Jscrambler pricing
There are no public figures. Here is what drives the quote, what to ask for, and an honest comparison against something that does publish.
TL;DR
Jscrambler pricing
NO PUBLISHED FIGURES
Jscrambler is quote-based, like almost everyone in this category. Any number you find online is second-hand and probably stale.
WHAT DRIVES THE QUOTE
Which products you take, how many applications or domains, traffic volume, and support tier.
THE COMPARISON PROBLEM
You cannot compare quote-based products without running sales cycles, which is a real cost in time.
Short on time? We publish ours, which is the only figure on this page we can state with certainty. See it.
How much does Jscrambler cost?
Jscrambler does not publish pricing, so the cost depends on a quote scoped to which of their products you need, how many applications or domains you are protecting, and your support requirements. This is normal for the category rather than a criticism: almost every client-side security vendor prices by quote. It does make evaluation slow, because establishing a comparable number for three vendors means three sales processes. We are not going to invent a figure for them, and we have not seen a published one we would trust.
One first-party tag, added the way your stack already ships code. No DNS change and no CDN change, because your traffic is never routed anywhere.
What drives the quote
1
Which products
Code Integrity, the obfuscation and anti-tamper product, and Webpage Integrity, the client-side security product, are separate. Taking both costs more than taking one.
2
Applications or domains
Typically scoped by how many applications or properties you are protecting.
3
Traffic volume
Higher volume generally means a higher tier.
4
Support and SLA
Enterprise support tiers and response commitments are usually a separate line.
5
Contract length
Multi-year commitments usually attract a discount, as with most enterprise software.
What to ask for on the call
A price for only the client-side security product, if that is all you need. Bundles are easy to end up in accidentally
What happens at renewal, and whether the price is fixed for the term
Whether the quote is per application, per domain or by traffic, and what happens when you exceed it
Whether AI analysis features are included, and whether they send script contents to a third-party model, because that may matter to your data governance
To see an actual PCI evidence pack, not a dashboard screenshot
What the deployment effort is in engineering days, not in calendar time
Our pricing is published, so you can compare a quote against it directly.
Comparing against something published
We can only give you one side of this honestly. Ours: free for 1,000 page views a month, $99/month for 100,000 payment-page views, $499/month at 500,000, $799/month at 1,000,000, overage at $0.0013 per page view, and Enterprise on request. Page views are the only metered unit.
We have deliberately not built a price comparison table, because we would have to invent the other column. If you obtain a Jscrambler quote you can compare it against the figures above directly, which is the most useful thing we can offer here.
Worth saying plainly: if you need JavaScript obfuscation and code protection as well as client-side security, Jscrambler does something we do not do at all, and that may well justify the difference in process and price. See our Jscrambler comparison.
Sources and methodology
PCI DSS requirement text is quoted from PCI DSS v4.0.1 (June 2024), published by the PCI Security Standards Council, which is the current version at the time of writing. Requirements 6.4.3 and 11.6.1 became mandatory on 31 March 2025. Where we describe a competitor, we describe publicly available information and say so when something should be verified with the vendor. We publish this product and that is a bias worth knowing about while you read.
ASK AN AI
Don’t just take our word for it
Ask your assistant what to look for in a tool for PCI DSS 6.4.3 and 11.6.1.
Frequently asked questions
No. Like almost every vendor in this category, pricing is by quote. We have not seen a public figure we would trust enough to repeat.
There are real reasons alongside the commercial ones: deployments vary substantially in scope, enterprise buyers often negotiate anyway, and quoting lets vendors price to value. It also makes comparison slow, which is not accidental.
Budget for a sales cycle rather than an afternoon: typically a discovery call, often a technical session, then a proposal. For a category where you may want to compare three vendors, that is real time.
Yes and no, and honestly we cannot tell you. It is enterprise software sold by quote, so the answer depends on your scope and your negotiation. What we can say is that a free tier is not part of the model.
No, not for the client-side security product. They have historically offered trials, which is a different thing from a permanent free plan.
Partly, and only if you need both. If your driver is PCI DSS 6.4.3 and 11.6.1 you may only need the client-side product. Ask for that price separately so you can see what the bundle is costing you.
Hard to answer usefully, because almost all the alternatives are also quote-based. The two published points of reference in this category are ours and Report URI, which does something narrower.
No, it is the norm in enterprise security software and reflects genuine variation in deployment scope. It is a cost in evaluation time rather than a warning sign.
Several things that matter more: coverage model, whether it can block or only report, whether the 6.4.3 and 11.6.1 evidence is separated the way assessors ask, deployment effort in engineering days, and what the assessor actually receives.
Yes, usually, and particularly on multi-year commitments or at quarter end. That is true across enterprise security software and is worth knowing before the first call.
Related articles
Comparisons
Best client-side security tools in 2026
Thirteen tools, each with real pros and real cons, and an honest statement of our own bias.
Comparisons
Does Cloudflare make you PCI compliant?
What the WAF, the CDN and Page Shield each do for 6.4.3 and 11.6.1, and what they leave with you.
Comparisons
Best PCI compliance software in 2026
Full-scope platforms and client-side tools are different categories. Both lists, kept apart.
PCI DSS
PCI DSS compliance: a practical guide for 2026
What the standard covers, what changed in v4.0.1, and where the two client-side requirements fit.
See every script on your own checkout.
Install the tag, mark your payment pages, and watch the inventory fill in. Free forever on 1,000 page views a month, no credit card.
Free forever plan. No credit card.