous monitoring of dependencies. Organizations relying on Jscrambler products are advised to review their environments for potential compromises and implement mitigation strategies promptly.