# Script Monitoring documentation

> Install the Script Monitoring tag, triage alerts, approve or block vendors, and collect PCI DSS 6.4.3 and 11.6.1 evidence. Guides and reference.

Source: https://docs.scriptmonitoring.com/ · Plan: All plans · Updated 2026-10-13

Script Monitoring watches every third-party script that runs on your pages. You add one script tag to the `<head>` of your site, and from then on each script your visitors load is inventoried, grouped by the vendor that serves it, and checked against a catalog of detection rules. When a rule fires you get an alert with a risk score from 1 to 10, and you decide once per vendor: allow it, block the flagged scripts, or look again later.

The same data is your evidence for PCI DSS 4.0.1: a script inventory with a justification for each vendor (requirement 6.4.3), the security headers on your payment pages watched for changes (requirement 11.6.1), and a weekly evidence pack. These docs show you how to set it up and use it. For how it works under the hood, see [How it works](https://www.scriptmonitoring.com/platform/architecture/).

## Where do I start?

  - [Quickstart](https://docs.scriptmonitoring.com/quickstart/): From install to a clean alert queue, step by step.
  - [Verify it's working](https://docs.scriptmonitoring.com/verify/): Confirm the tag is delivered and reporting.
  - [Payment pages](https://docs.scriptmonitoring.com/payment-pages/): Name the pages that take payment, for PCI DSS.
  - [Respond to a malicious script](https://docs.scriptmonitoring.com/guides/malicious-script/): Block it, check where it ran, remove the source.

## Frequently asked questions

### Which plans do these docs cover?

All of them. Each page shows the lowest plan that includes the feature it describes. Plans and prices are on the [pricing page](https://www.scriptmonitoring.com/pricing/).

### Is there a version of these docs for AI assistants?

Yes. Every page has a clean Markdown version: add `.md` to its URL, or use **View as Markdown** under the title. [llms.txt](https://docs.scriptmonitoring.com/llms.txt) lists every page and [llms-full.txt](https://docs.scriptmonitoring.com/llms-full.txt) has the full text in one file.

### Where do I ask a question the docs don't answer?

Use the chat on this site or in the [dashboard](https://app.scriptmonitoring.com).