Conectar

PCI Compliance & Secure Payments

HermeticOrmusbyHermeticOrmus
•
4
•
Soluciones de Comercio Electrónico

Implements industry-standard PCI DSS requirements to ensure secure handling of payment card data and robust payment system architecture.

This skill equips Claude with specialized knowledge to build, audit, and maintain PCI DSS compliant payment systems. It provides standardized implementation patterns for the 12 core security requirements, including secure tokenization, AES-256-GCM encryption for data at rest, and robust audit logging. By guiding developers through data minimization and scope reduction strategies—such as using SAQ A-compatible hosted fields—this skill helps teams integrate payment processors like Stripe safely while ensuring sensitive cardholder data is never stored inappropriately.

Características Principales

01Role-based access control (RBAC) and audit logging templates for payment systems
02Secure tokenization logic to minimize compliance scope and server-side risk
03Automated data sanitization logic to prevent CVV and track data leaks in logs
04Implementation patterns for all 12 core PCI DSS security requirements
054 GitHub stars
06Production-grade AES-256-GCM encryption snippets for sensitive data at rest

Casos de Uso

01Building a secure checkout flow for e-commerce platforms or in-game stores
02Auditing existing payment integrations for regulatory compliance and security gaps
03Implementing custom token vaults for secure cardholder data management