Client-side risk is security exposure that occurs on the user’s browser, app, or device before data reaches a server. It includes threats such as malicious scripts, risky browser extensions, session theft, copied data leaving approved workflows, and users interacting with unsafe content or AI tools inside the browser.
This matters because the client side is often where modern work actually happens. If attackers can manipulate the browser environment, they may steal credentials, capture sensitive information, or bypass policy before backend controls ever see the request. Defenders reduce client-side risk with browser hardening, extension governance, endpoint protection, session monitoring, and browser-based data loss prevention. In practice, the browser is not just a display layer; it is a security boundary where access, data handling, and user actions must be controlled carefully.