All Vendors
abm

ON24

ON24 is an enterprise webinar and virtual events platform that captures granular attendee engagement data -- watch time, poll responses, questions asked, resource downloads, CTA clicks, and content interaction patterns -- and feeds this behavioral intelligence directly into CRM and marketing automation systems. While positioned as a first-party data platform, ON24 functions as a behavioral surveillance layer for B2B events, building detailed engagement profiles that score and classify attendees for sales follow-up without transparent disclosure of the profiling depth.

45 IOCs
0
Vendor Risk Score

How This Briefing Works

This report opens with key findings, then maps the gaps between what ON24 discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

Analysis pending. Findings will appear here once intelligence collection is complete.

Disclosure Gaps

Claims vs. Observed Behavior

2 gaps

pending

MEDIUM
They Claim

“Awaiting scanner verification”

Observed Behavior

ON24 embed behavior, cookie patterns, and third-party network requests during webinar sessions require direct observation via BLACKOUT scanner

pending

MEDIUM
They Claim

“First-party data positioning”

Observed Behavior

Scope of data sharing between ON24 platform and integrated CRM/MAP systems needs runtime verification to confirm data stays within client boundaries

Customer Impact

What This Means For You

If you attend a webinar hosted on ON24, your engagement is tracked at a granular level: how long you watched, which polls you answered, what questions you asked, which resources you downloaded, and what CTAs you clicked. This data is scored and synced to the host organization's CRM, where it becomes part of your permanent contact record and triggers automated sales follow-up. Attending multiple events on ON24 allows longitudinal profiling across sessions. For organizations hosting events on ON24: your attendee engagement data is a rich behavioral dataset, and your privacy policy must accurately describe the collection depth to avoid consent legitimacy gaps.
Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

Recommended Actions for ON24

  • →Review event registration language to ensure attendees are informed about engagement tracking scope -- not just that data is collected, but the granularity (50+ behavioral signals per session). Audit ON24 Connect integrations to map where engagement data flows after capture. Assess whether engagement scoring and automated sales routing constitute automated profiling requiring GDPR Article 22 protections. Evaluate data retention policies for attendee behavioral data in both ON24 and downstream CRM systems. Consider providing attendees with a post-event data access mechanism to review what was captured about their session.

Negotiation Leverage

  • →ON24's leverage point is the consent gap between event registration and actual data collection depth. When negotiating: demand a clear attendee-facing disclosure that lists all engagement signals captured during sessions. Require data retention limits on behavioral data in both ON24 and CRM systems. Push for attendee opt-out mechanisms that go beyond event registration -- allowing attendees to participate in content without engagement scoring. ON24's enterprise positioning means they will work to accommodate compliance requirements rather than risk losing large accounts. The platform's value to clients depends on engagement data volume, so privacy restrictions that reduce data granularity give you negotiation leverage.
IOC Manifest

IOC Manifest

45 INDICATORS

Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

TRACK
*communications.on24.com/rs/848-AHN-047/images/rw_blindform_tracker.js*
Tracking script
TRACK
*communications.on24.com/rs/848-AHN-047/images/rwts.js*
Tracking script
TRACK
*communications.on24.com/rs/848-AHN-047/images/VimeoVideoTrackingCode.js*
Tracking script
TRACK
communications.on24.com/rs/848-AHN-047/images/rwts.js
Auto-extracted from scan
TRACK
communications.on24.com/rs/848-AHN-047/images/rw_blindform_tracker.js
Auto-extracted from scan
TRACK
communications.on24.com/rs/848-AHN-047/images/VimeoVideoTrackingCode.js
Auto-extracted from scan
Ecosystem

Ecosystem & Supply Chain

ON24 integrates with the enterprise marketing and sales stack through ON24 Connect. Native CRM integrations include Salesforce and HubSpot for bidirectional contact and engagement data syncing. Marketing automation connections feed Marketo, Eloqua, HubSpot, and Pardot with engagement scores and event attendance data. ON24 Intelligence provides an analytics layer that aggregates attendee behavior across events. The platform connects to ABM tools (6sense, Demandbase) for account-level engagement aggregation. Content experiences integrate with content management systems and resource libraries. ON24 is commonly deployed alongside intent data providers, creating a stack where webinar engagement signals combine with web behavior and third-party intent to build multi-dimensional buyer profiles.
Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

45 detection signatures across scripts, domains, cookies, and network endpoints

Vendor Details