Terms of use
Last updated 30 August 2026
CheckoutScripts is free, needs no account and carries no paid plan. These are the limits on what it does and on relying on what it returns.
What the service does
CheckoutScripts fetches a web address you supply and lists the third-party hosts named in the HTML that address returns.
What it is not
It is not a PCI DSS assessment, not an approved scanning vendor scan and not advice from a qualified security assessor. Nothing here certifies that a site is compliant. The output is an input to work you still have to do, and the method page lists the four categories of script it cannot see.
Use it on pages you are entitled to check
The service issues a single ordinary request to a publicly reachable page, the same request a browser makes. Do not use it to probe systems you have no relationship with, and do not use it to work around an access control. Automated or bulk use is not supported.
Accuracy and reliance
The reference figures come from one scan of 187 stores on a single day and describe those stores on that day. A result reflects what one server returned to one request at one moment; a page can serve different HTML to different visitors. Check anything you plan to put in front of an assessor.
Availability
This is a preview. It may be unavailable, may change without notice and may be withdrawn. Stored email addresses are handled as described in the privacy notice.