Overview
Human Security (formerly White Ops) is a cybersecurity company that protects websites from bot attacks, ad fraud, and account takeover. Its client-side scripts perform real-time device verification to distinguish human visitors from automated threats.
What This Script Does
- Collects browser environment signals: user agent, screen properties, WebGL renderer, installed plugins, timezone, and language settings
- Performs behavioral analysis on user interactions (mouse movements, keystroke timing, scroll patterns) to detect non-human behavior
- Executes JavaScript challenges designed to expose headless browsers and automation frameworks
- Sends device integrity signals to Human Security's verification servers for real-time bot classification
- Returns a verification decision that the site's backend can use to allow or block the request
Consent & Compliance
- Consent category: Essential
- GDPR/ePrivacy: Data collection is limited to security-related device signals necessary for fraud prevention and bot detection. Under ePrivacy, processing that is strictly necessary to provide a service requested by the user is exempt from consent. GDPR Article 6(1)(f) legitimate interest applies to fraud prevention.
- CCPA: Data is collected solely for security purposes and is not sold or used for advertising.
Should You Block This Without Consent?
No. Human Security provides critical bot detection and fraud prevention. Blocking it would expose your site to automated attacks, credential stuffing, and ad fraud. It qualifies as a strictly necessary security service.
Is Human Security GDPR compliant?
Human Security's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.
Consent Categories
Also Known As
Industries
Tracked Domains (3)
Human Security's trackers are occasionally seen, seen on under 1% of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.
px-cloud.netEssentialpx-cloud.net is an essential domain operated by Human Security, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.
px-cdn.netEssentialpx-cdn.net is an essential domain operated by Human Security, used to keep the site working, including security, load balancing, and sessions. Seen on a small share of scanned sites.
perimeterx.netEssentialperimeterx.net is an essential domain operated by Human Security, used to keep the site working, including security, load balancing, and sessions. Seen on a small share of scanned sites.
Cookies Human Security Sets (2)
_pxvidHUMAN Security (PerimeterX) anti-bot visitor identifier.
_pxhdHUMAN Security (PerimeterX) anti-bot device-history token.
Frequently Asked Questions
Related Vendors
Manage consent for Human Security
ConsentStack automatically detects and manages Human Security trackers so your site stays compliant with global privacy regulations.