Open navigation menu
Session replay risk: what website owners should review
Session replay risk means a website shows evidence of session recording technology or more sensitive replay behavior that should be reviewed. CertScore.ai distinguishes a session recording service detected from session replay on a sensitive input surface. The first signal means a recording-related vendor or script appeared in the scan. The second is rarer and more urgent when evidence suggests replay-related behavior near sensitive forms, account flows, checkout fields, or other input surfaces.
Run a free website behavior scan
Check observable tracking, cookies, consent, accessibility, and privacy risk signals.
Two different signal levels
A session recording service detected signal means the scan observed a vendor or script associated with session recording or behavioral analytics.
Session replay on a sensitive input surface is rarer and more urgent when evidence shows the behavior near sensitive forms, account flows, checkout fields, or other surfaces where user input deserves closer review.
How to review the evidence
Review the observed vendor, page context, script timing, and whether masking or suppression controls are configured for sensitive fields.
Automated scans can miss in-app configuration, field masking, consent gating, and region-specific controls, so the finding should guide review rather than replace it.
Run a free website behavior scan
Check observable tracking, cookies, consent, accessibility, and privacy risk signals.