Blog
Straight answers on payment security for merchants and MSPs.
Card testing
Authorize.net Card Testing Attack: Fraud Filter Settings
Under a card testing attack on Authorize.net? How to set the Fraud Detection Suite's velocity, IP, amount and AVS/CCV filters, add CAPTCHA, and clean up.
Card Testing Attack? What to Do Now and How to Prevent It
Seeing bursts of small declined transactions on your website? What to do in the first hour of a card testing attack, how to clean up, and how to prevent it.
Visa VAMP Enumeration Thresholds and Fees Explained
What Visa's VAMP says about enumeration, from Visa's fact sheet: the 20% ratio, the 300,000 count, merchant thresholds, and where reported fees come from.
PCI compliance
PCI Non-Compliance Fee: Why You Pay It and How to Remove It
Why merchant statements show a monthly PCI non-compliance fee, how it differs from a PCI compliance fee, and how filing your SAQ and scans usually removes it.
PCI SAQ A and 6.4.3 in 4.0.1: Is Script Monitoring Needed?
SAQ A dropped 6.4.3 and 11.6.1, but a new eligibility criterion on script attacks replaced them. What FAQ 1588 and FAQ 1331 mean, and how to evidence it.
Which PCI SAQ Do I Need? A v4.0.1 Guide to All SAQ Types
A current PCI DSS v4.0.1 guide to choosing your SAQ: A, A-EP, B, B-IP, C, C-VT, P2PE, SPoC and D, with a comparison table and SAQ A vs SAQ A-EP explained.
Payment page security
For MSPs
Protect your merchants' checkout before the next attack.
Join the CardSecurity pilot for managed service providers. 30-day trial, up to 5 merchants.