DEVCON Detect

Originally founded as DEVCON Detect in 2017 by Maggie Louie, Casey Hester, and Josh Summitt, the Memphis-based company is now known as Otto-js. The firm operates in the enterprise cybersecurity software market, specializing in JavaScript Security as a Service (JSaaS). Its business model is centered on a subscription-based service with tiered pricing, including plans for essential and professional levels, as well as enterprise-grade managed services. The company serves a range of clients, from small and medium-sized businesses to large enterprises, offering no-code integrations for various platforms.

Otto-js addresses the security vulnerabilities inherent in client-side applications, particularly those arising from third-party scripts. The platform provides tools for continuous monitoring and real-time protection against threats such as data skimming, Magecart attacks, and malvertising. A core feature is its ability to help businesses achieve and maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS) 4.0, specifically addressing requirements 6.4.3 and 11.6.1, which mandate the management and integrity of scripts on payment pages. The technology functions like a browser-firewall, identifying all JavaScript libraries on a client's site, monitoring their behavior, and blocking malicious activities without latency.

The platform's offerings include an automated Content Security Policy (CSP) designer, alerts for JavaScript vulnerabilities and outdated libraries, and advanced threat blocking. Otto-js facilitates integration with major CDNs, cloud marketplaces like AWS and Google Cloud, and e-commerce platforms such as Shopify and WooCommerce. For developers and security teams, the company also provides a Chrome extension that helps identify security weaknesses and outdated libraries. This tool is part of Otto's broader mission to make cybersecurity more accessible, generating network intelligence that fuels its threat detection engine.

Keywords: JavaScript security, client-side security, PCI DSS 4.0 compliance, third-party script protection, Magecart prevention, malvertising blocking, Content Security Policy, web application security, DevSecOps tools, runtime application security, cybersecurity SaaS, data breach prevention, online payment security, e-commerce security, threat intelligence, vulnerability detection, browser-side security, script monitoring, digital supply chain security, automated security compliance