# Security Articles

> Articles about Security from Dodo Payments, including guides, insights, and best practices.

- **URL**: https://dodopayments.com/blogs/category/security

---

- [Security incident involving an internal analytics system](https://dodopayments.com/blogs/security-incident-internal-analytics-system): An unauthorised party exploited CVE-2026-72898 in a Metabase instance used for internal reporting. Payments, card data, funds and credentials were unaffected.
- [Card Testing Fraud: How to Detect and Stop It in 2026](https://dodopayments.com/blogs/card-testing-fraud): Card testing fraud floods your checkout with tiny transactions to validate stolen cards. Learn how to spot the signs, the costs it creates, and how to block it without hurting real customers.
- [Strong Customer Authentication (SCA): A Practical Guide for SaaS](https://dodopayments.com/blogs/strong-customer-authentication): Strong Customer Authentication (SCA) is the PSD2 rule requiring two-factor verification on many payments. Learn how SCA works, its exemptions, and how to stay compliant without killing conversion.
- [What Is Tokenization in Payments? A 2026 Guide for SaaS](https://dodopayments.com/blogs/payment-tokenization): Payment tokenization explained for founders: how it works, why it shrinks PCI scope, network vs vault tokens, and how to enable it without building card vaults.
- [Payment Security Best Practices for SaaS Founders](https://dodopayments.com/blogs/payment-security-best-practices): Essential payment security practices for SaaS companies - from tokenization and 3D Secure to fraud detection and secure checkout design. Protect your customers and revenue.
- [PCI Compliance Checklist for SaaS and Digital Products](https://dodopayments.com/blogs/pci-compliance-checklist-saas): A practical PCI compliance checklist for SaaS companies selling digital products. Understand SAQ types, scope reduction, and how a merchant of record simplifies compliance.
- [PCI DSS Compliance: What Digital Businesses Need to Know](https://dodopayments.com/blogs/pci-dss-compliance-digital-business): PCI DSS compliance explained for digital businesses. Understand the 12 requirements, compliance levels, and how to reduce your scope when selling digital products online.

---

**Dodo Payments** -- The billing & payments platform for AI-first companies.
[Payments](https://dodopayments.com/payments) | [Billing](https://dodopayments.com/billing) | [Distribution](https://dodopayments.com/distribution) | [Pricing](https://dodopayments.com/pricing) | [Documentation](https://docs.dodopayments.com) | [Dashboard](https://app.dodopayments.com)