by Stephen Ward
I am incredibly proud that Source Defense has officially joined the PCI Security Standards Council’s Board of Advisors for the 2025 to 2027 term. This appointment reflects the role we have played over the past four years as a proactive partner with the PCI Council, helping define and advance best practices for eSkimming security.
For those unfamiliar, eSkimming (also known as Magecart, digital skimming, and formjacking) is one of the most pressing and under-addressed threats in online commerce. These attacks exploit the third-party JavaScript running on nearly every consumer-facing website, stealing sensitive data at the point of input, before it ever reaches the security of the server.
At Source Defense, we recognized this risk early. Since 2016, we have pioneered the category of client-side (or more accurately, eSkimming) security. Our behavior-based approach does not just identify known risks. It actively monitors and controls browser-side script activity in real time, preventing unauthorized access to sensitive form data.
Today, more than 1,000 of the world’s leading brands trust Source Defense to secure over $45 billion in annual eCommerce revenue. We are protecting millions of sessions each day and blocking billions of privacy and security violations each year. With the PCI DSS 4.0.1 deadline already here, our mission is more urgent than ever.
The new requirements under PCI DSS 6.4.3 and 11.6.1 mandate the management, monitoring, and integrity validation of all scripts on payment pages. Our inclusion on the Board of Advisors allows us to continue advocating for clear, effective, and actionable guidance, ensuring that organizations of all sizes have a practical path to compliance.
That same spirit drives the work of the PCI Council, where evolving threats meet evolving standards. As Source Defense steps into this new leadership role, we remain committed to helping the global community close the final gap in web security.
To the merchants, PSPs, QSACs, and partners we serve: thank you for trusting us. And to the broader PCI community: we look forward to the work ahead.
— Steve Ward
CMO, Source Defense
Ready to protect your organization from eSkimming threats? Contact Source Defense today for a free risk assessment and discover how our patented technology can secure your digital front door.
PCI DSS 4.0 makes client-side security a priority.
Source Defense delivers a solution for 6.4.3 and 11.6.1 without adding a burden to your security teams.