Disclosed are non-limiting methods for authenticating devices, comprising receiving a request for a device authentication identifier, transmitting a device authentication request message via a frame embedded in a webpage of a merchant website, the device authentication request message comprising challenge data associated with a challenge, receiving a device authentication response message via the frame embedded in the webpage of the merchant website based on the device authentication request message, the device authentication response message comprising challenge response data associated with a challenge response, transmitting the device authentication identifier message based on the device authentication response message, receiving a transaction request message for a transaction, comprising the device authentication identifier and transaction data associated with the transaction, determining the device score based on the device authentication identifier, and generating, an authorization request message based on the transaction data and the device score. Systems and computer program products are also disclosed.