> quite a few bypasses the longer it exists the less bypasses left. it is really good at preventing simple reflective xss. > talking about web apps that custo

> quite a few bypasses the longer it exists the less bypasses left. it is really good at preventing simple reflective xss. > talking about web apps that customers had. Remark - we are talking about interface-based xss only, not all of them. It's really rare for segment this product is targeting (online banks etc). > but it doesn't seem like something anyone would accept if their app had any social component the goal is to make it work for everyone out of box, including widgets and social components. and there are no unsolvable issues. > Maybe there is a market for "citrix for web apps" the market here is huge - everyone who cares about security the most. It prevents all 0days except those that can be exploited via interface. Absolute 0day protection. Doesn't it sound epic? Yes, securecanvas's stack itself is another layer and may have 0days but its attack surface is small.