Implements secure payment processing and cardholder data handling patterns following PCI DSS v4.0 standards.
This skill provides specialized guidance for developers building payment integrations, checkout flows, and systems that handle sensitive cardholder data. It automates the application of PCI DSS v4.0 requirements, including data masking, AES-256 encryption, and secure transmission protocols like TLS 1.2+. By integrating best practices for scope reduction and secure coding patterns, it helps development teams avoid common pitfalls—such as logging sensitive authentication data or using weak cryptographic algorithms—significantly reducing the risk of compliance failures and costly data breaches.
主要功能
01Encryption standards enforcement (AES-256-GCM)
020 GitHub stars
03Audit logging and network segmentation guidance
04Secure cardholder data classification and masking
05Scope reduction strategies for SAQ A and A-EP
06PCI DSS v4.0 coding pattern implementation
使用场景
01Building secure checkout flows and tokenization systems
02Integrating payment gateways like Stripe, Braintree, or Adyen
03Auditing existing codebases for PCI compliance violations
