• Making sure that you are not associated with brand-damaging content on affiliate websites is key to preserving your business. Trustwave Web Content Monitoring (WCM) is designed for broad analysis of over a million websites to help you take action to head off offensive, illegal or nefarious activity and threats to your business. A cloud-based, managed service, WCM helps organizations address internal and proprietary standards as well as compliance with regulatory and industry mandates.

Overview

  • For our organizations that manage hundreds of thousands of e-commerce URLs, WCM is a cloud-based managed service that simplifies the complexity of real-time monitoring and reporting.

    Delivered in TrustKeeper, and utilizing our proprietary automated scanning engine and multi-tier workflow, Trustwave WCM detects, scans, inventories and analyzes website content, in a fraction of the time required to perform the same function manually. If a finding is identified, then a Trustwave senior analyst will conduct a real-time review and quickly report back to the client.

    Trustwave has close ties with law enforcement and investigative agencies, and our processes work within commonly used computer forensic frameworks. WCM is under an ongoing adaptive release cycle to monitor ever-changing illegal, unethical and fraudulent practices taking place online.

    With organizations continually expanding their web-based influence, WCM has many broad applications, including organizations who offer web-hosting services, see Features for more information. WCM has also been specifically tuned to meet the needs of standard card brand reporting. Trustwave WCM supports specific standards, such as Visa's Global Brand Protection Program (GBPP) and MasterCard's Merchant Monitoring Program (MMP). See Payment Industry Features for more information.

    bram-badge

Features

  • WCM Identifies and Mitigates Risk

    Web-hosting organizations and other WCM adopters will find it necessary to identify and mitigate risk at each step of a relationship with an affiliate website. WCM’s primary goal is to ensure that affiliates are not associated with brand-damaging content and to ensure e-commerce sites have the right foundation of data security practices in place.

    Features of the WCM cloud-based managed service include:

    WCM Portal Access
    Reporting Tool
    Policy Violation Detection
    Hierarchical Reporting
    On-demand Scanning
    Score Card
    Country Risk
    Website Additional Information
    Custom Terms of Service Validation
    Bulk On-demand Scans

  • Payment Industry Features

    It has become necessary to identify and mitigate risk at each step of a relationship with a merchant that is processing credit cards. WCM’s primary goal is to ensure that merchants are selling the goods they say they are – and to ensure e-commerce sites have the right foundation of data security practices in place.

    WCM's features include:

  • Offering Card Brand Monitoring
    (Monthly)
    Merchant Risk Review
    (Monthly/Quarterly)
    WCM Portal Access
    MasterCard Reporting
    Card Brand Violation Detection
    Sponsor Hierarchy
    Boarding Scan
    Merchant Score Card LIGHT FULL
    Country Risk
    Website Additional Information
    Custom Terms of Service Validation
    Bulk Boarding Scans
    Secure Checkout Validation
    Malware Detection
    WHOIS And IP Analysis

How It Works

  • For our customers that manage hundreds of thousands of e-commerce URLs, WCM is a cloud-based managed service that simplifies the complexity of real-time monitoring and reporting. WCM facilitates a hierarchical view that gives organizations a global view of multiple stakeholder groups. This provides the administrators of the program with a single view into the overall affiliate website risk of their company.


  • Web Content Monitoring

    WCM provides automated analysis of e-commerce websites to help customers track large website populations and help make sure they meet specialized or card brand compliance requirements. The user simply loads their known list of e-commerce URLs, and is provided with the standard content categories critical to risk programs (such as tobacco, firearms, pharmaceuticals, etc.). Depending on the organization’s own risk thresholds and terms of service, customers can create custom terms for their program.

    Once scanned, the list of sites is analyzed with a multi-tiered process, including analyst reviews and escalation (if violations are found). In addition to monitoring for illegal activity, WCM gathers additional information that can be used during on demand scanning and persistent monitoring.

    The onboarding process is a critical time to complete a risk evaluation on potential customers. This includes information gathering, and background and credit checks. It’s also the right time to validate the website with a scan to ensure that they are not already involved in selling any illegal goods or services. WCM features a user-friendly scanning dashboard, which facilitates a light boarding scan for any new potential website.

    The WCM portal allows for flexibility in real-time reporting, monitoring and the establishment of hierarchical views, such as those needed by merchant sponsors.

    application screenshot

    Sponsor users get an easy-to-read dashboard with critical management elements available for immediate analysis.

    application screenshot

    Sponsor users can drill into violations based on their risk priorities.


  • Merchant Risk Review

    Merchant Risk Review

    The Merchant Risk Review bundle is an advanced merchant risk mitigation solution. This tier includes all card brand monitoring functionality as a standard feature, but adds on real-time risk checks for boarding new merchants into a portfolio. The merchant risk review includes bulk boarding scans for new account additions, including SSL validation and malware detection, powered by the Trustwave Secure Web Gateway.

    Users benefit from an in-depth merchant scorecard to help augment underwriting efforts and ensure only those merchants conducting commerce in a secure and ethical manner are signed in to the portfolio.

    Customers that combine WCM with the TrustKeeper PCI Manager merchant compliance program find great benefits for their portfolio’s risk mitigation objectives. Together, a WCM and PCI Manager program secures the merchant lifecycle – including reducing risk at boarding, ensuring the right data security approach is in place and moving merchants toward PCI compliance.



    The merchant scorecard provides an overview of the risk state for the e-commerce URL being monitored.


  • Other Services

    Trustwave Web Content Monitoring delivers beneficial add-on services, including:

    • Automatic Third-Party Detection

      Monthly service for parties such as ISP/web hosts, shopping carts and payment service providers.
    • Manual Third-Party Detection

      A Trustwave auditor reviews the website manually to attempt to identify the service providers being used by the merchant.
    • Merchant Discovery

      Trustwave will make our best effort - with the help of business contact information that the customer may be able to provide - to identify the domain names of merchants.

Resources

  • Documents