Web Crawling Services (BRAM)
Trustwave Web Content Monitoring
It has become necessary to identify and mitigate risk at each step of a relationship with a merchant that is processing credit cards. WCM’s primary goal is to ensure that merchants are selling the goods they say they are – and to ensure e-commerce sites have the right foundation of data security practices in place. Especially for acquiring banks, credit card processors and independent sales organizations that offer merchant services, offensive and illegal content on one of your retailers’ websites can negatively impact your brand and your business. Trustwave Web Content Monitoring (WCM) helps payments industry leaders monitor online merchant activity, and take action to head off nefarious activity and threats to the business.
An automated content monitoring solution that helps ensure compliance with regulatory, industry and proprietary mandates, Trustwave WCM supports specific standards, such as Visa's Global Brand Protection (GBP) and MasterCard's Business Risk and Mitigation (BRAM) program.
Delivered in TrustKeeper, and utilizing our proprietary automated scanning engine and multi-tier workflow, Trustwave WCM consists of Card Brand Monitoring and Merchant Risk Review. It detects, scans, inventories and analyzes website content, in a fraction of the time required to perform the same function manually. If a finding is identified, then a Trustwave senior analyst will conduct a real-time review and quickly report back to the client.
Trustwave has close ties with law enforcement and investigative agencies, and our processes work within commonly used computer forensic frameworks. WCM is under an ongoing adaptive release cycle to monitor ever-changing illegal, unethical and fraudulent practices taking place online.
For our customers that manage hundreds of thousands of e-commerce URLs, WCM simplifies the complexity of real-time monitoring and reporting, especially to meet the needs of standard card brand reporting. These "Sponsor Users" are often in charge of daily monitoring of e-commerce populations. The real-time access to WCM's sponsor dashboard provides customers an easy snapshot, and facilitates the management and ongoing reporting needs. And it comes in two flavors as mentioned below.
Card Brand Monitoring
The basic service level for WCM is Card Brand Monitoring, which provides automated analysis of e-commerce websites to help customers track large merchant populations and meet card brand compliance requirements. The user simply loads their known list of e-commerce URLs, and is provided with the standard content categories critical to risk management and brand protection programs (such as tobacco, firearms, pharmaceuticals, etc.). Depending on the organization’s own risk thresholds and terms of service, customers can create custom terms for their program.
Once scanned, the list of sites is analyzed with a multi-tiered process, including analyst reviews and escalation (if card brand violations are found). In addition to monitoring for illegal activity, WCM gathers additional information that can be used during merchant boarding and persistent monitoring.
The boarding process is a critical time to complete a risk evaluation on potential customers. This includes information gathering, and background and credit checks. It’s also the right time to validate the merchant’s website with a scan to ensure that they are not already involved in selling any illegal goods or services. WCM features a user-friendly scanning dashboard, which facilitates a light boarding scan for any new potential merchant.
The WCM portal allows for flexibility in real-time reporting and monitoring. The sponsor hierarchy helps organize a global view for organizations that have multiple stakeholder groups. This provides the administrators of the program with a single view into the overall merchant risk of their company.
Merchant Risk Review
The Merchant Risk Review bundle is an advanced merchant risk mitigation solution. This tier includes all card brand monitoring functionality as a standard feature, but adds on real-time risk checks for boarding new merchants into a portfolio. The merchant risk review includes bulk boarding scans for new account additions, including SSL validation and malware detection, powered by the Trustwave Secure Web Gateway.
User benefits from an in-depth merchant scorecard to help augment underwriting efforts and ensure only those merchants conducting commerce in a secure and ethical manner are signed in to the portfolio.
Customers that combine WCM with the TrustKeeper PCI Manager merchant compliance program find great benefits for their portfolio’s risk mitigation objectives. Together, a WCM and PCI Manager program secures the merchant lifecycle – including reducing risk at boarding, ensuring the right data security approach is in place and moving merchants toward PCI compliance.