Mastercard Cyber Secure
Mastercard Cyber Secure gives acquiring banks cybersecurity information about merchants with public-facing URLs known to Mastercard.
What Mastercard Cyber Secure is
Mastercard Cyber Secure gives acquiring banks cybersecurity information about merchants with public-facing URLs known to Mastercard. A web-based merchant snapshot presents a risk rating and an issue priority navigator that groups vulnerabilities by category. The rating considers more than 40 security and infrastructure criteria, including the significance of identified vulnerabilities. For merchants under active investigation for an account data compromise event, acquirers can access a fuller assessment with mitigation plans, an IT profile of hosting providers and domains, and an informational profile related to certain industry standards and frameworks. That compliance profile does not certify or validate compliance. Merchants may request their own assessment through an acquirer or a support case in Mastercard Connect; Mastercard provides one complimentary copy per year after a case is submitted. Merchants can also ask about, contest, or seek to remediate a rating through Support Case Management. Mastercard says the service uses RiskRecon capabilities and AI with public and proprietary data, and honors robots.txt instructions and applicable cybersecurity laws. Pricing is on request.
Good
- Rates more than 40 security and infrastructure criteria
- Groups vulnerabilities by category for prioritization
- Offers mitigation plans in incident assessments
- Merchants can contest or seek remediation of ratings
Watch out
- Compliance profile does not certify compliance
- Assessment access is limited to acquirers for active investigations
- Pricing is on request
Who it suits
It suits acquiring banks assessing cyber risk across their merchant ecosystem, and merchants seeking to understand or question their rating. Merchants need to use an acquirer or Mastercard Connect to request an assessment or raise rating questions.
Verdict
Cyber Secure combines merchant risk ratings with incident assessments and routes for merchants to request or discuss their results. Its compliance profile is informational, not a certification.
The facts
Each one read from Mastercard Cyber Secure's own pages, with the date it was checked.
What it does
- Assessment access
- Acquirers can access a cyber risk assessment for merchants under active investigation for an account data compromise event.checked 11 Oct 2001
- Assessment contents
- Assessments include a risk rating, prioritized vulnerabilities, mitigation plans, an IT profile of hosting providers and domains, and a compliance profile.checked 11 Oct 2001
- Assessment criteria
- The merchant cyber risk rating evaluates more than 40 security and infrastructure criteria and analyzes the importance of found vulnerabilities.checked 4 Oct 2001
- Assessment method
- Mastercard says the assessment uses AI and multiple public and proprietary data sources to evaluate 40 security and infrastructure criteria and produce a risk rating and issue priority navigator.checked 11 Oct 2001
- Audience
- Acquirers can view cyber risk information for merchants with a public-facing URL known to Mastercard.checked 4 Oct 2001
- Compliance limitation
- The compliance profile is informational and does not certify or validate compliance with industry standards or frameworks.checked 11 Oct 2001
- Disputes and remediation
- Merchants can ask about, contest, or seek to remediate their cyber risk rating by opening a support case through Mastercard Connect.checked 11 Oct 2001
- Incident assessments
- Acquirers can access a cyber risk assessment for merchants under active investigation for an account data compromise event.checked 4 Oct 2001
- Intended users
- The product gives acquiring banks tools to assess cyber risk across their ecosystem and help merchants understand their cyber risk.checked 11 Oct 2001
- Merchant snapshot
- Acquirers can view a cyber risk snapshot for merchants with a public-facing URL known to Mastercard.checked 11 Oct 2001
- Merchant support
- Merchants can request a copy through their acquirer or by submitting a support ticket in Mastercard Connect; Mastercard provides one complimentary copy of a merchant’s own assessment per year after a support case is submitted.checked 4 Oct 2001
- Program relationship
- Cyber Secure builds on Mastercard’s Account Data Compromise program.checked 11 Oct 2001
- Purpose
- Mastercard Cyber Secure provides integrated cybersecurity information about banks and merchants in the payment ecosystem.checked 11 Oct 2001
- Ratings questions
- Merchants can use Mastercard Connect’s Support Case Management application to ask how a rating was calculated or to contest or remediate it.checked 4 Oct 2001
- Requesting an assessment
- Merchants can request a copy from their acquirer or through a support case in Mastercard Connect; Mastercard provides one complimentary copy of their own assessment per year after a case is submitted.checked 11 Oct 2001
- Risk rating
- The merchant cyber risk rating evaluates more than 40 security and infrastructure criteria and considers the importance of vulnerabilities found.checked 11 Oct 2001
- Risk snapshot
- A merchant snapshot includes a cyber risk rating and an issue priority navigator that organizes found vulnerabilities by category.checked 4 Oct 2001
- Underlying technology
- Mastercard says the assessment draws on RiskRecon capabilities and uses AI to combine public and proprietary data sources.checked 4 Oct 2001
- Website restrictions
- Mastercard says Cyber Secure honors robots.txt instructions and applicable cybersecurity laws.checked 4 Oct 2001
- Website scanning
- Mastercard says Cyber Secure honors robots.txt instructions and applicable cybersecurity laws.checked 11 Oct 2001
The company
- Company history
- RiskRecon says it was founded by Kelly White and officially incorporated in October 2015.checked 11 Oct 2001
- Founded
- 2020checked 28 Sep 2001
Alternatives to Mastercard Cyber Secure
- 1
Bitdefender Total Security
AndroidiOSmacOSWindows7.9From $5 a month - 2
Detectify Surface Monitoring
Free planWebAPI6.9From €208.33 a month - 3
CyCognito Platform
AndroidiOSWebAPI6.8 - 4
ImmuniWeb
AndroidiOSWebAPI6.8From €49.58 a month - 5
Ivanti Neurons for Zero Trust Access
AndroidiOSWebLinux6.8 - 6
RiskRecon
Free planWebAPI6.8Free plan