Freedom251 › Security Ratings Software
Mastercard Cyber Secure
What Mastercard Cyber Secure is
Mastercard Cyber Secure is a web-based cybersecurity information service for acquiring banks assessing merchants in their ecosystem. Acquirers can view a cyber risk snapshot for merchants whose public-facing URL is known to Mastercard. A snapshot includes a cyber risk rating and an issue priority navigator that organizes identified vulnerabilities by category. The rating evaluates more than 40 security and infrastructure criteria and considers the importance of vulnerabilities found. For merchants under active investigation for an account data compromise event, acquirers can access a cyber risk assessment with mitigation plans, an IT profile of hosting providers and domains, and an informational profile related to certain industry standards and frameworks. That compliance profile does not certify or validate compliance. Merchants can request their own assessment through their acquirer or a support ticket in Mastercard Connect. After a support case is submitted, Mastercard provides one complimentary copy of a merchant's own assessment per year. Merchants can also use Support Case Management in Mastercard Connect to ask how a rating was calculated, contest it, or seek remediation. Mastercard says the service builds on its Account Data Compromise program, draws on RiskRecon capabilities, and uses AI to combine public and proprietary data sources. It honors robots.txt instructions and applicable cybersecurity laws. Pricing is on request.
Who it suits
Cyber Secure is aimed at acquiring banks that need cyber risk information about merchants in their ecosystem, including merchants with a public-facing URL known to Mastercard. Merchants may also use Mastercard Connect to request their assessment or raise questions and disputes about a rating.
What it does well
- Merchant snapshots include a rating and categorized vulnerability priorities.
- Ratings evaluate more than 40 security and infrastructure criteria.
- Assessments include mitigation plans and hosting and domain information.
- Merchants can request one complimentary copy of their own assessment per year.
- Merchants can ask about, contest, or seek remediation of ratings.
What to know first
- Pricing is available on request.
- Snapshots cover merchants with a public-facing URL known to Mastercard.
- The compliance profile does not certify or validate compliance.
Getting started
- Open the Mastercard Cyber Secure website.
- Contact Mastercard for pricing.
- For merchant risk information, access the service as an acquirer.
- For a copy of your own assessment, contact your acquirer or submit a support ticket in Mastercard Connect.
Verdict
Choose Mastercard Cyber Secure if you are an acquirer seeking merchant cyber risk snapshots and assessments tied to account data compromise investigations. Merchants can use its support route to obtain their own assessment and address ratings, but the compliance profile is informational rather than certification.
Questions
How much does Mastercard Cyber Secure cost?
Pricing is on request.
Who can view merchant snapshots?
Acquirers can view snapshots for merchants with a public-facing URL known to Mastercard.
What does a merchant assessment contain?
It includes mitigation plans, an IT profile of hosting providers and domains, and an informational profile covering certain industry standards and frameworks. The compliance profile does not certify or validate compliance.
Can a merchant get a copy of their assessment?
A merchant can request it through their acquirer or submit a support ticket in Mastercard Connect. Mastercard provides one complimentary copy of the merchant's own assessment per year after a support case is submitted.
Can merchants challenge a rating?
Yes. Merchants can use Support Case Management in Mastercard Connect to ask how the rating was calculated, contest it, or seek remediation.
What technology does the assessment use?
Mastercard says it draws on RiskRecon capabilities and uses AI to combine public and proprietary data sources.
Facts from Mastercard Cyber Secure's own pages
- Assessment access
- Acquirers can access a cyber risk assessment for merchants under active investigation for an account data compromise event. · riskrecon.com, 11 Oct 2026
- Assessment contents
- Assessments include a risk rating, prioritized vulnerabilities, mitigation plans, an IT profile of hosting providers and domains, and a compliance profile. · riskrecon.com, 11 Oct 2026
- Assessment criteria
- The merchant cyber risk rating evaluates more than 40 security and infrastructure criteria and analyzes the importance of found vulnerabilities. · riskrecon.com, 4 Oct 2026
- Assessment method
- Mastercard says the assessment uses AI and multiple public and proprietary data sources to evaluate 40 security and infrastructure criteria and produce a risk rating and issue priority navigator. · newsroom.mastercard.com, 11 Oct 2026
- Audience
- Acquirers can view cyber risk information for merchants with a public-facing URL known to Mastercard. · riskrecon.com, 4 Oct 2026
- Company history
- RiskRecon says it was founded by Kelly White and officially incorporated in October 2015. · riskrecon.com, 11 Oct 2026
- Compliance limitation
- The compliance profile is informational and does not certify or validate compliance with industry standards or frameworks. · riskrecon.com, 11 Oct 2026
- Disputes and remediation
- Merchants can ask about, contest, or seek to remediate their cyber risk rating by opening a support case through Mastercard Connect. · riskrecon.com, 11 Oct 2026
- Founded
- 2020 · riskrecon.com, 28 Sept 2026
- Incident assessments
- Acquirers can access a cyber risk assessment for merchants under active investigation for an account data compromise event. · riskrecon.com, 4 Oct 2026
- Intended users
- The product gives acquiring banks tools to assess cyber risk across their ecosystem and help merchants understand their cyber risk. · newsroom.mastercard.com, 11 Oct 2026
- Merchant snapshot
- Acquirers can view a cyber risk snapshot for merchants with a public-facing URL known to Mastercard. · riskrecon.com, 11 Oct 2026
- Merchant support
- Merchants can request a copy through their acquirer or by submitting a support ticket in Mastercard Connect; Mastercard provides one complimentary copy of a merchant’s own assessment per year after a support case is submitted. · riskrecon.com, 4 Oct 2026
- Program relationship
- Cyber Secure builds on Mastercard’s Account Data Compromise program. · newsroom.mastercard.com, 11 Oct 2026
- Purpose
- Mastercard Cyber Secure provides integrated cybersecurity information about banks and merchants in the payment ecosystem. · riskrecon.com, 11 Oct 2026
- Ratings questions
- Merchants can use Mastercard Connect’s Support Case Management application to ask how a rating was calculated or to contest or remediate it. · riskrecon.com, 4 Oct 2026
- Requesting an assessment
- Merchants can request a copy from their acquirer or through a support case in Mastercard Connect; Mastercard provides one complimentary copy of their own assessment per year after a case is submitted. · riskrecon.com, 11 Oct 2026
- Risk rating
- The merchant cyber risk rating evaluates more than 40 security and infrastructure criteria and considers the importance of vulnerabilities found. · riskrecon.com, 11 Oct 2026
- Risk snapshot
- A merchant snapshot includes a cyber risk rating and an issue priority navigator that organizes found vulnerabilities by category. · riskrecon.com, 4 Oct 2026
- Underlying technology
- Mastercard says the assessment draws on RiskRecon capabilities and uses AI to combine public and proprietary data sources. · newsroom.mastercard.com, 4 Oct 2026
- Website restrictions
- Mastercard says Cyber Secure honors robots.txt instructions and applicable cybersecurity laws. · riskrecon.com, 4 Oct 2026
- Website scanning
- Mastercard says Cyber Secure honors robots.txt instructions and applicable cybersecurity laws. · riskrecon.com, 11 Oct 2026
Where Mastercard Cyber Secure stands on Freedom251
- Security Ratings Software#22 of 30