內容簡介
CartShark Security 是一款針對電子商務網站的安全監控外掛，能有效防止網路竊取攻擊（Magecart）。透過即時監控和威脅檢測，保護您的網店免受惡意 JavaScript 的侵害，確保交易安全。
【主要功能】
• 偵測 Magecart 和網路竊取威脅
• 監控商店中的第三方 JavaScript
• 以簡單儀表板查看安全統計
• 通過電子郵件、Slack、WhatsApp 等接收警報
• 支援 PCI DSS v4 合規性
• 與 WooCommerce 無縫整合
外掛標籤
開發者團隊
原文外掛簡介
CartShark is a SaaS security monitoring platform for eCommerce websites. This plugin helps users connect their site to the CartShark platform, where monitoring and threat detection occurs.
CartShark protects your eCommerce store from web skimming (Magecart) attacks. These attacks inject malicious JavaScript into your website to steal credit card data at checkout. CartShark prevents this by monitoring scripts in real-time and alerting you to suspicious behavior.
Key Features:
– 🛡️ Detect Magecart and web skimming threats
– 🔍 Monitor third-party JavaScript on your store
– 📊 View security stats in a simple dashboard
– 🔔 Receive alerts via email, Slack, WhatsApp, voice, and more
– ✅ Supports PCI DSS v4 compliance
– 🔌 Works seamlessly with WooCommerce
CartShark is designed to be plug-and-play—simply install, activate, and follow the onboarding process to get started.
External Services
This plugin connects your site to CartShark, a third-party SaaS security monitoring
service operated by RapidSpike. The plugin is a connector: monitoring and threat
analysis happen on the CartShark platform, not on your site. The plugin does not
function without this service.
What the plugin sends, and when:
When you log in from the plugin: your CartShark email address and password are sent to
api.rapidspike.com to authenticate you, along with an identifier noting the login came
from WordPress. Your CartShark API keys are then retrieved and stored, encrypted, in
your site’s database.
When you connect your site: your site’s domain name and site title are sent to
CartShark so the website can be registered against your account. You are redirected to
cartshark.rapidspike.com to complete onboarding, and a short-lived token is passed to
sign you in there.
While using the dashboard: authenticated requests are made to api.rapidspike.com to
retrieve your subscription status, registered websites, detection statistics, pageview
totals and the list of detected endpoints. These requests are signed with your API
keys and happen only in the WordPress admin.
On your public pages: the plugin embeds the CartShark tracker script, which is served
by CartShark and runs in your visitors’ browsers. It reports on the scripts and
third-party endpoints loading on the page so CartShark can detect unauthorised or
malicious JavaScript. Embedding can be turned off at any time under CartShark >
Settings.
No customer order data, payment details or personal data from your store is sent to
CartShark by this plugin.
Service provider: RapidSpike Ltd.
Terms of Use: https://www.rapidspike.com/terms-conditions/
Privacy Policy: https://www.rapidspike.com/privacy-policy/
Terms of Use
By using this plugin, you agree to the CartShark Terms of Use:
The RapidSpike Privacy Policy applies to data processed by the CartShark service:
License
This plugin is licensed under the GPLv2 or later.
