How This Briefing Works
This report opens with key findings, then maps the gaps between what Seedtag discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Claims vs. Observed Behavior
pending
“Requires claims extraction via CDT”
Live website analysis pending
What This Means For You
What To Do About It
Role-specific actions based on observed behavior
If You're Evaluating Seedtag
- →Google Ad Manager with contextual-only targeting
- →Amazon Publisher Services (contextual)
- →Index Exchange with behavioral targeting disabled
- →Self-serve programmatic with explicit consent flows
Negotiation Leverage
- →65% broker score means user engagement data flows to DSP partners and advertising exchanges, subsidizing competitor campaigns
- →Session recording without granular consent creates GDPR Article 6 lawful basis gaps
- →Identity resolution contradicts Seedtag's contextual advertising positioning, creating contractual misrepresentation risk
Runtime Detections
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
Full session replay
Impact: User scrolling, content interaction, and engagement patterns captured to build contextual targeting profiles and measure ad effectiveness.
PII deanonymization
Impact: Anonymous behavioral signals linked to advertising identifiers, enabling cross-site profile enrichment and retargeting.
IOC Manifest
Indicators of compromise across 3 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
No indicators in this category
Ecosystem & Supply Chain
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
Complete network capture with all requests and responses
10 detection signatures across scripts, domains, cookies, and network endpoints