Skip to content

For compliance and security teams

Meet PCI DSS requirements 6.4.3 and 11.6.1 the most direct way.

Since March 31, 2025, script inventory and tamper detection on payment pages have been mandatory. Proteside produces that evidence automatically and, unlike tools that only watch, blocks the very attack the requirements are meant to prevent.

See pricing
  • Script inventory and authorization (6.4.3)
  • Continuous change detection (11.6.1)
  • Report ready for your QSA and acquirer

What your auditor will ask for

  • Your acquirer asked. Now what?

    Self-assessment questionnaires now ask for an inventory and justification of every script on the payment page, plus a mechanism to detect changes.

  • Doing it by hand doesn’t scale

    Script spreadsheets and evidence screenshots are out of date the next day. Audits require a continuous process with a verifiable trail.

  • Compliance isn’t protection

    Meeting the requirement with a tool that only watches leaves the store compliant, and still exposed.

The business case

Complete evidence for a fraction of enterprise pricing

Enterprise tools that address these requirements are usually sold on annual contracts.

  • US$ 10–25kper year is the typical range of enterprise quotes for monitoring payment pages.Market quotes, 2026
  • Businessis the Proteside plan that already includes the PCI report, plus active blocking, for a fraction of enterprise quotes.
  • Continuousinstead of the weekly minimum required by 11.6.1: every change triggers an instant alert.

PCI report included on the Business plan; enterprise customers get 12 months of retention by contract.

From zero to evidence

  • 1

    Discovery

    Once installed on the payment page, Proteside automatically inventories every script present.

  • 2

    Authorization

    Your team approves each script with a justification, or lets automated policies approve the known ones.

  • 3

    Monitoring and reporting

    Unauthorized changes trigger alerts and blocking; the exportable report brings everything together for your QSA.

Start with an authorized assessment of your live checkout. How it works

What your compliance team gets

  • 6.4.3: inventory and authorization

    A living list of payment page scripts, with an approval workflow, justification and change history.

  • 11.6.1: change detection

    Continuous monitoring of payment page content and headers, with real-time alerts.

  • Exportable evidence

    An audit-ready report with the inventory, integrity status and alert trail.

  • Active blocking included

    While it produces evidence, Proteside blocks card data copying, QR code swaps and fake forms.

One layer for every payment method in the world, on your page

Checkout assessment

How to get started

Two paths, depending on the size of your business:

  • Stores: the Business plan already includes the PCI report
  • Enterprise: checkout assessment and a contract with 12-month retention
  • Consultancies and QSAs: a partner program to refer and support clients

Book an assessment: we’ll review your scope together and map the path to complete evidence.

The evidence your QSA asks for, produced by the same layer that stops the attack the requirement is meant to prevent.

Frequently asked questions

Does Proteside fully address 6.4.3 and 11.6.1?

Yes. Proteside covers script inventory, authorization and justification (6.4.3) and detection of unauthorized changes with alerts (11.6.1), with exportable evidence for QSAs and acquirers.

My store uses a third-party checkout. Do I need this?

It depends on your setup: if the payment page is embedded or you run your own scripts in the payment flow, the requirements apply. It’s worth confirming your scope with your QSA, and our assessment helps map exactly that.

Since when have these requirements been mandatory?

PCI DSS requirements 6.4.3 and 11.6.1 became mandatory on March 31, 2025.

How often does 11.6.1 require the payment page to be checked?

Requirement 11.6.1 calls for checks at least weekly (or as defined by your risk analysis). Proteside monitors continuously and alerts you instantly.

The moment of payment is the same. Your business isn’t.

Walk into your next audit with the evidence ready

Book an assessment of your checkout, or start now with a self-service plan.