Skip to main content

Products & Plans

Flexible client-side security and PCI compliance plans, built around your needs

Compare features, pricing, and bundle options for automated PCI DSS 4.0.1 evidence and comprehensive, research-informed protection beyond compliance.

  • Self-serve setup in minutes
  • Automated, audit-ready PCI DSS 4.0.1 evidence
  • Detect malicious behavior. Block data theft in real time.

Choose your solution

Buy as a bundle and get 50% off the second product

PCI Compliance

Simplify PCI DSS 4.0.1 evidence

Automate PCI DSS 4.0.1 controls on your payment pages - and walk into audits with evidence QSAs expect.

  • Script inventory with authorization & justification
  • Payment-data access and behavior monitoring
  • Protect payment pages against eSkimming
  • Tamper and security-header change alerts
  • QSA-ready evidence for 6.4.3 & 11.6.1

Client-Side Security

Stop browser-side attacks before they hit customers

Defend against fake forms, checkout tampering, and malicious scripts with automated, granular policies and clear risk prioritization, so your team can focus on what matters.

  • Block fake forms & checkout tampering
  • See script behavior, payment data access & data flows
  • Score and prioritize the highest risks
  • Trace script dependencies with Visual Request Map

Choose your plan

Billed monthly Billed annually Save 20%

Essentials

Start with continuous monitoring - no sales call required

Free for 14 days, then

$98/mo$122.50/mo

Billed annually at $1,176/year

Plan allowance

  • 100K page views/month
  • ~900K events/month
  • 1 domain
  • 30-day data retention
  • With PCI: up to 2 payment pages
  • Continuous detection with email alerts
  • Automated script inventory and change tracking
  • Core script and threat-domain intelligence
  • Essential dashboards
  • With PCI: automated audit-ready reports
Contact us

Standard

Focused alerts, expanded coverage & on-demand blocking of risky scripts

Free for 14 days, then

$197/mo$246.25/mo

Billed annually at $2,364/year

Plan allowance

  • 250K page views/month
  • ~2.9 million events/month
  • Up to 3 domains
  • 60-day data retention
  • With PCI: up to 5 payment pages
  • Everything in Essentials
  • Automated script behavior baselining & focused alerts
  • Block risky scripts on demand
Contact us

Professional

Deeper intelligence with policy-driven protection

Free for 14 days, then

$315/mo$393.75/mo

Billed annually at $3,780/year

Plan allowance

  • 500K page views/month
  • ~3.5 million events/month
  • Up to 10 domains
  • 90-day data retention
  • With PCI: up to 10 payment pages
  • Everything in Standard
  • Advanced script behavior & threat-domain intelligence
  • Custom policies with optional automation
  • Advanced dashboards
  • SSO/SAML & RBAC for team access
Contact us

Enterprise

Scale, support, and terms built for your org

Custom

Plan allowance

  • Custom page-view volume
  • Custom domains
  • 18-month data retention
  • With PCI: custom payment-page coverage
  • Everything in Professional
  • Dedicated enterprise support and SLA
  • Flexible billing and contract terms
Contact us

Payment-page limits apply when PCI Compliance is selected. Page-view allowances are monthly.

Plan feature comparison

Comparison of Source Defense plan capabilities and limits
Plan dimension Essentials Standard Professional Enterprise
PositioningSelf-service monitoring and core automationFocused alerts, expanded coverage & on-demand protectionDeep script intelligence & proactive, policy driven protectionCustom scale, support and flexibility
Runtime protection & enforcementDetection & alertsOn-demand script blockingGranular runtime policies & optional automated enforcementGranular runtime policies & optional automated enforcement
Monthly page viewsUp to 100KUp to 250KUp to 500KCustom
Monthly events~900K~2.9 million~3.5 millionCustom
Domains1310Custom
Retention30 days60 days90 days18 months
Automatic service-level groupingIncludedIncludedIncludedIncluded
Script inventory of 1st, 3rd, 4th+ party scriptsIncludedIncludedIncludedIncluded
Automated script authorization & business justificationIncludedIncludedIncludedIncluded
Script integrity & change monitoring of 3rd, 4th+ and 1st party scriptsIncludedIncludedIncludedIncluded
Script & domain threat intelligenceIncludedIncludedIncludedIncluded
Intelligence-powered policy recommendationsIncludedIncluded
Payment data access monitoring & alertsIncludedIncludedIncludedIncluded
Field-level payment-data access detailsIncludedIncluded
Credential & PII access monitoring & alertsIncludedIncludedIncludedIncluded
Field-level credential & PII access detailsIncludedIncluded
Outbound data destination monitoring & risk classificationIncludedIncludedIncludedIncluded
Runtime script behavior monitoringIncludedIncludedIncludedIncluded
Field-, page- & URL-level behavior investigationIncludedIncluded
Script inventory & behavior exportIncludedIncludedIncluded
Email alertsIncludedIncludedIncludedIncluded
Automated behavior baselining & new-behavior alertsIncludedIncludedIncluded
Audit logsIncludedIncluded
Role-Based Access Control (RBAC)IncludedIncluded
MFAIncludedIncludedIncludedIncluded
SSO/SAMLIncludedIncluded
REST APIIncluded
SIEM integrationIncluded
WebhooksIncluded
AI support & product guidesIncludedIncludedIncludedIncluded
Human supportEmail supportDedicated support with SLA
Client-side security Features
Client-side security dashboardBasicBasicAdvancedAdvanced
Client-side risk scoring & prioritizationIncludedIncludedIncludedIncluded
Script dependency mapping - Visual Request MapIncludedIncludedIncludedIncluded
Script inventory & behavior exportIncludedIncludedIncluded
Advanced script, domain reputation & attack-signature intelligenceIncludedIncluded
PCI Compliance Features
PCI payment pages2510Custom
Automated QSA-ready evidence for PCI DSS 6.4.3 & 11.6.1IncludedIncludedIncludedIncluded
PCI dashboardBasicBasicAdvancedAdvanced
Security-impacting HTTP header change alert & reviewBasicBasicAdvancedAdvanced