The Website Third-Party Dependency Exposure Mapper

 Act as a web security and privacy engineer. Build The Website Third-Party Dependency Exposure Mapper, a tool that helps website owners understand the external services their website depends on.

Allow users to import a manually collected list of network requests, browser HAR data, script URLs, iframe sources, cookie observations, and dependency metadata.

The tool should:

  • Group external resources by domain, provider, and purpose.

  • Map relationships between pages, scripts, APIs, analytics tools, fonts, embeds, and other third-party resources.

  • Identify duplicate providers and potentially unnecessary dependencies.

  • Flag resources with unclear ownership, missing purpose descriptions, or broad permissions when the available evidence supports the concern.

  • Display a dependency graph and page-by-page inventory.

  • Model what could break if a provider becomes unavailable.

  • Help prioritize resources for removal, replacement, or further review.

  • Generate a remediation checklist and exportable inventory.

Include synthetic data for a marketing website, an online store, and a SaaS dashboard. Treat findings as investigation leads rather than proof of malicious activity or legal noncompliance. Analyze imported data locally where practical, and never require users to upload private session cookies or authentication secrets.

Post a Comment

0 Comments