Strattic · raw details

Strattic automatically transforms classic CMS-based websites into static versions of themselves and serves them up serverless in an effort to make these sites and the web safer, faster, and more stable. Strattic converts dynamic SQL-rendered HTML to static HTML stored behind a global CDN. The technology minimizes insufficient input and output validation issues often associated with content injection attacks such as cross-site scripting and SQL injection. All third-party JavaScript libraries are locked down via SRI to ensure they have not been tampered with and cannot be manipulated to gain unauthorized access to sensitive data. A robust CSP policy is then generated on the fly to protect against the remaining attacks such as clickjacking and malvertising. Finally, client browsers turn into QA bots. This enables the browsers to report both JavaScript rendering errors as well as injection attacks in real time to the client's Strattic dashboard.