Reflectiz PCI DSS Solution Assessed by Integrity360

Integrity360, Europe’s biggest PCI Qualified Security Assessor reviewed how the Reflectiz platform meets PCI DSS v4.0.1 Requirements 6.4.3 and 11.6.1. Get the full assessment, plus what the new SAQ A rules now demand of every merchant running a payment iframe.

What’s Inside the White Paper

• An independent QSA’s verdict. How Integrity360 Europe, a member of the PCI SSC Global Executive Assessor Roundtable, assessed Reflectiz against Requirements 6.4.3 and 11.6.1, line by line.
• Why file hashing is not enough. How behavioral monitoring catches a trusted script the moment it is silently swapped at the vendor and starts reaching for card data, even when the file looks legitimate.
• The SAQ A trap for iframe merchants. What the January 2025 eligibility changes and PCI SSC FAQ #1588 now require, and how to prove your page is not susceptible to script attacks.
• Compliance without the engineering lift. Agentless deployment in days, continuous HTTP header and tamper detection, and one-click, QSA-ready audit evidence for every payment page.

Download the full whitepaper for more >>