Products

Two, and most companies need one of them.

Checkout Monitor

Script inventory, baselines, and change detection on the pages where you take payment. The product for the third-party code problem, and the one PCI DSS 4.0's script requirements are about.

Account Defense

Account takeover, credential stuffing and API abuse on platforms where the attacker signs in correctly. The product for the accounts problem.

Both run on the same platform: collection in the session, an agreed baseline, and a notification that names what changed. Neither one blocks anything, which is deliberate.

Which one

If you render your own checkout, you have the script problem, whether or not you have the accounts problem. If you run a marketplace or an app with logins and money movement, you have the accounts problem, and you may have both. The solutions pages work through it by situation.