Insights on e-commerce, web development and digital solutions
Magecart attacks are rising sharply in 2026 and target the payment page. This guide shows how a skimmer reaches the checkout, how to spot a compromise and how to protect checkout integrity with a script inventory, Content Security Policy and Subresource Integrity - including PCI DSS requirements 6.4.3 and 11.6.1.
From 2026 all 64 new PCI DSS 4.x requirements are binding. Script management, MFA and tokenisation for online shops, implemented pragmatically.
You decide which optional data processing to allow.
Our anonymous reach measurement runs without cookies and without IP storage — we do not ask for consent for it because none is legally required.
Strictly required: language preference, core site functions and storing your cookie choice. Without these the site does not work.
Stores your preferences in your browser's local storage (e.g. light/dark appearance, accessibility options). Improves comfort but is not strictly required.
Records your interactions (clicks, scrolling, inputs) pseudonymously so we can spot usability issues. Form field inputs are masked automatically before storage; your IP address is not saved with the recording. Served from our own domain, no external tool. Opt-in, revocable any time.
Allows measurement of advertising campaigns (internal UTM attribution, e.g. whether a visit came from an ad). No external advertising cookies.