Changelog

You can now run ASV (Approved Scanning Vendor) scans with Evervault. These scans are part of the PCI Data Security Standard (specifically requirement 11.3.2). If you’re in scope for that requirement, you need to submit a passing ASV scan at least every three months or 90 days. Evervault recommends completing your scan well ahead of the deadline. Many customers submit monthly to enhance security and allow for early identification and resolution of any issues. Contact your account manager to get started, or check out our docs for more information.

Why we added ASV scans

ASV scanning is part of our continuing effort to build out the compliance tooling side of our platform. Legacy tools in this space are often clunky and inefficient, and because you’re likely using Evervault’s other products already, it made sense to add ASV scanning. While not a complete list, below are some of the key benefits to our solution.

• Stay compliant: Meet PCI DSS 4.0 requirement 11.3.2 with quarterly scans and on-demand rescans.
• Faster remediation: View vulnerabilities in a structured dashboard, not buried in lengthy PDFs.
• User-friendly: Set up scans, track progress, request exceptions, and download reports in a few clicks.
• Unlimited rescans: Run as many scans as needed until you pass, at no extra cost.
• Standalone and modular: Buy only what you need, with self-serve and sales-assisted options.

You can now accept Apple Pay and Google Pay with Evervault in native apps with our Swift & Android SDKs.

Apple Pay for iOS →

Google Pay for Android →

Improved Merchant Onboarding

You can now create and manage merchants from the new Payments view in the Evervault Dashboard. From here you can:

• Create new merchants to enable use of Network Tokens, Apple Pay and Google Pay.
• Manage Apple Pay domains.
• Manage Apple Pay certificates.

New Webinars Hub

We’ve launched a new hub for our monthly webinars allowing you to easily go back and watch any webinars you might have missed.

Evervault Webinars →

Improvements

• You can now do plain text searches inside of the logs view without having to construct a full query.
• The Card Collection component now accepts a validation option to allow developers to add custom validation logic. For now this only supports adding regex validation to the card holder name, however, we plan to expand this to other validation types and inputs.
• The Card Collection component will now include a 6 digit BIN inside of the payload as soon as it is detected — previously this was only returned once a full card number was entered.
• Apple Pay in the JS SDK now exposes an onPaymentMethodChange hook to allow developers to respond to users selected different payment methods inside of the payment sheet.
• The Command palette (cmd+k) now allows you to quickly search for any of your teams Evervault resources by name and quickly navigate to it.
• Enclaves now support egress to mysql databases.
• Fixed bug in our functions logging infrastructure that could some times cause a Function to become unresponsive.
• Page Protection will now include data on whether a script likely originated from a users browser extension.
• We have reworked a lot of our settings pages making it easier for you to navigate between team, app and account settings.

Jump anywhere in the dashboard with the new command palette. Triggered with ⌘ + K (Ctrl + K on Windows). The palette surfaces shortcuts to pages, actions, and recent items, so you no longer dig through menus. Fewer clicks mean you stay in flow and find what you need faster.

Apple Pay Recurring Payments

Set up subscription billing in a single tap. Our Apple Pay component now supports recurring payments. Customers approve an ongoing charge in the familiar Apple Pay sheet, making renewals effortless.

Private Network Links

Pipe traffic straight from your VPC into Enclave without touching the public internet. Compliance teams gain peace of mind and sensitive data stays on your network. Reach out to support if you want to enable Private Link on your Enclave.

Improvements

• Inspect API now accepts both JSON objects and JSON strings.
• Introduced a new repareTransaction option for Apple Pay which allows merchants to adjust pricing just before the sheet appears.
• The last four digits of the payment payment are now returned in Apple Pay and Google Pay payloads.
• Introduced a new onShippingAddressChange hook in Apple Pay to allow merchants to recalculate the price when the address updates.
• The Evervault CLI now publishes checksums for installers and artifacts to simplify integrity checks.

Today, Evervault is launching Page Protection, a browser script management product that helps payment companies and merchants secure their payment pages against script attacks and comply with the latest PCI DSS 4.0 compliance requirements (6.4.3 and 11.6.1). Page Protection routes external scripts through Evervault’s secure CDN, continuously monitoring them so you instantly spot anything suspicious.

Google Pay Billing Address

You can now collect billing address information with Google Pay using the new billingAddress option.

evervault.ui.googlePay(transaction, {
  billingAddress: true
})

Improvements

• RuPay cards are now detected as a brand in the Card Collection component.
• RuPay cards are now supported in the BIN Lookup API.

Our new Card Art API is an extension for Network Tokens that lets you fetch the official artwork for a card.

Get Started with Card Art ->

Improvements

• We've introduced a new availability method to our Apple Pay component to allow you to check for Apple Pay support on the device before rendering the Apple Pay button. Learn more

We have released a new major version of our React Native SDK. This is a complete rewrite of the SDK which is now compatible with the new React Native architecture. Our React Native SDK enables your team to safely collect payment details and reduce fraud with 3D Secure.

Improvements

• We've Improved relay errors in the log view - We now include a detailed message in the log drawer explaining the cause of the error when relay fails to handle a request.

We've released a new @evervault/js package to allow our browser SDK to be imported as a CommonJS module or ES module. The package provides typescript types for use inside of typescript codebases.

Learn more ->

We've made some small DX improvements to our logs view. One of which is the abillity to toggle between UTC and your local time zone when searching and viewing logs.

Apple Pay Disbursements

Dispursment transaction are now supported by our Apple Pay component. This allows your to use Apple Pay to collect payment details from users for transfering funds to their account.

Learn More ->

Improvements

• We've completely rebuilt our dashboard function deployment flow from the ground up to provide a better DX.