CartShark Security

CartShark is a SaaS security monitoring platform for eCommerce websites. This plugin helps users connect their site to the CartShark platform, where monitoring and threat detection occurs.

CartShark protects your eCommerce store from web skimming (Magecart) attacks. These attacks inject malicious JavaScript into your website to steal credit card data at checkout. CartShark prevents this by monitoring scripts in real-time and alerting you to suspicious behavior.

Key Features:
– 🛡️ Detect Magecart and web skimming threats
– 🔍 Monitor third-party JavaScript on your store
– 📊 View security stats in a simple dashboard
– 🔔 Receive alerts via email, Slack, WhatsApp, voice, and more
– ✅ Supports PCI DSS v4 compliance
– 🔌 Works seamlessly with WooCommerce

CartShark is designed to be plug-and-play—simply install, activate, and follow the onboarding process to get started.

External Services

This plugin connects your site to CartShark, a third-party SaaS security monitoring
service operated by RapidSpike. The plugin is a connector: monitoring and threat
analysis happen on the CartShark platform, not on your site. The plugin does not
function without this service.

What the plugin sends, and when:

• When you log in from the plugin: your CartShark email address and password are sent to
  api.rapidspike.com to authenticate you, along with an identifier noting the login came
  from WordPress. Your CartShark API keys are then retrieved and stored, encrypted, in
  your site’s database.
• When you connect your site: your site’s domain name and site title are sent to
  CartShark so the website can be registered against your account. You are redirected to
  cartshark.rapidspike.com to complete onboarding, and a short-lived token is passed to
  sign you in there.
• While using the dashboard: authenticated requests are made to api.rapidspike.com to
  retrieve your subscription status, registered websites, detection statistics, pageview
  totals and the list of detected endpoints. These requests are signed with your API
  keys and happen only in the WordPress admin.
• On your public pages: the plugin embeds the CartShark tracker script, which is served
  by CartShark and runs in your visitors’ browsers. It reports on the scripts and
  third-party endpoints loading on the page so CartShark can detect unauthorised or
  malicious JavaScript. Embedding can be turned off at any time under CartShark >
  Settings.

No customer order data, payment details or personal data from your store is sent to
CartShark by this plugin.

Service provider: RapidSpike Ltd.
Terms of Use: https://www.rapidspike.com/terms-conditions/
Privacy Policy: https://www.rapidspike.com/privacy-policy/

Terms of Use

By using this plugin, you agree to the CartShark Terms of Use:
https://www.rapidspike.com/terms-conditions/

The RapidSpike Privacy Policy applies to data processed by the CartShark service:
https://www.rapidspike.com/privacy-policy/

License

This plugin is licensed under the GPLv2 or later.