PCI Tools

Payment Script Inventory

Scan any checkout page to produce an inventory of all external scripts and stylesheets. Identify known payment processors, check Subresource Integrity status, then document the owner and business justification for each resource. Supports PCI DSS 6.4.3 script authorization activities.

About this tool
Each scan fetches any publicly accessible checkout page and identifies all externally loaded scripts and stylesheets. Known payment processor domains are detected automatically. Subresource Integrity status is checked and SHA-256 and SHA-384 hashes are generated for each resource. The Owner, Justification and Approved columns can be filled in and saved against a permanent URL you can bookmark or share. The completed inventory can be exported as a CSV. Maintaining a documented script inventory and authorization record supports activities relevant to PCI DSS requirement 6.4.3 where applicable.