All Vendors
cmp

Securiti

Securiti is an enterprise AI-driven privacy and consent management platform backed by $200M+ in funding. It deploys client-side JavaScript for cookie consent banners with reverse-IP geolocation detection to serve jurisdiction-specific consent experiences. As a CMP, Securiti controls the consent gating layer for enterprise deployments. No behavioral threat indicators confirmed from scanner data — awaiting runtime verification. The AI-driven consent optimization and reverse-IP detection capabilities raise Counselor and Oracle concerns: consent infrastructure that uses visitor identification technology to modulate consent experiences may blur the line between compliance and surveillance.

85 IOCs
0
Vendor Risk Score

How This Briefing Works

This report opens with key findings, then maps the gaps between what Securiti discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

Analysis pending. Findings will appear here once intelligence collection is complete.

Disclosure Gaps

Claims vs. Observed Behavior

1 gaps

Pending Analysis

UNKNOWN
They Claim

“Claims extraction pending”

Observed Behavior

No runtime behavioral analysis completed. CDT browser forensics needed to verify: (1) what data the reverse-IP detection collects pre-consent, (2) auto-blocking completeness across cookie categories, (3) whether AI cookie categorization accurately classifies all tracking technologies, (4) consent data flows between CMP module and broader Securiti platform, (5) whether consent optimization recommendations constitute dark patterns, (6) multi-channel consent signal consistency.

Customer Impact

What This Means For You

Enterprise organizations deploying Securiti trust its AI to make automated consent decisions at scale. The reverse-IP geolocation means Securiti identifies visitor location before consent — a pre-consent data collection event by the compliance tool itself. If AI cookie categorization misclassifies a tracker as functional, it fires without consent across every enterprise property. The unified platform architecture means consent data may flow into broader data intelligence workflows — privacy teams should verify consent data isolation from DSPM and AI governance modules. Enterprise clients face amplified blast radius: a single miscategorization affects all properties simultaneously.
Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

If You Use Securiti

  • →Audit Securiti's reverse-IP detection for pre-consent data collection scope
  • →Verify AI cookie categorization accuracy against manual classification
  • →Test auto-blocking completeness across all cookie categories and jurisdictions
  • →Confirm consent data isolation from broader Securiti platform modules (DSPM, AI governance)
  • →Review consent optimization recommendations for dark pattern characteristics

If You're Evaluating Securiti

  • →Independent scanner verification of pre-consent network requests by Securiti JavaScript
  • →Assess whether reverse-IP geolocation data is retained beyond consent session
  • →Evaluate consent data flows between CMP and unified intelligence platform

Negotiation Leverage

  • →Reverse-IP geolocation fires pre-consent — the consent platform identifies visitors before asking permission
  • →AI-driven consent decisions at enterprise scale amplify blast radius of any miscategorization
  • →Unified platform architecture means consent data may flow into DSPM, AI governance, and data intelligence modules
  • →Google certification does not verify behavioral compliance — only TCF string format compliance
  • →Request contractual guarantee that consent data is isolated from non-consent platform modules
IOC Manifest

IOC Manifest

85 INDICATORS

Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

TRACK
*securiti.ai/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.js*
Tracking script
TRACK
*securiti.ai/wp-content/themes/privaci/_ui/js/min/theme-helpers.js*
Tracking script
TRACK
*securiti.ai/cdn-cgi/challenge-platform/scripts/jsd/main.js*
Tracking script
TRACK
*securiti.ai/cdn-cgi/challenge-platform/h/g/scripts/jsd/*/main.js*
Tracking script
TRACK
securiti.ai/wp-content/themes/privaci/_ui/js/min/theme-helpers.min.js
Auto-extracted from scan
TRACK
securiti.ai/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js
Auto-extracted from scan
TRACK
securiti.ai/cdn-cgi/challenge-platform/scripts/jsd/main.js
Auto-extracted from scan
TRACK
securiti.ai/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js
Auto-extracted from scan
Ecosystem

Ecosystem & Supply Chain

Securiti operates as enterprise consent infrastructure within a broader data intelligence platform. The CMP integrates with the company's DSPM, privacy automation, and AI governance modules — meaning consent data can flow into data mapping, risk assessment, and compliance workflows. Google-certified for TCF v2.2 in EEA/UK. Deploys across web, mobile, and in-app channels. The reverse-IP detection infrastructure connects to geolocation databases for jurisdiction determination. As an enterprise vendor, Securiti's consent decisions affect high-traffic properties where consent failures impact millions of visitor records simultaneously.
Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

85 detection signatures across scripts, domains, cookies, and network endpoints

Vendor Details