Monitor-only mode, for the weeks before you enforce
The same evidence you would get with enforcement on, including exactly what would have been blocked and on which pages, with nothing actually stopped.
Start for free
Talk to an expert
What is monitor-only mode?
Monitor-only mode runs every detection and every rule, records what would have happened, and takes no action. It exists because the risk people actually worry about when adopting a client-side tool is not missing an attack, it is breaking their own checkout. Running in monitor-only for a few weeks removes that risk entirely while still producing the compliance evidence, so the inventory and the header record are already populated by the time you decide to enforce.
You still get the evidence
The inventory, the justifications, the header change record and the weekly evidence pack are all produced identically. Nothing about the compliance output depends on enforcement being on.
The counterfactual is the useful part
The record of what would have been blocked, on which pages and in how many sessions, is what turns the decision to enforce from a leap into a review. Most surprises surface in the first week.
A reasonable adoption path
Install, mark your payment pages, run monitor-only while the inventory settles and justifications get written, then enable enforcement script by script starting with the ones nobody can justify.
A targeted skimmer fires for a slice of traffic: one country, one card BIN, one hour. Sampling is the norm in this category, commonly 10% of sessions and sometimes as low as 1%. That is a coin flip against an attack designed to be rare.
Related platform capabilities
Script inventory
Every script, with a justification per script.
Tamper detection
Content and integrity changes on the page.
Header monitoring
Distinct values seen per header, per week.
Vendors and load chains
Who loaded whom, and from where.
Script blocking
By URL, hash, domain, or single action.
Alerts
Three channels: email, webhook, or S3.
Frequently asked questions
Read the FAQ
Yes for 6.4.3 and 11.6.1 as written, because both are about inventory, integrity, detection and alerting rather than blocking. Some assessors prefer a control that can act, so if yours has a view it is better to know it early.
A few weeks is typical, and the honest answer is: until the weekly change list is boring. If new scripts are still appearing every day, the inventory has not settled.
Yes, and this is the common end state. Enforcement is per rule, so teams usually block the clearly unwanted immediately and leave everything else observed while justifications are collected.
No, the price is the same, because the metering is on page views rather than on enforcement. It is the same product with actions withheld.
See it on your own payment pages.
Install the tag, mark your payment pages, and watch the inventory fill in. Free forever on 1,000 page views a month, no credit card.
Free forever plan. No credit card.