Iframes

Iframes lists every distinct iframe cside has seen loaded on your site, grouped by the frame’s hostname. It lives under Protection > Iframes in the sidebar, alongside Scripts and Alerts.

Where to find it

• A single domain: open the domain, then Protection > Iframes to see iframes found on that domain
• All domains: from the team level, Protection > Iframes shows iframes across every domain on your team, with a domain dropdown to narrow the view

Both views share the same table and filters.

The iframes table

Column	What it shows
Iframe host	The frame’s hostname, with the number of distinct URLs seen for it. Frames with no hostname (for example about:blank or empty-source frames) show a frame icon instead of a favicon
Loaded by	The vendor whose script injected the iframe, when known. Shows First-party when your own code injected it, or Unknown for a blank frame with no identifiable injector
Occurrences	How many times cside has seen this iframe load, in the selected time range
Last Seen	When cside last saw this iframe load

Select a row to open its detail view.

Time range

Choose 24 hours, 7 days, 30 days, or 3 months from the tabs at the top of the page. The 30-day range requires a paid plan, and the 3-month range requires an Enterprise plan.

Filtering

• Search by hostname or URL
• Filter by vendor to show only iframes injected by specific vendors
• Hide blank frames to exclude about:blank and empty-source groupings from the list. Blank frames are shown by default

Related pages

• Vendor Permissions: the Frames permission blocks a vendor from embedding iframes at all
• Threat Detection: how cside identifies malicious scripts automatically