This quarter, HUMAN shipped faster visibility and tighter control across the stack—from managing AI agents in HUMAN Sightline and new Okta actions, to fresh AgenticTrust dashboards and multi-app views, to Client-side Defense audit logs and our Website Risk Analyzer. In Advertising Protection, MediaGuard v4 brings unified data, MFA enhancements, and expanded IVT taxonomy—while Page Intelligence now exposes page-level IVT in real time to protect performance. Dive in below for highlights and links to demos, docs, and resources.
If you’d like to learn more about any of these features, please contact your account representative or fill out this form to connect with us.
HUMAN Sightline
Manage AI Agents in Known Bots & Crawlers
AI Agents are now included in “Known Bots & Crawlers” under “Traffic Policy Settings” directly within HUMAN Sightline and Bot Defender. With this update, customers can measure and manage agentic AI traffic by applying consistent policies across HUMAN Sightline and Bot Defender to allow or block agentic traffic at the agent level. For more granular visibility and action-based control of AI agents, check out AgenticTrust.
Okta Integration
Customers can now create an Okta integration directly from the integration page. This integration can be added in the AD action settings screen and be attached to a policy rule. There are currently three action types available: Disable Account, Disconnect Account (which closes all current sessions), and Reset Password.
Response Custom Parameters
Response Custom Parameters let you add extra details from your server’s reply to the data sent to HUMAN. While original “Request” parameters focus on the user (like their ID or session), these new “Response” parameters focus on what happened after the request, such as the status code, error messages, or response metadata. You can set up to 10 of these parameters to give HUMAN better visibility into how your site responded to a specific visitor. Read the documentation to learn more.
Enforcer and Mobile SDK Updates
There were several crucial feature updates and stability fixes made to the Enforcer and Mobile SDK. This includes adding several Enforcer versions (including Akamai Edgeworker version 4.4.0, ASP.NETversion 3.3.0, AWS Lambda@Edge version 4.7.0, Cloudflare version 6.12.0, GO versions 5.4.1 and 5.5.0, and Salesforce Commerce Cloud version 22.1.0) and updating the v4 SDK to maintain the integration (see SDK changelogs for Android, iOS, Expo, and React Native Wrapper)
Portal Enhancements
The last quarter saw a number of significant portal enhancements, including application type selection, data enrichment expansion, and dashboard messaging redesign. The portal is regularly updated and streamlined for better user experience and transparency.
AgenticTrust
AI Visitors Overview Dashboard
Dive deeper into your agentic traffic by leveraging two new dashboards. Visualize the volume of agentic requests and their common patterns with the “AI Traffic Over Time” dashboard, or click into agentic intent by activity groups, such as “account changes” or “checkout” with the “AI Agent Activity Distribution” dashboard.
Multi-application support for AI Agents and Visitors
AgenticTrust now includes the ability to view data from multiple applications. Simply select the applications you’d like to view to drive visibility into the traffic that matters the most to you. You’ll also be alerted when applications need an upgraded enforcer, so your data always stays up-to-date.
Data Export
Updated to now include AI Agent data, such as Agent Name and Route. This allows customers to filter for agent-specific data in their investigations.
Trusted Verification of Amazon Bedrock AgentCore Browser
AgenticTrust now verifies traffic from Amazon’s Bedrock AgentCore browser, ensuring that AI-powered agents built on AWS infrastructure are cryptographically signed and secure. Read all about it.
New AI Agents Added
As new AI agents emerge, HUMAN adds them to the list of detected AI agents in AgenticTrust. Last quarter, we added several new agents to the product, including Atlas Browser from OpenAI, Claude for Chrome from Anthropic, AgentCore from AWS, and Rye from Rye.com
Client-side Defense
Audit Log Enhancements
Platform-level admin activity is now logged in the Code Defender Audit Log to provide better visibility records. New items include:
- Accounts: create / update / delete
- Applications: create / update / delete
- Users: create / update / delete, password changes
- Security: failed login attempts
- Integrations: create / update / delete
Blocked Incident Count
Customers can now get visibility into blocked client-side incidents using the CD API. This can also be used to monitor new blocking policies to ensure a mis-configured rule hasn’t accidentally blocked much more than intended.
Website Risk Analyzer (WRA)
Website Risk Analyzer is a Chrome extension that scans your website to deliver an inventory of script vendors and a summary of incidents detected. Download the extension from the Chrome Web Store and check out the documentation to get started.
Ad Fraud Defense & Ad Fraud Sensor:
As we closed out 2025, one thing was clear: the threat landscape evolved and so did our defenses. Across 2025, HUMAN’s MediaGuard flagged over ten trillion requests as IVT – the most it has ever flagged in HUMAN’s 10-year history.
AI-driven automation, MFA, and early agentic traffic moved from edge cases to everyday reality. Here’s what we’re doing to keep your team on top of it all:
- Platform & Data Source Updates:
- MFA Enhancements now generally available
- Enforcement, policy flags, and MFA reporting are live for all clients via the MG v4 API and FraudSensor UI, including domain/root-domain visibility and MFA indicators (released December).
- Single, consolidated FraudSensor data source
- A unified FS data foundation across IVT, MFA, Viewability, and Brand Safety delivers consistent semantics, better performance, and is the sole path for future features.
- Video & CTV: single integration path
- VAST Gateway is now available for wider adoption, enabling enhanced detection signals and simplified integrations for video and CTV environments.
- Explore Redesign & Integration Health Dashboard
- Faster reporting workflows, ongoing bug fixes and visual improvements.
- Updated FraudSensor parameterswith the following:
- Buyer User ID (ub)
- App Store (as)
- Pod ID (pk)
- Device IFA (da)
- Distribution Channel (dc)
- Global Placement ID (gp)
- Impression ID (im)
- Inventory Partner Domain (pr)
- Rewarded (rw)
- Supply Chain Object (sc)
- URL (ur)
- User or Device ID (ui)
- Video Placement Type (pl)
- Tag Sample Rate (sp)
- Pre-bid Signal Decisioning
- We achieved a truly significant milestone by presenting our experimental results at the NY Prebid Summit on October 6th. This presentation was part of the Prebid Measurement Task Force update, which is led by HUMAN and Optimera.
- We achieved a truly significant milestone by presenting our experimental results at the NY Prebid Summit on October 6th. This presentation was part of the Prebid Measurement Task Force update, which is led by HUMAN and Optimera.
- MFA Enhancements now generally available
- Expanded Taxonomy & Agentic AI Coverage (v4 API)
- We’ve expanded our taxonomy depth to provide clearer, more actionable classifications—now fully available via the v4 Reporting API.
- Updated IVT Taxonomy with the following:
- Split the IAB Spiders taxonomy into IAB Spiders - Include List violations and IAB Spiders - Exclude List violations
- Added a new False Representation section under GIVT and moved the following to it:
- Invalid Transaction Parameters
- Invalid Transaction Parameters — Blank UAs
- Invalid Transaction Parameters — Malformed UAs
- Added a new Misleading User Interface section under GIVT and moved Invalid Placement to it.
- We’ve also enabled multi-tax classification per request, giving full context as traffic patterns overlap. Live today in MediaGuard v4 which enables various benefits, like non-IVT policy enforcement, a more granular decision layer and the expanded IVT taxonomy mentioned above.
- We’re here to help plan your migration and make the transition as smooth as possible. Please let us know when you’d like to walk through next steps if you are still currently on MGv3. Find more info here MediaGuard v3 to v4 Endpoint Upgrade Overview.
- We’re here to help plan your migration and make the transition as smooth as possible. Please let us know when you’d like to walk through next steps if you are still currently on MGv3. Find more info here MediaGuard v3 to v4 Endpoint Upgrade Overview.
- Viewability:
- AdRoll Delivers Smarter, Safer Advertising with HUMAN Security Integration - First Demand-side Platform to Integrate HUMAN’s Viewability Solution, Combining Real-time Fraud Defense with Transparent Performance Insights
Malvertising Defense & Ad Quality Defense
- Thought Leadership:
- Blog: Digital Disguise: Understanding Cloaking’s Role in Malvertising (Unmasking Malvertising Series)
- eBook: The Malvertising Decoder: A Publisher’s Guide to Hidden Ad Threats in Digital Ads
- Enhanced Publisher Reporting:
- Malvertising Defense now includes enhanced reporting and threat intelligence, giving you clearer visibility into malicious ad activity across your sites. These updates make it easier to understand threat patterns and investigate incidents. These new views now include:
- Threat Classes: Clearer naming across the dashboard for faster trend identification
- Threat Types: Breakdowns by specific malware category (e.g. redirect)
- Delivery Source: Visibility into where attacks originate (when available)
- Site-level reporting: Analysis of threats at the individual site level
- Threat Exports: Download a simple table view of your threats for analysis outside the dashboard
- Malvertising Defense now includes enhanced reporting and threat intelligence, giving you clearer visibility into malicious ad activity across your sites. These updates make it easier to understand threat patterns and investigate incidents. These new views now include:
- New Threat Class identified:
- Identified a new threat class dubbed “TI-74” (compromised websites with Magecart attacks) and rolled out mitigation at scale, reducing exposure to a newly observed real-world attack vector.
- Identified a new threat class dubbed “TI-74” (compromised websites with Magecart attacks) and rolled out mitigation at scale, reducing exposure to a newly observed real-world attack vector.
- Malvertising Defense Self-service Option:
- We’ve introduced a new self-service option for publishers, offering a simple one line install, page-level protections and free access to the HUMAN Malvertising Defense script for up to 2M pageviews each month. Learn more on how to get started with Malvertising protection right away, here:
Ad Click Defense & Page Intelligence
- Launched Page Intelligence:
- In October, we launched Page Intelligence delivering real-time, page-level detection of IVT in the critical milliseconds between click and page interaction. This enables brands, publishers, and e-commerce platforms to protect revenue and make data-driven optimization decisions instantly.
- Video Overview: https://www.linkedin.com/posts/humansecurityinc_this-just-in-humans-new-page-intelligence-activity-7381313604081528835-j5-w/
- Blog: https://www.humansecurity.com/learn/blog/introducing-page-intelligence-closing-the-last-blind-spot-in-invalid-traffic-protection/
- Thought Leadership: