Implements PCI DSS standards and secure payment handling patterns to protect sensitive cardholder data.
This skill provides specialized guidance and implementation patterns for meeting PCI DSS (Payment Card Industry Data Security Standard) requirements. It helps developers build secure payment processing systems by providing templates for data minimization, tokenization (including Stripe integration), AES-256-GCM encryption, role-based access control, and comprehensive audit logging. It is an essential tool for engineers architecting financial applications, reducing compliance scope, or preparing for formal security assessments.
주요 기능
01Secure Tokenization and Vaulting Patterns
022 GitHub stars
03PCI-Compliant Audit Logging and Access Control
0412 Core PCI DSS Requirement Mapping
05AES-256-GCM Encryption for Data at Rest
06Data Minimization and Card Data Masking
사용 사례
01Building custom payment processing systems or gateways
02Integrating Stripe or third-party processors while minimizing PCI scope
03Conducting internal security audits for payment card data handling
