Your checkout runs on your website
Your page collects payment data directly or hosts an embedded payment form, iframe or payment component.
SUPWM resource library
Practical guidance for
safer ecommerce.
Understand payment-page monitoring, compare Shopping Cart Monitor levels and prepare clearer evidence for security, PCI and merchant-review workflows.
Ecommerce starting point
Does your ecommerce site need a Shopping Cart Monitor?
If your website accepts payment cards through an ecommerce flow, assess every page that collects payment information or can affect the security of the payment experience. Monitoring is especially relevant when scripts execute in the customer’s browser. A complete redirect to a processor-hosted page may be treated differently, so confirm your scope with the organization that accepts your PCI validation.
Scripts can affect the payment experience
Tag managers, analytics, chat, personalization, fraud tools or other JavaScript execute on—or can influence—the payment page.
You need a reviewable change history
Your security or PCI process needs an inventory, evidence of periodic checks and a way to investigate unexpected changes.
A third party operates the payment form
Outsourcing payment processing does not automatically remove every merchant responsibility. Confirm the exact integration and validation path with your acquirer or assessor.
Payment-page monitoring
Inventory what runs.
Know what changed.
SUPWM Shopping Cart Monitor records scripts and security-relevant observations on authorized payment paths, compares later scans and preserves a reviewable history. It supports workflows associated with PCI DSS 6.4.3 and 11.6.1 without claiming to certify compliance.
Explore the monitor ↗- 01
Map the payment path
Identify checkout, embedded form, account-payment and confirmation pages within scope.
- 02
Establish the inventory
Record the scripts and relevant page behavior seen in the customer’s browser.
- 03
Review change
Investigate additions, removals and unexpected modifications with evidence.
- 04
Document response
Keep the review, resolution and supporting history together for the next assessment.
Three levels
Choose the coverage that fits your checkout.
Shopping Cart Monitor can be purchased on its own. All levels include a 14-day trial and monthly or yearly billing.
Basic
$99 / monthFor a small ecommerce team that wants an on-demand view of one payment path.
- One payment path
- User-initiated scans
- JavaScript inventory
- Change history and findings
Plus
$199 / monthFor a merchant that wants the monitor to keep watch automatically.
- Everything in Basic, plus
- Automated monitoring
- Change alerts
- Ongoing review workflow
Pro
$399 / monthFor a mature ecommerce program with several critical payment paths.
- Everything in Plus, plus
- Up to three payment paths
- Annual forensic baseline
- 12 annual consultation credits
Yearly pricing and taxes are confirmed before payment. Trial reports are marked DEMO / TRIAL. Monitoring supports security and PCI workflows but does not replace an assessment, QSA, ASV, acquirer direction or the merchant’s other controls.
Independent references
Continue with official PCI guidance.
More resources
Merchant readiness checklists.
Prepare healthcare, pharmaceutical and medical-spa evidence before onboarding or review begins.
Healthcare Merchant Readiness Library
Free, evidence-first PDF checklists for healthcare merchants and risk teams.
View the collection ↗Start monitoring the checkout you operate.
Choose Basic, Plus or Pro as a standalone merchant subscription, or add monitoring to a broader SUPWM plan.
Start a 14-day trial ↗