Welcome to the Vectra ASV Scanning Portal. Login to access your ASV scans and reports.
Monday to Friday 9am-5pm
Australian Central Time
New PCI DSS 4.0 Requirements – JavaScript Monitoring
August 1, 2024
New PCI DSS V4.0 Requirements 6.4.3 & 11.6.1 require merchants to implement strong security controls to
prevent eSkimming attacks by monitoring JavaScript on your eCommerce website.
These requirements are best practice until 31 March 2025, after which they will become mandatory.
Act now to run a 90 day free trial of Vectra’s JavaScript monitoring solution for your payment page.
For more information, please see the Resource section below and speak to the Vectra PCI DSS Service Desk.
ASV Scanning User Guide
The most talked about and concerning new requirements in PCI DSS 4.0 fall under sections 6.4.3 and 11.6.1. For the first time, merchants are required to implement security controls to prevent eSkimming attacks. These new requirements require control of all scripts running on merchant eCommerce website.
Important Note: These requirements are best practice until 31 March 2025, after which they will be required and must be fully considered during a PCI DSS assessment.
Access and download a copy of our v4.0 Information Sheet here.