PCI DSS 4.0.1 Compliance Guide: Web App & API Security Controls
PCI DSS 4.0.1 enforces stricter security for web applications and APIs, requiring an inventory of custom software, management of payment scripts, risk-based vulnerability prioritization, authenticated internal scans, and tamper detection on payment pages.