{"id":1562,"date":"2019-07-24T17:52:08","date_gmt":"2019-07-24T17:52:08","guid":{"rendered":"https:\/\/www.thesslstore.com\/resources\/?p=1562"},"modified":"2019-07-24T18:00:28","modified_gmt":"2019-07-24T18:00:28","slug":"what-is-a-pci-approved-scanning-vendor","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/","title":{"rendered":"What is a PCI Approved Scanning Vendor?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">PCI DSS affects any organization that accepts payment cards.\nTurns out that\u2019s most businesses. And it also just so happens that payment\ncards are a lucrative and enticing target for enterprising cybercriminals. That\nmakes PCI DSS compliance doubly important. Not only are you in line for fines\nand penalties for non-compliance, but the very relationships that form the\nfoundation of your business \u2013 your banking partners, your customers, even your\nemployees \u2013 also fray when payment card information isn\u2019t properly protected. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To help safeguard this valuable information as it passes\nthrough our hands, PCI DSS Section 11.2 mandates that all organizations undergo\nquarterly external scanning.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Paraphrasing here, but organizations are to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Scan at least once quarterly<\/li><li>Rectify any security issues the scans kick up<\/li><li>Provide documentation to the PCI regulatory body<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">PCI Approved Vendor Scan Requirements<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Doing custom, proprietary scans would consume far more time and resources than most organizations have. Not only would you need to build a scanner, you\u2019d need to maintain it with up-to-date threat models and malware tests. There are over 30,000 different types of malware scans alone. Then you\u2019d also have to learn to collect and interpret the data, you\u2019d need to arrive at mitigation strategies and put them into action when the scans inevitably find little vulnerabilities. And you\u2019d have to finish by taking all of that data and compiling it into a readable report at the end of each quarter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PCI scanning requires that comprehensive vulnerability scans be performed that scan all:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>external IP addresses<\/li><li>web servers<\/li><li>devices such as routers and firewalls<\/li><li>domain name servers<\/li><li>virtual hosts<\/li><li>mail servers<\/li><li>wireless access points<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"967\" height=\"381\" src=\"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png\" alt=\"PCI Approved Vendor Scan Example\" class=\"wp-image-1565\" srcset=\"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png 967w, https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results-300x118.png 300w, https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results-768x303.png 768w, https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results-500x197.png 500w\" sizes=\"auto, (max-width: 967px) 100vw, 967px\" \/><figcaption>A sample PCI scan report.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Found vulnerabilities are then classified as Urgent, Critical, High, Medium, or Low.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That depth of scanning is just not feasible for most organizations. And the PCI planned for that, too. That\u2019s why organizations that collect payment cards must go through one of 97 approved scanning vendors or ASVs. Much like in the PKI industry, these vendors operate under the strictest guidelines and are vetted regularly to ensure they can maintain their trusted status. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s those ASVs that foot the cost of PCI scanner development and upkeep. They provide the security intel and guidance. And their software compiles the report. You simply need to submit the documentation at the end.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How Much Does a PCI Approved Scanning Vendor Cost?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Unfortunately, many of these scanning services cost\nthousands of dollars per year. McAfee\u2019s can cost upwards of $5,000 for a single\ndomain. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sectigo\/Comodo CA operates on the opposite end of the spectrum. HackerGuardian PCI scanner can be purchased for just $81.90 per year and performs all the same functions and fixes as every other ASV scanner. <\/p>\n\n\n\n<div class=\"item-bluebox\">\n  <div class=\"bluebox-text\">\n    <p class=\"item-title\">Save 67% on PCI Scanning<\/p>\n    <p class=\"item-text\">Get Comodo HackerGuardian PCI Scanner for only $81.90\/year.<\/p>\n  <\/div>\n  <a href=\"https:\/\/www.thesslstore.com\/comodo\/hacker-guardian-pci-scan-control-center.aspx\" class=\"button whitelinebutton\">Start Scanning<\/a>\n  <div class=\"clear\"><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>PCI DSS affects any organization that accepts payment cards. Turns out that\u2019s most businesses. And it also just so happens that payment cards are a lucrative and enticing target for enterprising cybercriminals. That makes PCI DSS compliance doubly important. Not &hellip; <a href=\"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[115],"tags":[],"class_list":["post-1562","post","type-post","status-publish","format-standard","hentry","category-pci-compliance"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What is a PCI Approved Scanning Vendor? - The SSL Store<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is a PCI Approved Scanning Vendor? - The SSL Store\" \/>\n<meta property=\"og:description\" content=\"PCI DSS affects any organization that accepts payment cards. Turns out that\u2019s most businesses. And it also just so happens that payment cards are a lucrative and enticing target for enterprising cybercriminals. That makes PCI DSS compliance doubly important. Not &hellip; Continue reading &rarr;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/\" \/>\n<meta property=\"og:site_name\" content=\"The SSL Store\" \/>\n<meta property=\"article:published_time\" content=\"2019-07-24T17:52:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-07-24T18:00:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png\" \/>\n<meta name=\"author\" content=\"tsswordpress\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"tsswordpress\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/\"},\"author\":{\"name\":\"tsswordpress\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/#\\\/schema\\\/person\\\/402dded299e19503b088cf48bf165d59\"},\"headline\":\"What is a PCI Approved Scanning Vendor?\",\"datePublished\":\"2019-07-24T17:52:08+00:00\",\"dateModified\":\"2019-07-24T18:00:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/\"},\"wordCount\":473,\"commentCount\":12,\"image\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/example-pci-scanning-results.png\",\"articleSection\":[\"PCI Compliance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/\",\"url\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/\",\"name\":\"What is a PCI Approved Scanning Vendor? - The SSL Store\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/example-pci-scanning-results.png\",\"datePublished\":\"2019-07-24T17:52:08+00:00\",\"dateModified\":\"2019-07-24T18:00:28+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/#\\\/schema\\\/person\\\/402dded299e19503b088cf48bf165d59\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/example-pci-scanning-results.png\",\"contentUrl\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/example-pci-scanning-results.png\",\"width\":967,\"height\":381},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/what-is-a-pci-approved-scanning-vendor\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Resources\",\"item\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PCI Compliance\",\"item\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/category\\\/pci-compliance\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"What is a PCI Approved Scanning Vendor?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/#website\",\"url\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/\",\"name\":\"The SSL Store\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/#\\\/schema\\\/person\\\/402dded299e19503b088cf48bf165d59\",\"name\":\"tsswordpress\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/78239165ecb118435d2709ba4dd124dd9151b1f6b069f87258c6514fe3728c7e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/78239165ecb118435d2709ba4dd124dd9151b1f6b069f87258c6514fe3728c7e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/78239165ecb118435d2709ba4dd124dd9151b1f6b069f87258c6514fe3728c7e?s=96&d=mm&r=g\",\"caption\":\"tsswordpress\"},\"url\":\"https:\\\/\\\/www.thesslstore.com\\\/resources\\\/author\\\/tsswordpress\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is a PCI Approved Scanning Vendor? - The SSL Store","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/","og_locale":"en_US","og_type":"article","og_title":"What is a PCI Approved Scanning Vendor? - The SSL Store","og_description":"PCI DSS affects any organization that accepts payment cards. Turns out that\u2019s most businesses. And it also just so happens that payment cards are a lucrative and enticing target for enterprising cybercriminals. That makes PCI DSS compliance doubly important. Not &hellip; Continue reading &rarr;","og_url":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/","og_site_name":"The SSL Store","article_published_time":"2019-07-24T17:52:08+00:00","article_modified_time":"2019-07-24T18:00:28+00:00","og_image":[{"url":"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png","type":"","width":"","height":""}],"author":"tsswordpress","twitter_card":"summary_large_image","twitter_misc":{"Written by":"tsswordpress","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#article","isPartOf":{"@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/"},"author":{"name":"tsswordpress","@id":"https:\/\/www.thesslstore.com\/resources\/#\/schema\/person\/402dded299e19503b088cf48bf165d59"},"headline":"What is a PCI Approved Scanning Vendor?","datePublished":"2019-07-24T17:52:08+00:00","dateModified":"2019-07-24T18:00:28+00:00","mainEntityOfPage":{"@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/"},"wordCount":473,"commentCount":12,"image":{"@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#primaryimage"},"thumbnailUrl":"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png","articleSection":["PCI Compliance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/","url":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/","name":"What is a PCI Approved Scanning Vendor? - The SSL Store","isPartOf":{"@id":"https:\/\/www.thesslstore.com\/resources\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#primaryimage"},"image":{"@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#primaryimage"},"thumbnailUrl":"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png","datePublished":"2019-07-24T17:52:08+00:00","dateModified":"2019-07-24T18:00:28+00:00","author":{"@id":"https:\/\/www.thesslstore.com\/resources\/#\/schema\/person\/402dded299e19503b088cf48bf165d59"},"breadcrumb":{"@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#primaryimage","url":"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png","contentUrl":"https:\/\/www.thesslstore.com\/resources\/wp-content\/uploads\/2019\/07\/example-pci-scanning-results.png","width":967,"height":381},{"@type":"BreadcrumbList","@id":"https:\/\/www.thesslstore.com\/resources\/what-is-a-pci-approved-scanning-vendor\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Resources","item":"https:\/\/www.thesslstore.com\/resources\/"},{"@type":"ListItem","position":2,"name":"PCI Compliance","item":"https:\/\/www.thesslstore.com\/resources\/category\/pci-compliance\/"},{"@type":"ListItem","position":3,"name":"What is a PCI Approved Scanning Vendor?"}]},{"@type":"WebSite","@id":"https:\/\/www.thesslstore.com\/resources\/#website","url":"https:\/\/www.thesslstore.com\/resources\/","name":"The SSL Store","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.thesslstore.com\/resources\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.thesslstore.com\/resources\/#\/schema\/person\/402dded299e19503b088cf48bf165d59","name":"tsswordpress","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/78239165ecb118435d2709ba4dd124dd9151b1f6b069f87258c6514fe3728c7e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/78239165ecb118435d2709ba4dd124dd9151b1f6b069f87258c6514fe3728c7e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/78239165ecb118435d2709ba4dd124dd9151b1f6b069f87258c6514fe3728c7e?s=96&d=mm&r=g","caption":"tsswordpress"},"url":"https:\/\/www.thesslstore.com\/resources\/author\/tsswordpress\/"}]}},"_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/posts\/1562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/comments?post=1562"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/posts\/1562\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/media?parent=1562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/categories?post=1562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/resources\/wp-json\/wp\/v2\/tags?post=1562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}