[Foto: Ilustrativa / LensGO]
Site Blindado, a digital security firm specializing in e-commerce and a member of the Conviso group, is attending VTEX Day 2025 with a clear mission: to warn digital commerce companies and professionals about the operational challenges imposed by the updated PCI DSS standard governing payment data security.
Considered one of Latin America’s largest digital commerce conferences, the event will feature discussions on innovation, the future of retail, and cybersecurity—a topic taking center stage following the release of PCI DSS version 4.0.
Issued by the PCI Security Standards Council (PCI SSC), PCI DSS 4.0 introduces stricter controls governing how payment data is stored, processed, and transmitted. The framework mandates increased investment in robust encryption and multi-factor authentication (MFA)—combining two or more verification factors, such as passwords, biometrics, or tokens.
The rollout was structured in two distinct phases:
- Phase 1 (March 2024 Deadline): Introduced 13 core requirements.
- Phase 2 (March 31, 2025 Deadline): Requires compliance with 51 additional security requirements.
End-to-End Security Solutions Beyond Regulatory Compliance
At VTEX Day, Site Blindado and Conviso will showcase solutions designed to go beyond basic compliance. The firms focus on three core verticals: security testing, fraud prevention, and PCI DSS compliance support. Key portfolio capabilities include:
- DevSecOps Integration: Embedding security directly into software development lifecycles.
- Continuous Monitoring & Penetration Testing (PenTest): Automated vulnerability scans and active threat detection.
- Early Threat Detection: Identifying and mitigating system flaws before exploitation.
“Security can no longer be treated as an isolated or reactive process. It needs to be embedded into every line of code and every stage of the customer journey,” stated Wagner Elias, CEO of Conviso.
Site Blindado’s presence underscores the critical need for continuous protection in digital operations, where consumer trust and business continuity depend directly on information security.
What Is PCI DSS 4.0?
The Payment Card Industry Data Security Standard (PCI DSS 4.0) is a global security framework established to protect credit and debit card data. Compliance is mandatory for any entity that stores, processes, or transmits cardholder data—including brick-and-mortar retailers, e-commerce platforms, financial institutions, and payment processors.
Version 4.0 modernizes previous standards to counter evolving cyber threats. It introduces flexible customized implementation approaches while emphasizing continuous, risk-based security management rather than annual point-in-time compliance checks.
