Security Metrics for Woocommerce store

[Peter VanKoughnett]

Hi all!

One of my long-term clients has been asking me to comb through their Security Metrics dashboard to authorize any flagged requests or scripts. They have a Woocommerce site with a lot of plugins and are concerned about PCL compliance. The flagged requests are totally benign, so I'm wondering if this is necessary. I don't know much about compliance, but is using an outside service necessary and, if so, does anyone know how Security Metrics compares to other options?

- Peter

[Toby Cryns]

Good morning, Peter.  I wrote this article about PCI compliant + WP a while back: https://themightymo.com/do-i-need-pci-compliance-security-on-my-website/ - Perhaps it'll add some context (or not).  

One important note: PCI compliance is not the same as website security.  So my initial reaction to reading your request was: Where is their PCI complicance concern stemming from?  Is it an insurance-related concern or a website security concern? Or something else?

Toby

p.s. Good to see you here!  :)

[Peter VanKoughnett]

Thanks Toby, I'm still trying to figure out what motivated them around this in the first place. I will let you know once I know.

[Bill Hendricks (Shadowmason)]

Thanks for the article. It interested  me.

Bill.

On Jun 24, 2026, at 9:34 AM, Toby Cryns <to...@themightymo.com> wrote:

Good morning, Peter.  I wrote this article about PCI compliant + WP a while back: https://themightymo.com/do-i-need-pci-compliance-security-on-my-website/ - Perhaps it'll add some context (or not).  

--
You received this message because you are subscribed to the Google Groups "Minneapolis St. Paul WordPress User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mpls-stpaul-word...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/mpls-stpaul-wordpress/1127dcdb-57d9-4508-a746-cd6bf4736ddan%40googlegroups.com.