How This Briefing Works
This dossier opens with key findings, then maps the gap between what PerimeterX discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection evidence underneath. BLACKOUT observes runtime browser behavior and cites the regulations that address each pattern — legal determinations are your counsel's call.
At a Glance
across 11 sites
vendor fires before consent
Briefing
PerimeterX (now HUMAN Security) operates as a bot detection and account takeover prevention platform that analyzes visitor behavior to distinguish humans from automated threats. The platform uses behavioral biometrics, device fingerprinting, and real-time risk scoring to protect against credential stuffing, scraping, and fraud. Deployment reveals aggressive device fingerprinting, session recording, and cross-domain behavioral analysis that operates at the infrastructure layer.
What This Means For You
Security and product teams face three core risks: (1) Bot detection false positives block legitimate users during high-value flows (checkout, registration), creating conversion loss that security metrics miss. (2) Shared threat intelligence means visitor behavior on unrelated PerimeterX deployments influences risk scores on your site, creating opaque scoring logic you cannot audit. (3) Aggressive fingerprinting creates GDPR/CCPA exposure that privacy teams cannot fully remediate while maintaining fraud protection effectiveness.
Risk Channel Breakdown
PerimeterX generates bot scores and behavioral risk classifications that influence access decisions and user experience (40% signal corruption). False positives can block legitimate traffic while false negatives allow fraudulent activity, distorting conversion metrics and security effectiveness.
The platform observes full visitor behavior including authentication attempts, navigation patterns, and interaction velocity (100% CAC subsidization). This intelligence reveals user experience friction points, security vulnerabilities, and traffic composition to vendor analytics infrastructure.
Expands attack surface
Aggressive fingerprinting with cross-domain tracking creates substantial GDPR/CCPA exposure (75% legal tail risk). The vendor processes detailed device and behavioral data for fraud detection without granular consent, creating regulatory liability for deploying organizations.
Threat Indicators
Runtime-observed (BTI-C)
Evasion infrastructure, auditor bypass
Keystroke/mouse tracking
Full session replay
Identity stitching
Device identification
Per-code narrative explanations of what each detected behavior means for your organization
Per-code evidence with full attribution chain, severity rankings, and consequence narratives See pricing →
Claims vs. Reality
BLACKOUT analyzed PerimeterX's public claims against observed runtime behavior and identified 1 contradiction.
Full claim-vs-reality gap analysis with claim text, observed behavior, severity, regulatory citations (GDPR, CCPA, ePrivacy), and evidence pointers per gap See pricing →
What To Do
5 for current users · 5 for evaluators
contractual leverage points
Role-specific actions (security / legal / marketing / procurement), full negotiation brief with contractual language, and BTI-code-specific consequences See pricing →
Supply Chain & Pairings
Claims 0, observed 1
cheq, adobelaunch, ensighten…
Full supply-chain mapping (loads / loaded-by lists with vendor identities) and the undisclosed-subprocessor list with observation evidence See pricing →