Skip to content

Commit

Permalink
[Page Shield] Update availability (#16913)
Browse files Browse the repository at this point in the history
  • Loading branch information
pedrosousa authored Sep 18, 2024
1 parent 29741be commit 518cbb8
Show file tree
Hide file tree
Showing 5 changed files with 314 additions and 306 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@ sidebar:
head:
- tag: title
content: Monitor resources and cookies

---

Once you [activate Page Shield](/page-shield/get-started/), the **Monitors** dashboard will show which resources (scripts and connections) are running on your domain, as well as the cookies recently detected in HTTP traffic.
Expand All @@ -15,7 +14,9 @@ If you notice unexpected scripts or connections on the dashboard, check them for

:::note

If you recently activated Page Shield, you may see a delay in reporting.
- Users in Free and Pro plans only have access to the script monitor.
- If you recently activated Page Shield, you may see a delay in reporting.

:::

## Use the Monitors dashboard
Expand All @@ -28,13 +29,13 @@ To review the resources and cookies detected by Page Shield:

3. Under **Monitors**, review the list of scripts, connections, and cookies for your domain. To apply a filter, select **Add filter** and use one or more of the available options:

* **Script**: Filter scripts by their URL.
* **Connection**: Filter connections by their target URL. Depending on your [configuration](/page-shield/reference/settings/#connection-target-details), it may search only by target hostname.
* **Host**: Look for scripts appearing on specific hostnames, or connections made in a specific hostname.
* **Page** (requires a Business or Enterprise plan): Look for scripts appearing in a specific page, or for connections made in a specific page. Searches the first page where the script was loaded (or where the connection was made) and the latest occurrences list.
* **Status**: Filter scripts or connections by [status](/page-shield/reference/script-statuses/).
* **Type**: Filter cookies according to their type: first-party cookies or unknown.
* Cookie property: Filter by a cookie property such as **Name**, **Domain**, **Path**, **Same site**, **HTTP only**, and **Secure**.
- **Script**: Filter scripts by their URL.
- **Connection**: Filter connections by their target URL. Depending on your [configuration](/page-shield/reference/settings/#connection-target-details), it may search only by target hostname.
- **Host**: Look for scripts appearing on specific hostnames, or connections made in a specific hostname.
- **Page** (requires a Business or Enterprise plan): Look for scripts appearing in a specific page, or for connections made in a specific page. Searches the first page where the script was loaded (or where the connection was made) and the latest occurrences list.
- **Status**: Filter scripts or connections by [status](/page-shield/reference/script-statuses/).
- **Type**: Filter cookies according to their type: first-party cookies or unknown.
- Cookie property: Filter by a cookie property such as **Name**, **Domain**, **Path**, **Same site**, **HTTP only**, and **Secure**.

4. Depending on your plan, you may be able to [view the details of each item](#view-details).

Expand All @@ -53,54 +54,52 @@ You can filter the data in these dashboards using different criteria, and print
## View details

:::note

Only available to customers on Business and Enterprise plans.
Only available to customers on Business and Enterprise plans.
:::

To view the details of an item, select **Details** next to the item.

The details of each connection or script include:

* **Last seen**: How long ago the resource was last detected (in the last 30 days).
* **First seen at**: The date and time when the resource was first detected.
* **Page URLs**: The most recent pages where the resource was detected (up to ten pages).
* **First page URL**: The page where the resource was first detected.
* **Host**: The host where the script is being loaded or the connection is being made.
- **Last seen**: How long ago the resource was last detected (in the last 30 days).
- **First seen at**: The date and time when the resource was first detected.
- **Page URLs**: The most recent pages where the resource was detected (up to ten pages).
- **First page URL**: The page where the resource was first detected.
- **Host**: The host where the script is being loaded or the connection is being made.

The details of each cookie include:

* **Type**: A cookie can have the following types:
- **Type**: A cookie can have the following types:

* **First-party**: Cookies set by the origin server through a `set-cookie` HTTP response header.
* **Unknown**: All other detected cookies.
- **First-party**: Cookies set by the origin server through a `set-cookie` HTTP response header.
- **Unknown**: All other detected cookies.

* **Domain**: The value of the `Domain` cookie attribute. When not set or unknown, this value is derived from the host.
- **Domain**: The value of the `Domain` cookie attribute. When not set or unknown, this value is derived from the host.

* **Path**: The value of the `Path` cookie attribute. When not set or unknown, this value is derived from the most recent page where the cookie was detected.
- **Path**: The value of the `Path` cookie attribute. When not set or unknown, this value is derived from the most recent page where the cookie was detected.

* **Last seen**: How long ago the resource was last detected (in the last 30 days).
- **Last seen**: How long ago the resource was last detected (in the last 30 days).

* **First seen at**: The date and time when the cookie was first detected.
- **First seen at**: The date and time when the cookie was first detected.

* **Seen on host**: The host where the cookie was first detected.
- **Seen on host**: The host where the cookie was first detected.

* **Seen on pages**: The most recent pages where the cookie was detected (up to ten pages).
- **Seen on pages**: The most recent pages where the cookie was detected (up to ten pages).

* Additional cookie attributes (only available to Enterprise customers with a paid add-on):
* **Max age**: The value of the `Max-Age` cookie attribute.
* **Expires**: The value of the `Expires` cookie attribute.
* **Lifetime**: The approximate cookie lifetime, based on the `Max-Age` and `Expires` cookie attributes.
* **HTTP only**: The value of the `HttpOnly` cookie attribute.
* **Secure**: The value of the `Secure` cookie attribute.
* **Same site**: The value of the `SameSite` cookie attribute.
- Additional cookie attributes (only available to Enterprise customers with a paid add-on):
- **Max age**: The value of the `Max-Age` cookie attribute.
- **Expires**: The value of the `Expires` cookie attribute.
- **Lifetime**: The approximate cookie lifetime, based on the `Max-Age` and `Expires` cookie attributes.
- **HTTP only**: The value of the `HttpOnly` cookie attribute.
- **Secure**: The value of the `Secure` cookie attribute.
- **Same site**: The value of the `SameSite` cookie attribute.

Except for **Domain** and **Path**, [standard cookie attributes](https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies) are only available for first-party cookies, where Cloudflare detected the `set-cookie` HTTP response header in HTTP traffic.

## Export data

:::note

Only available to Enterprise customers with a paid add-on.
Only available to Enterprise customers with a paid add-on.
:::

Use this feature to extract data from Page Shield that you can review and annotate. The data in the exported file will honor any filters you configure in the dashboard.
Expand Down
59 changes: 43 additions & 16 deletions src/content/docs/page-shield/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -9,48 +9,75 @@ head:
description: Page Shield is a comprehensive client-side security and privacy
solution that allows you to ensure the safety of your website visitors'
browsing environment.

---

import { Description, Feature, FeatureTable, Plan } from "~/components"
import { Description, Feature, FeatureTable, Plan } from "~/components";

<Description>

Ensures the safety and privacy of your website visitors' browsing environment.
Ensures the safety and privacy of your website visitors' browsing environment.

</Description>

<Plan type="paid" />
<Plan type="all" />

Page Shield helps manage resources loaded by your website visitors — including scripts, their connections, and cookies — and triggers alert notifications when resources change or are considered malicious.

Learn how to [get started](/page-shield/get-started/).

***
---

## Features

<Feature header="Monitors" href="/page-shield/detection/monitor-connections-scripts/" cta="Monitor resources">
Displays information about loaded scripts in your domain's pages and the connections they make.
<Feature
header="Monitors"
href="/page-shield/detection/monitor-connections-scripts/"
cta="Monitor resources"
>
Displays information about loaded scripts in your domain's pages and the
connections they make.
</Feature>

<Feature header="Page attribution" href="/page-shield/detection/monitor-connections-scripts/#view-details" cta="Find resource occurrences">
Find in which page a resource first appeared, and view a list of the latest occurrences of the resource in your pages.
<Feature
header="Page attribution"
href="/page-shield/detection/monitor-connections-scripts/#view-details"
cta="Find resource occurrences"
>
Find in which page a resource first appeared, and view a list of the latest
occurrences of the resource in your pages.
</Feature>

<Feature header="Malicious script detection" href="/page-shield/detection/review-malicious-scripts/" cta="Review malicious scripts">
Detects malicious scripts in your pages using threat intelligence and machine learning.
<Feature
header="Malicious script detection"
href="/page-shield/detection/review-malicious-scripts/"
cta="Review malicious scripts"
>
Detects malicious scripts in your pages using threat intelligence and machine
learning.
</Feature>

<Feature header="Code change detection" href="/page-shield/detection/review-changed-scripts/" cta="Review changed scripts">
Detects any changes in the scripts loaded in your pages.
<Feature
header="Code change detection"
href="/page-shield/detection/review-changed-scripts/"
cta="Review changed scripts"
>
Detects any changes in the scripts loaded in your pages.
</Feature>

<Feature header="Alerts" href="/page-shield/detection/configure-alerts/" cta="Configure alerts">
Receive notifications about newly detected scripts, scripts loaded from unknown domains, new scripts considered malicious, or code changes in your existing scripts.
<Feature
header="Alerts"
href="/page-shield/detection/configure-alerts/"
cta="Configure alerts"
>
Receive notifications about newly detected scripts, scripts loaded from
unknown domains, new scripts considered malicious, or code changes in your
existing scripts.
</Feature>

<Feature header="Policies" href="/page-shield/policies/">
Policies define allowed resources on your websites. Use policies to enforce an allowlist of resources, effectively blocking resources not included in your policies.
Policies define allowed resources on your websites. Use policies to enforce an
allowlist of resources, effectively blocking resources not included in your
policies.
</Feature>

## Availability
Expand Down
Loading

0 comments on commit 518cbb8

Please sign in to comment.