Solutions
Two products. Four situations people actually arrive with. These pages describe the situation and then say which parts of the platform apply โ including when the answer is only one of them.
By what you run
Online retailers
DTC and mid-market stores. The problem is the checkout, and specifically everything on it you did not write.
Marketplaces & apps
Two-sided platforms and apps that move money. The problem is accounts, at a scale where the attacker already has a valid one.
By what you are trying to get done
PCI DSS 4.0 script requirements
Requirements 6.4.3 and 11.6.1 in plain language, what evidence an assessor asks for, and which parts of it a tool can produce.
Peak season & code freeze
The eight weeks when your own change stops and everyone else's does not.
If you would rather just read the product pages
Reasonable. Checkout Monitor is script inventory and change detection. Account Defense is account takeover and API abuse. The platform page explains what sits underneath both.