cside pricing in 2026: plans, limits and what's included

One first-party tag, added the way your stack already ships code. No DNS change and no CDN change, because your traffic is never routed anywhere.

Both plans cost $99 a month for 100,000 payment-page views. This is what each includes at that price, from cside's own pricing page and documentation.

cside column: cside pricing (plan cards and the Script Security feature comparison), plus its docs on MFA enforcement, the public API, crawler automations, threat detection, caveats and pricing. Read on 27 October 2026. Our column: our pricing.

To be fair to cside, its $99 plan includes things ours does not: audit logs, which are on our Enterprise plan, a SOC 2 Type II report, alerts formatted for Slack, and a dedicated implementation engineer, all listed on its pricing page.

The proxy. cside can serve your third-party scripts through its own proxy domain, csidetm.com, which puts cside in your checkout path. cside says it fails open; test what a slow or degraded proxy does to your payment page, not only a fully down one. Source: cside's CSP documentation. Our tag is one first-party script, and your scripts are never proxied through us.

Inline scripts. cside's caveats page says it “currently does not monitor inline scripts”. 6.4.3 covers every script that executes on the payment page, inline ones included, and injected inline script is a common skimmer shape. We monitor inline scripts on every plan.

Who watches the monitor's own tag. Our own tag is listed in your script inventory like any other vendor's script. On request, a team can use an immutable script: a fixed URL with a Subresource Integrity hash, so the browser refuses to run a changed copy and updates only happen when you install a new version. cside offers the same kind of pinning: its installation docs describe a pinned script with Subresource Integrity that is “available to select teams” and “enabled by cside staff on a per-team basis”. On either product, ask for it if your assessor wants the monitor's own code fixed.

cside's free plan is the larger one: 2,000 page views a month against our 1,000, with email and webhook alerts and a shared Slack or Teams support channel, according to its pricing page. If your payment pages see between 1,000 and 2,000 views a month, its free plan covers you and ours does not.

Ours includes things at $0 that cside's does not: block rules and monitor-only mode, where cside's quick-start docs say “Free teams receive alerts only”; PDF evidence packs kept for 18 months, against 7 days of script history on cside Free; and API keys and MFA enforcement. cside's onboarding docs also say its free plans “require a brief application review before access is granted”. Ours starts at sign-up, with no card.

Same price, same picture. Both vendors keep one feature set across every paid volume step (cside's pricing docs say each Business sub-step has “the same feature set”), so everything above holds at $499. cside sells more steps in between, including 150,000 for $149. Ours goes from 100,000 straight to 200,000.

cside moves to custom Enterprise pricing above 500,000 page views. Ours stays published: $799 a month at 1,000,000 payment-page views, with overage at $0.0013 per page view. Volumes above 500,000 are set up with our team, but you can budget for them before the call.

At Enterprise, both offer SSO, a 99.9% uptime SLA and 90 days of history. cside's Enterprise adds SIEM, Vanta, Drata and Datadog integrations and a dedicated account manager. Ours adds up to 10 organizations and priority support.

PCI DSS requirement text is quoted from PCI DSS v4.0.1 (June 2024), published by the PCI Security Standards Council, which is the current version at the time of writing. Requirements 6.4.3 & 11.6.1 became mandatory on 31 March 2025. cside facts come from its own pricing page, documentation and changelog, read on 27 October 2026. Where cside's pages disagree with each other, we give both versions or leave the point out. We publish this product and that is a bias worth knowing about while you read. Primary sources: cside pricing, cside pricing docs, cside caveats, cside CSP documentation and cside changelog.

Ask your assistant what to look for in a tool for PCI DSS 6.4.3 & 11.6.1.