CSP nonce injection
Add one fresh, matching nonce to every eligible script in an unprotected HTML response.
HTMLRewriterCSP noncesWeb Crypto
Direct Origins1-origin.thecompany-lab.com
Capability Workers1.thecompany-lab.com
Streaming HTML rewrite
Transform a roughly 10 MB report in flight without buffering the document or losing progressive delivery.
HTMLRewriterReadableStreambackpressure
Direct Origins2-origin.thecompany-lab.com
Capability Workers2.thecompany-lab.com
TLS identity, scan, and field crypto
Use native client identity and structural data policy to sanitize JSON while leaving opaque payloads untouched.
native mTLSJSON scanningAES-256-GCM
Direct Origins3-origin.thecompany-lab.com
Capability Workers3.thecompany-lab.com
Coordinated AngularJS rewrite
Keep parallel HTML and JavaScript requests on one durable rewrite plan so the original version never escapes.
Durable ObjectsSQLitecoordinated discovery
Direct Origins4-origin.thecompany-lab.com
Capability Workers4.thecompany-lab.com
Per-session cookie vault
Hide weak origin session cookies behind an opaque, authenticated browser token and per-session state.
per-session Durable ObjectsHMAC-SHA-256cookie isolation
Direct Origins5-origin.thecompany-lab.com
Capability Workers5.thecompany-lab.com
Leaked-password remediation
Intercept a breached-but-valid login and guide the user through an OTP-gated password change.
HIBP k-anonymityTurnstileEmail Service
Direct Origins6-origin.thecompany-lab.com
Capability Workers6.thecompany-lab.com