{"id":1607,"date":"2019-08-23T14:49:46","date_gmt":"2019-08-23T14:49:46","guid":{"rendered":"https:\/\/www.thesslstore.com\/resources\/?p=1607"},"modified":"2019-10-17T17:09:07","modified_gmt":"2019-10-17T17:09:07","slug":"how-do-i-perform-a-pci-dss-scan","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/resources\/how-do-i-perform-a-pci-dss-scan\/","title":{"rendered":"How Do I Perform a PCI DSS Scan?"},"content":{"rendered":"\n

One of the most important requirements for the Payment Card Industry Data Security Standards<\/a> (PCI DSS) is internal and external site scanning. The PCI DSS scan is the portion of compliance that many companies struggle with<\/a> owing to the opacity of the requirement. Specifically, how does one perform a PCI DSS compliance scan?<\/p>\n\n\n\n

This article is going to explain the easiest, most cost-effective way to perform those scans \u2014 using Sectigo\u2019s HackerGuardian<\/a> scanner. Sectigo, formerly Comodo CA, is a PCI approved scanning vendor<\/a> who meets all of the approved vendor scan requirements with its HackerGuardian PCI scanner tool. <\/p>\n\n\n\n

How to Perform a PCI DSS Scan<\/h2>\n\n\n\n

As you\u2019ll see, the steps are surprisingly simple given the fact HackerGuardian handles everything for you and even produces ready-to-submit reports. There\u2019s something to be said for automation! Here\u2019s how to perform a PCI scan using Sectigo HackerGuardian.<\/p>\n\n\n\n

  1. Purchase Sectigo HackerGuardian.<\/strong> We sell HackerGuardian for the lowest price on the internet. It\u2019s already the most affordable scanning option<\/a> out there \u2013 usually retailing for $250. We\u2019ve got it for $81.90. So, go ahead and buy it, then check back here for the rest of the steps to a PCI compliance scan.<\/li><\/ol>\n\n\n\n
    \n
    \n

    Save 67% on PCI Scanning<\/p>\n

    Get Sectigo HackerGuardian PCI Scanner for only $81.90\/year.<\/p>\n <\/div>\n Start Scanning<\/a>\n

    <\/div>\n<\/div>\n\n\n\n
    1. Set up Sectigo HackerGuardian.<\/strong> Onboarding for HackerGuardian is simple and can be done by following the steps provided. We\u2019d go into detail here but, unfortunately, setup does vary somewhat depending on the servers you\u2019re using \u2014 just follow the instructions and it\u2019ll be set up in less than 10 minutes.<\/li>
    2. Open your Sectigo HackerGuardian client and start the scan.<\/strong> Just sit back and let Comodo do the rest. The company has been running tests for the 30,000+ malware variants that it\u2019s discovered throughout the 20 years it\u2019s been providing antivirus services. When it\u2019s done, Comodo will issue a report with any vulnerabilities it found.<\/li>
    3. Fix the vulnerabilities.<\/strong> Comodo will offer advice on remediation \u2014 take it, fix the issue, and make sure to document it carefully.<\/li>
    4. Run the scan again.<\/strong> This time, HackerGuardian should return a clean result. At this point, you\u2019ll want to take that report and submit it.<\/li><\/ol>\n\n\n\n

      What is the PCI DSS Scanning Requirement?<\/h2>\n\n\n\n

      PCI DSS compliance requires organizations to run regular\ninternal and external scans, and to remediate all issues that the scans turn\nup. You\u2019ll need to file quarterly reports demonstrating you\u2019ve done this. <\/p>\n\n\n\n

      More importantly, you need to create organizations policies\nfor how the scans will be conducted. Specifically, you should figure out what\npersonnel will be responsible for several activities, including: <\/p>\n\n\n\n