Features
CentralCSP features
PCI DSS script controls, the script inventory built from hash reports, the Technologies SBOM with CVE detection, and alerting on what changes.
Last update:
Four features are built on the reports CentralCSP collects:
- PCI DSS: Define payment-page scope, review every script found there, and export an evidence pack. PCI DSS
- Script inventory: Every script observed in scope, with a review status and full hash history. Script inventory
- Technologies: The libraries your visitors' browsers load, with version, lifecycle status, and known CVEs, a client-side SBOM built from the same hash reports. Technologies
- Alerting: Notify a channel when a new violation type appears, volume spikes, a library gains a CVE, or an unjustified script lands on a payment page. Alerting
All four depend on reports arriving first. For more information, refer to Connect your site.
Each is gated by plan. For more information, refer to Billing.
Next steps
Network errors
Requests to your site that failed, reported by the browser. Failures your server logs cannot contain, because the request never arrived.
Overview
Define payment-page scope, review every script observed there, and export an evidence pack. Supports PCI DSS v4 requirements 6.4.3 and 11.6.1.