Cybersource vs Worldpay eProtect

Cybersource Global Payment Gateway processes online credit and debit card payments for merchants worldwide. Founded in 1994, it connects to more than 200 acquirers and processors across over 160 countries and territories and accepts payments in more than 50 currencies. Supported methods include credit and debit cards, digital wallets, eWallets, bank transfers, installment payments and direct debit. Merchants can embed secure checkout, redirect customers to a hosted checkout page or use Microform for card entry. Sensitive payment data can bypass the merchant network and be vaulted in secure Visa data centers. Cybersource identifies itself as a certified Level 1 PCI Service Provider. Fraud tools use machine learning and artificial intelligence, with models that can update as market trends change. APIs, SDKs, client libraries, testing guides, sandbox testing and sample code support integration. The gateway lists recurring and marketplace payments and runs on Android, iOS, web and API platforms. Pricing is available on request.

Worldpay eProtect handles card-not-present payments by replacing card details with a low-value Registration ID, which Worldpay can exchange for an OmniToken during authorization, a sale, or token registration. The cloud service is available through an iFrame, the JavaScript Customer Browser API, or a Mobile API, with platforms listed as Android, iOS, web, and API. Worldpay says card data does not pass through the merchant’s web server and that eProtect reduces applicable PCI controls. The iFrame hosts card number, expiration, and CVV2 fields in Worldpay’s PCI-compliant environment; JavaScript validates and encrypts the account number before sending it to Worldpay. The resulting token may support card-on-file payments, returns, and recurring billing. The guide covers Apple Pay, Apple Pay on the Web, Google Pay, and Visa Checkout. Before production use, an organization must be enabled and certified to process OmniTokens, obtain a PayPage ID, and complete certification testing. The token exchange does not check CVV or AVS and does not validate expiration dates. Pricing is on request.