Skip to main content
Onboarding steps
Language

Onboarding

Get started with cside in minutes. This guide walks you through account setup, email verification, plan selection, and adding your first domain for client-side script monitoring.

Onboarding to cside takes a few minutes. After signing up, cside guides you through a few quick steps to get your account configured and your first domain protected.

Already onboarded?

If you’ve already completed the onboarding process, skip ahead to Adding your Domain or Adding the cside Script.

Work email required

Sign up with a work email address on your organization’s domain. Personal or consumer email providers, such as Gmail or Yahoo, aren’t accepted. A company domain hosted by Google Workspace, Microsoft 365, or another provider works fine.

Onboarding steps

Verify your email

After signing up, you’ll be prompted to verify your email address. This confirms ownership of the email you provided.

  • Enter the 6-character code (letters and numbers) sent to your inbox
  • The code expires in 6 hours. Click “Resend Email” if needed
  • Alternatively, click the “Verify your Email” button in the email to verify directly

Verify Email

Verify Email Button

Tell us about you

Provide some basic information about your use case. This helps cside determine whether a self-service plan fits your needs or if you should connect with an expert.

More Information

Select your plan

Choose the plan that best fits your needs:

PlanPriceIncludes
Free$0/moEmail alerts, AI-powered script insights, up to 2,000 page views/mo
BusinessFrom $99/moDeep source analysis, 30-day history, Vanta integration, automated threat blocking, up to 100,000 page views/mo
EnterpriseCustomCustom page views, SSO integrations, dedicated support

Select your plan

Application review

Depending on your selected plan:

  • Free plans: Require a brief application review before access is granted
  • Business plans: Add payment details and start using cside immediately
  • Enterprise plans: Our sales team will contact you to discuss a tailored solution

Add your domain (optional)

You can add your first domain during onboarding or skip this step and do it later.

Domain configuration:

  • Enter your domain (e.g., example.com)
  • Domains are wildcarded by default. If you want to onboard specific subdomains, you can add them on the next step
  • The domain preview will show which domains and subdomains will be matched

Protection methods:

cside offers two different methods to protect your site. Choose based on your security requirements and implementation constraints.

Script Method (badged Best)

cside runs a lightweight behavioral detection engine directly in the user’s browser and fetches the same scripts server-side for verification.

How it works:

  • No traffic rerouting
  • No latency added to your site
  • Just one script tag added to your site

Best for: Teams that want immediate monitoring and integrity checks without altering their delivery path.

Scan Method (badged Fastest and Enterprise)

If you cannot add the cside script to your site, Scan Method provides crawler-based analysis as a fallback.

How it works:

  • We’ll crawl your site periodically to collect a list of scripts
  • This is less likely to detect malicious script due to the lack of browser-side monitoring in real human sessions
  • No code changes required on your end
  • Available on Enterprise plans

Best for: Teams that need protection before code changes are possible. Note that Scan Method is not a replacement for real-user monitoring, but it provides meaningful protection as an interim solution.

Add a domain

CSP configuration check

This step and the next only appear if you added a domain in the previous step. cside checks whether the domains you just added serve a Content Security Policy, in HTTP headers or a <meta> tag, and whether that policy lets the cside script load and report.

  • No CSP found: nothing to do. The script works without changes. Click Continue setup
  • Setup verified successfully: your CSP already allows cside. Click Continue setup
  • Domains that need updating: the page lists each domain and whether the policy came from headers or a meta tag, and gives you the directive and meta tag to copy. Update your CSP, then click Retry Check

If someone else manages your CSP, click Send to engineer to email them the instructions for the domains that need updating. After sending, you can invite that engineer to the team from the same flow. Skip for now moves on without a passing check; the dashboard warns that skipping can affect your service.

See Adjusting your CSP for the directives cside needs.

Add the script to your site

The last setup step shows the install instructions for your team, with your team ID already filled in. Pick the tab that matches your stack (HTML, GTM, AI, NextJS, Vite, or CLI), follow it, deploy, and visit your site. The script monitors third-party scripts as soon as it loads. Click Finish Setup when you are done.

As on the CSP step, Send to engineer emails the installation instructions to a developer, and Skip for now lets you finish onboarding and add the script later.

The same instructions, with more detail, are in Adding the cside script.

Onboarding complete

Your cside account is ready. From here you can:

  • Connect on Slack for direct support via a private channel
  • Invite team members to collaborate on your domains
  • Add the cside script to enable continuous monitoring

Congratulations

Initial scan

cside automatically runs an initial scan of your website. For continuous monitoring, make sure to add the cside script to your site.

Next steps

Was this page helpful?