Brand Safety Is Not a Checkbox, How Enterprise Brands Protect Their Reputation in Programmatic

The Screenshot That Ends Careers

A few years ago, a Fortune 500 brand's display ad showed up right next to an ISIS recruitment video on YouTube. The screenshot went viral on Twitter within hours. The CMO was answering board calls by the afternoon. The agency was fired by Friday.

This wasn't an isolated event. Variations of this story play out constantly — a family-friendly consumer brand appearing on a conspiracy theory blog, a pharma company's ad running alongside anti-vaccine content, a luxury fashion house showing up on a piracy site. Every time, someone says "but we had brand safety turned on."

That's the problem. Brand safety isn't a switch you flip. It's a system you build, maintain, and continuously update. And the default settings in most platforms are wildly insufficient for any brand that cares about where its ads appear.

Why Default Brand Safety Settings Fail

Every DSP ships with some basic brand safety categories you can toggle — adult content, violence, illegal activity, and so on. These category-based filters work at a surface level but miss most of the nuanced situations that actually cause problems.

The keyword problem. Keyword blocklists sound smart until you realize blocking "shooting" removes you from every basketball and photography site. Blocking "drug" kills pharma industry trade publications. Blocking "bomb" means you miss coverage of box office hits. Context matters enormously, and keyword lists lack context.

The URL crawl lag. Brand safety systems need to crawl and categorize web pages, and that takes time. A news article about a mass shooting might take 2-4 hours to be classified as "sensitive news." During that window, your ads are running next to it. For breaking news events, the damage is usually done before the filters catch up.

The app ecosystem is worse. Mobile app brand safety is significantly behind web. Many apps don't provide enough content signals for classification systems to work properly. Your ad might be running inside a game that looks harmless from its store listing but contains objectionable user-generated content.

Pre-Bid vs. Post-Bid Filtering

This distinction matters more than most advertisers realize.

Pre-bid filtering evaluates the ad opportunity before your DSP places a bid. The verification vendor scans the page in real time and tells the DSP "this page is safe" or "skip this one." Your ad never appears on unsafe content because you never bid on it in the first place.

Post-bid filtering lets the bid happen and the ad get served, then checks after the fact. If the page is flagged, the impression is logged but the damage — your ad appearing next to bad content — has already happened. Post-bid is useful for measurement and reporting, but it's not protection.

Verification Vendors and What They Actually Do

Three vendors dominate the brand safety verification space. Each has strengths and blind spots.

Integral Ad Science (IAS) offers strong contextual analysis with their Context Control feature. They classify pages into risk categories and provide granular controls. Their integration is deep with DV360 and The Trade Desk. Good at detecting misinformation and divisive content categories.

DoubleVerify (DV) has arguably the largest crawl coverage and their Authentic Brand Suitability product is sophisticated. They offer custom brand suitability tiers (not just safe/unsafe but nuanced categories). Their pre-bid segments are well-integrated across most major DSPs.

MOAT (now part of Oracle Advertising) was historically stronger on viewability measurement but has expanded into brand safety. It's being wound down as Oracle exits advertising, which is worth considering if you're currently relying on it.

My practical recommendation: use IAS or DoubleVerify as your primary pre-bid filter, and run a second vendor for post-bid monitoring. The overlap in coverage catches things either one alone would miss.

Inclusion Lists vs. Exclusion Lists

This is where strategy separates enterprise teams from everyone else.

Exclusion lists are the traditional approach. You build a list of sites and apps where you do NOT want to appear, and the DSP avoids them. The problem is obvious: the internet has billions of pages. Your exclusion list of 10,000 sites is a drop in an ocean. New sites pop up daily. You're playing whack-a-mole.

Inclusion lists (also called allowlists) flip the model. Instead of listing where you don't want to be, you list where you DO want to be. You start with a curated list of 5,000-20,000 domains that meet your standards, and your ads only run on those sites.

The tradeoff is reach. An inclusion list approach will significantly reduce your available inventory. For awareness campaigns that need massive scale, this can be a real problem. But for any brand where a single misplacement could generate negative press coverage, the reach sacrifice is worth it.

The hybrid approach most enterprise brands land on:

• Inclusion lists for high-profile campaigns (product launches, brand campaigns, sponsorships)
• Category blocking + verification vendor pre-bid for performance campaigns where scale matters more
• Continuous exclusion list updates as new problematic sites are identified
• Quarterly review of inclusion lists to add new quality publishers

The Made-for-Advertising Problem

MFA sites deserve their own section because they're a different kind of brand safety risk. They won't get your brand next to extremist content, but they will waste your money and pollute your data.

MFA sites are built specifically to attract programmatic ad revenue. They're loaded with ads — sometimes 15-20 per page — have clickbait headlines, recycled or AI-generated content, and aggressive refresh tactics. They're technically "brand safe" by most category filters because the content isn't offensive. It's just garbage.

The Association of National Advertisers (ANA) found that MFA sites accounted for roughly 15% of programmatic ad spend. That's billions of dollars flowing to sites that no human meaningfully engages with.

How to identify MFA sites in your campaigns:

• Abnormally high impression volumes from unknown domains
• Extremely low time-on-site after click-through
• High viewability scores but near-zero engagement
• Domains you've never heard of suddenly appearing in your top publishers
• Multiple ad slots per page (check ads.txt files)

• Monitor your domain-level reports weekly, not monthly
• Use supply path optimization (SPO) to buy from direct publishers rather than reseller paths
• Work with DSPs that actively filter MFA inventory (The Trade Desk has been aggressive on this)
• Add confirmed MFA sites to your exclusion list immediately

Brand Safety Setup in DV360

DV360 offers multiple layers of brand safety control, and the key is using them together rather than relying on any single layer.

Campaign-level settings:

Verification vendor integration:

Third-party verification (post-bid):

Brand Safety in The Trade Desk

TTD has been outspoken about brand safety and supply quality. Their approach differs from DV360 in some useful ways.

Global blocklists: TTD maintains a platform-wide blocklist of known problematic inventory that's automatically applied. This baseline is more aggressive than most DSPs.

OpenPath: TTD's direct publisher connections reduce the number of intermediaries (and opportunities for misrepresentation) between you and the publisher.

Third-party data marketplace: You can apply IAS or DoubleVerify pre-bid segments directly in the platform, and TTD offers its own quality scoring for available inventory.

Predictive clearing: TTD's bidding engine factors in content quality signals when deciding how much to bid, naturally deprioritizing questionable inventory even before explicit blocks are applied.

The Cost of Being Too Restrictive

I'd be irresponsible if I didn't address the other side. Being overly restrictive has real consequences.

You lose reach. An aggressive inclusion list of 2,000 sites might protect your brand perfectly but cut your available inventory by 90%. If your campaign needs to reach 10 million unique users, that math might not work.

You pay more. Less available inventory means more competition for what remains. CPMs on heavily filtered inventory can be 30-50% higher than open marketplace buying.

You miss good content. News publishers get hit hardest by overzealous brand safety. Blocking "news" categories means you miss high-quality journalism sites where engaged, educated audiences read content. Some of your best-performing placements might be on news sites.

You create blind spots. If your brand safety settings are different from your measurement baseline, you're optimizing in a distorted environment. Your conversion data only reflects the filtered inventory, which might not represent your best opportunities.

The right balance depends on your brand:

• Financial services, pharma, luxury goods: Lean restrictive. The reputational cost of one bad placement exceeds the CPM savings of thousands of good ones.
• CPG, retail, entertainment: Moderate filtering. Block the obvious problems but don't overcorrect.
• Performance-only / direct response: Focus more on fraud filtering than content safety. Your brand name isn't prominently displayed, so context matters less.

Building a Brand Safety Practice, Not Just a Checklist

The brands that handle brand safety well treat it as an ongoing practice, not a one-time setup. Here's what that looks like:

• Weekly domain reviews — Someone on the team checks the top 100 domains by spend and flags anything unfamiliar
• Monthly exclusion list updates — New problematic sites get added, false positives get removed
• Quarterly inclusion list refresh — New quality publishers get added, underperformers get reviewed
• Incident response plan — When (not if) a bad placement happens, who gets notified, who pulls the creative, who contacts the publisher, and who handles the response
• Vendor relationship management — Regular check-ins with your verification vendor to understand their latest coverage updates and new capabilities

If you're running programmatic campaigns and realize your brand safety setup hasn't been reviewed in months (or was never properly configured in the first place), that's worth fixing sooner rather than later. At AdCharta, this is one of the first things we audit when onboarding a new client — because everything else in a media plan depends on your ads actually appearing in environments that help your brand rather than hurt it. If you want a fresh set of eyes on your setup, reach out to our team.

Ready to Grow Your Ad Performance?

Get a free audit of your current advertising setup and discover untapped growth opportunities.