BOSS actively monitors service workers — the hidden background scripts that power offline caching, notifications, and request handling — to detect suspicious activity that traditional firewalls, WAFs, and antivirus miss.