Sensor

What cookies does Bot Defender have? What JS sensor domains does Bot Defender have?

Sensor

We have dedicated domains for fetching the sensor and sending XHRs. These should be allowed in your Content Security Policy (CSP)
perimeterx.net
px-cdn.net
px-cloud.net
pxchk.net
px-client.net

📘

Note

The HUMAN CAPTCHA solution uses Web Workers and WebAssembly (in supported browsers). Make sure you are not blocking the worker-src CSP directive for your domains. If you use the script-src CSP directive, make sure you also include the 'wasm-unsafe-eval' source expression unless you already use the more generic 'unsafe-eval' source expression, in which case you can continue to use the latter.