Overview
The PCI DSS Dashboard aggregates compliance data for all active sites using the PCI solution in your account. Three widgets surface your gap‑closing priorities, while the site's table lets you drill into particulars.
You can view compliance data across all sites, narrow the view to a specific site, or filter by environment type—such as production, test, or development—if defined. This flexible filtering supports both broad monitoring and detailed, targeted analysis.
Step‑by‑Step
- Open the left nav in the Source Defense console and select PCI DSS dashboard.
-
Select the site or group of sites you'd like to review from the top drop-down; based on your site definitions.
- To change the reporting period, click the Settings gear and choose 30 days | 6 months | 12 months | 18 months.
- Review each widget:
-
Authorization & Justification - scripts require authorization and a written justification.
Learn more about how to authorize & justify - Script Integrity - scripts with unacknowledged behaviors.
-
Security Headers - security headers detected with unhandled changes.
-
Authorization & Justification - scripts require authorization and a written justification.
-
Click a Manage button to jump straight to a filtered list; 1st‑party or 3rd‑party for authorization and justification, 1st-party or 3rd-party for Integrity (to acknowledge behaviors) and "Manage" for all security header changes that require handling.
- Scroll down to Compliance Status for Sites to compare individual sites, sort columns, or open per‑site actions.
- Use Download ▶ to pull CSV reports when you need audit evidence.
Troubleshooting / FAQ
| Symptom | Fix |
|---|---|
| Widget shows “No scripts found” | The dashboard found no items of that type in the chosen period. Expand the period to get data for a larger period if required. |
| Manage button is greyed out | All items are already compliant for the selected time range, or no data to manage for the selected period. Expand the period to get data for a larger period if required. |