Review and minimize third-party script access on your site

Reviewing and minimizing third-party scripts on your site means confirming every analytics tag, chat widget, and ad script you load is one you genuinely still use and genuinely trust, since each one runs with real access to your page and your visitors.

Every third-party script is effectively code you did not write running on your site with real access, a script from a compromised or poorly secured provider becomes a real vulnerability on your own site.

How to do it

1. 1
   Inventory every third-party script currently loaded

   Check your page source or use a browser tool that lists all loaded scripts.
2. 2
   Confirm each is genuinely still in active use

   Remove anything left over from a tool you stopped using.
3. 3
   Evaluate the trustworthiness of what remains

   Established, reputable providers carry meaningfully less risk than obscure ones.
4. 4
   Consider Subresource Integrity for scripts that support it

   Adds a real layer of protection against a compromised third-party script being silently altered.