Product: Iframe Integrity

Jscrambler launches Iframe Integrity, a new solution that lets payment service providers (PSPs) deliver instant PCI DSS v4-compliant payment iframes to merchants — protecting against script-based skimming attacks while meeting the new SAQ A and FAQ 1588 eligibility criteria.

Iframe Integrity features include:
– PSP Script Hardening: Tamper-resistant protection for PSP scripts against reverse engineering and automated threats.
– Function Hijacking Protection: Monkey-patching protection on privileged functions on the parent page.
– Iframe Hijacking Protection: Isolates the DOM methods attackers use to tamper with iframe creation on the parent page.
– Iframe Overlay Protection: Isolates the DOM methods used to create new iframes or tamper with existing ones on the parent page.
– Form Overlay Protection: Isolates the DOM methods used to create new forms or tamper with existing ones on the parent page.
– Iframe & Form Control: Fine-grained control over how scripts on the parent page can use iframes and forms.

Built on Jscrambler’s Code Integrity and Webpage Integrity technology, Iframe Integrity integrates directly into a PSP’s existing script build process — fully automated, continuously monitored, and requiring zero management from merchants. PSPs can deploy it now to meet SAQ A eligibility and give merchants provable protection against overlay, hijacking, and formjacking attacks on payment pages.