Adept vs LochBot

What is Adept?

Adept is an AI DevTool designed to enhance technology stacks by accelerating agent development and improving workflows with proven results.

Who is Adept for?

Adept is primarily for professionals in supply-chain management, financial services, and healthcare, looking to streamline processes and improve operational efficiency.

What can I do with Adept?

With Adept, you can translate user intents into actions, accurately locate items on web pages or applications, and plan and execute complex enterprise workflows.

How much does Adept cost?

Adept publishes a custom / contact-sales pricing model — get a quote on their site.

How is Adept different from alternatives?

Adept focuses on agent development within the AI DevTools category, providing specialized features like proprietary agent training data and custom actuation software for enhanced automation.

What is a Content Security Policy?

A Content Security Policy (CSP) is an HTTP response header that tells the browser which sources of content are allowed to load on a page. CSP prevents Cross-Site Scripting, clickjacking, and other code injection attacks by restricting where scripts, styles, images, fonts, and other resources can be loaded from. When a resource violates the policy, the browser blocks it and optionally reports the violation.

What is the difference between CSP Level 2 and Level 3?

CSP Level 2 introduced nonce-based and hash-based script allowlisting, the base-uri directive, and the form-action directive. CSP Level 3 added the 'strict-dynamic' keyword, the 'report-sample' keyword, and the worker-src directive. Level 3 also introduced navigate-to for controlling navigation targets. Most modern browsers support Level 3.

Should I use 'unsafe-inline' in my CSP?

Avoid 'unsafe-inline' for script-src because it defeats CSP's primary XSS protection. If inline scripts are allowed, any injected script will also execute. Instead, use nonce-based CSP or hash-based CSP. For style-src, 'unsafe-inline' is more acceptable because inline styles are a lower-risk vector, though nonce-based styles are still preferred.

How do I deploy CSP without breaking my site?

Start with Content-Security-Policy-Report-Only instead of Content-Security-Policy. This header logs violations without blocking resources, letting you identify what would break. Monitor the violation reports, adjust your policy to allow legitimate resources, and repeat until violations are only from actual threats. Then switch to the enforcing header.

What is strict-dynamic and when should I use it?

'strict-dynamic' tells the browser to trust scripts loaded by already-trusted scripts. When combined with a nonce, you only need to add the nonce to your top-level scripts — any scripts they dynamically load are automatically trusted. This simplifies CSP for applications using script loaders, tag managers, or dynamically created script elements.