Shoptet pilot open · more platforms in development

E-Commerce
Integrations

Connect your online store to ScriptPatrol. Monitor checkout, cart, and login for unauthorized script changes. No code required. Shoptet pilot is open today; other platforms are in development.

Join the Shoptet pilot See Shoptet addon

Free pilot accessNo credit cardHelps with PCI DSS 4.0No JS in storefront

Integration Roadmap

6 Platforms. 1 in Pilot Today.

Shoptet

Pilot · Early Access

WooCommerce

In Development

PrestaShop

In Development

Magento 2

Planned

BigCommerce

Planned

OpenCart

Planned

Pilot open · listing pending

Shoptet Integration

Built for Shoptet, the leading e-commerce platform in the Czech Republic and Slovakia.

Shoptet

Pilot · Early AccessShoptet OAuth Addon API

A dedicated addon designed specifically for Shoptet stores. Monitor your checkout, cart, and customer login against unauthorized JavaScript modifications without writing a single line of code. Catalog listing is under review with Shoptet; pilot stores onboard via direct OAuth handshake.

OAuth onboarding, no API key to paste
Automatic checkout, cart & login monitoring
Alerts when a script change looks like an attack or needs your decision
Works on most Cloudflare-protected stores
No JavaScript injected into your storefront
Risk score plus a plain-language explanation with every alert

Join the Shoptet pilot Shoptet addon details How it works

scriptpatrol · example.shoptet.cz (demo)

live

✓/pokladna

12 scriptsCLEAN

✓/kosik

8 scriptsCLEAN

✓/a/prihlaseni

6 scriptsCLEAN

✓/a/ucet

11 scriptsCLEAN

Scripts monitored37

Changes today0

Last scan2 min ago

Scanning...72%

Demo with example data. This is not a real store.

Using WooCommerce, PrestaShop, or Magento?

Get notified

Interactive Demo

See the Plugin in Action

This is exactly what you see in your store's admin panel after installing the plugin. Click “Connect” to see the monitoring activation flow.

ScriptPatrolv1.1.0

External JavaScript Security Monitoring

Monitor your payment pages for unauthorized JavaScript changes. No code injection, no performance impact.

Step 1: Create Account
Step 2: Generate API Key
Step 3: Connect Plugin

API Key

Type anything into the API key field and click Connect to see the activation flow

Why ScriptPatrol

What changes when you turn it on

A manual audit catches a swapped script weeks late. ScriptPatrol catches it on the next daily scan.

Without ScriptPatrol

Manual script audits every quarter (or never)

Breach detection delayed by days or weeks

No evidence for PCI DSS 4.0 Req. 6.4.3 and 11.6.1 where they apply

No visibility into third-party script changes

With ScriptPatrol

Automated continuous script monitoring

Alerts right after the scan when a change needs your attention

Exportable PCI DSS evidence: script inventory + change history

Full script inventory with SHA-256 integrity hashes

What gets monitored

What ScriptPatrol watches on your store

The plugin connects your store. ScriptPatrol then watches every script and security header on your checkout, cart and login, and after the store's first week it alerts you as soon as a scan detects a change worth your attention. During the first week only critical findings are emailed.

Checkout & payment pages (Magecart detection)

Cart, login, and account pages

HTTP security headers, TLS, cookie flags & mixed-content checks

All scripts: inline, external, third-party

Every script identified: vendor and look-alike detection

Where each page sends data: third-party and payment destinations

Risk score + plain-language explanation with every alert

SHA-256 script inventory helps with PCI DSS 4.0

Common Questions

Integration FAQ

: No. ScriptPatrol monitors your pages externally, like a regular visitor browsing your site. The add-on only registers your store URL with ScriptPatrol over an OAuth handshake, so there is no API key to paste. No JavaScript is injected into your storefront and nothing runs on your server during page loads, so performance is unaffected.
: No. The plugin connects your store to ScriptPatrol by securely transmitting your site URL and configured paths via an encrypted API call. All scanning happens externally from ScriptPatrol servers. Your storefront code, theme files, and checkout flow are never modified.
: Yes, where it applies. It produces the evidence those PCI DSS 4.0 assessments ask for: an exportable script inventory with SHA-256 hashes, authorization records, and a timestamped change history. These map to requirements 6.4.3 (script inventory and authorization) and 11.6.1 (change detection on payment pages). Merchants on SAQ A (hosted or redirect payment pages) have not needed 6.4.3 or 11.6.1 since 31 March 2025, but client-side monitoring still protects your customers and your brand.
: When a change looks like an attack, you receive an email right after the scan. After the store’s first week the same email also comes for a change that needs your decision; during the first week only critical findings are emailed. The email summarizes what changed, gives a risk score and explains in plain language what to check. Routine vendor updates are recorded in your dashboard and summarized in your weekly report. Every change is logged with precise timestamps for your audit trail. You can configure approval workflows for your team.
: Pilot access is free during the early-access program. Once the addon is approved into the Shoptet catalog, pricing will follow the catalog conventions, and pilot stores keep free access throughout the beta period. Sign up to join the pilot waitlist.
: Not yet. The addon is in pilot, and we onboard pilot stores directly (contact us). Catalog listing is under review with Shoptet. Pilot participants get free access during beta.
: We are actively building integrations for WooCommerce, PrestaShop, Magento 2, BigCommerce, and OpenCart. Sign up for free and we will notify you as soon as support for your platform is ready.

Join the Shoptet pilot

The Shoptet addon is in early access. Join the pilot, onboard via OAuth, and start monitoring checkout, cart, and login for unauthorized script changes.

Free pilot accessNo code changesHelps with PCI DSS 4.0Alerts when a change needs you

Join the Shoptet pilot Sign In

No credit card required. Using another platform? Sign up and we'll notify you when your integration is ready.

E-CommerceIntegrations

6 Platforms. 1 in Pilot Today.

Shoptet Integration

Shoptet

Interactive Demo

External JavaScript Security Monitoring

What changes when you turn it on

Without ScriptPatrol

With ScriptPatrol

What ScriptPatrol watches on your store

Integration FAQ

Join the Shoptet pilot

E-Commerce
Integrations