Eating Our Own Dogfood: What Running Report URI on Report URI Taught Us

Report URI's team shares real-world examples of security issues they discovered on their own platform by using their own monitoring tools. They found scripts missing Subresource Integrity (SRI) protection through Integrity Policy monitoring, including one with a typo in the integrity attribute. Content Security Policy (CSP) helped them catch development mistakes like hardcoded test domain URLs in production. The experience demonstrates how security monitoring tools provide confidence by either finding actual problems or confirming their absence.