About this plugin
CartShark is a SaaS security monitoring platform for eCommerce websites. This plugin helps users connect their site to the CartShark platform, where monitoring and threat detection occurs.
CartShark protects your eCommerce store from web skimming (Magecart) attacks. These attacks inject malicious JavaScript into your website to steal credit card data at checkout. CartShark prevents this by monitoring scripts in real-time and alerting you to suspicious behavior.
Key Features:
– 🛡️ Detect Magecart and web skimming threats
– 🔍 Monitor third-party JavaScript on your store
– 📊 View security stats in a simple dashboard
– 🔔 Receive alerts via email, Slack, WhatsApp, voice, and more
– ✅ Supports PCI DSS v4 compliance
– 🔌 Works seamlessly with WooCommerce
CartShark is designed to be plug-and-play —simply install, activate, and follow the onboarding process to get started.
External Services
This plugin connects your site to CartShark, a third-party SaaS security monitoring
service operated by RapidSpike. The plugin is a connector: monitoring and threat
analysis happen on the CartShark platform, not on your site. The plugin does not
function without this service.
What the plugin sends, and when:
- When you log in from the plugin: your CartShark email address and password are sent to
com to authenticate you, along with an identifier noting the login came
from WordPress. Your CartShark API keys are then retrieved and stored, encrypted, in
your site’s database.
- When you connect your site: your site’s domain name and site title are sent to
CartShark so the website can be registered against your account. You are redirected to
com to complete onboarding, and a short-lived token is passed to
sign you in there.
- While using the dashboard: authenticated requests are made to api.rapidspike.com to
retrieve your subscription status, registered websites, detection statistics, pageview
totals and the list of detected endpoints. These requests are signed with your API
keys and happen only in the WordPress admin.
- On your public pages: the plugin embeds the CartShark tracker script, which is served
by CartShark and runs in your visitors’ browsers. It reports on the scripts and
third-party endpoints loading on the page so CartShark can detect unauthorised or
malicious JavaScript. Embedding can be turned off at any time under CartShark >
Settings.
No customer order data, payment details or personal data from your store is sent to
CartShark by this plugin.
Service provider: RapidSpike Ltd.
com/terms-conditions/
com/privacy-policy/
Terms of Use
By using this plugin, you agree to the CartShark Terms of Use:
com/terms-conditions/
The RapidSpike Privacy Policy applies to data processed by the CartShark service:
com/privacy-policy/
License
This plugin is licensed under the GPLv2 or later.