Skip to content
SPECIFICTION
Get listed

Hyperswitch Card Vault vs Worldpay eProtect

Hyperswitch Card Vault

github.com

Worldpay eProtect

docs.worldpay.com

Side by side

FigureHyperswitch Card VaultWorldpay eProtect
Price fromFree—
Free planYes—
Free trial——
Open source——
Web—Yes
LinuxYes—
iOS—Yes
Android—Yes
APIYesYes
Self-hostedYes—
Plans published30
Spec score · Payment Tokenization Software8.6 (#4)7.1 (#13)
Integration optionsThe vault can be integrated through an SDK for merchants that are not PCI compliant or directly server to server for PCI-compliant merchants.The guide describes iFrame, JavaScript Customer Browser API, and Mobile API integration options.
PurposeHyperswitch Card Vault is an open-source Rust service for securely storing sensitive information such as payment card and bank account details.eProtect is designed for card-not-present payments and reduces the amount of payment data in a merchant’s systems.
TokenizationThe product page describes storing network and processor tokens, raw card details, bank credentials, and wallet credentials.It exchanges card details for a low-value Registration ID, which is exchanged for a Worldpay token during a transaction.

Plans

Hyperswitch Card Vault

  • Self-Host Community EditionFree
  • Integrate Hyperswitch CloudPriced on request
  • Self-Host Enterprise EditionPriced on request

Hyperswitch Card Vault pricing →

Worldpay eProtect

No plans published.

Worldpay eProtect pricing →

In their own words

Hyperswitch Card Vault

Hyperswitch Card Vault has no write-up on Specifiction yet; its figures are above.

Visit github.com

Worldpay eProtect

Worldpay eProtect handles card-not-present payments by replacing card details with a low-value Registration ID, which Worldpay can exchange for an OmniToken during authorization, a sale, or token registration. The cloud service is available through an iFrame, the JavaScript Customer Browser API, or a Mobile API, with platforms listed as Android, iOS, web, and API. Worldpay says card data does not pass through the merchant’s web server and that eProtect reduces applicable PCI controls. The iFrame hosts card number, expiration, and CVV2 fields in Worldpay’s PCI-compliant environment; JavaScript validates and encrypts the account number before sending it to Worldpay. The resulting token may support card-on-file payments, returns, and recurring billing. The guide covers Apple Pay, Apple Pay on the Web, Google Pay, and Visa Checkout. Before production use, an organization must be enabled and certified to process OmniTokens, obtain a PayPage ID, and complete certification testing. The token exchange does not check CVV or AVS and does not validate expiration dates. Pricing is on request.

Visit docs.worldpay.com