PCI DSS COMPLIANCE
PCI DSS compliance for anyone handling card data
We reduce your scope, close gaps and prepare evidence for your PCI DSS assessment.
v4.0.1Scope reductionPentest + segmentation
What is PCI DSS compliance?
PCI DSS (Payment Card Industry Data Security Standard) is a global standard for any organisation that stores, processes or transmits cardholder data. Version 4.0.1 sets 12 requirements covering network security, data protection, access control, monitoring and regular testing such as penetration tests and segmentation checks.
Smaller scope, easier compliance.
We help you limit where card data lives, then prove the controls around it.
What we cover
Cardholder data scoping
Gap assessment against 12 requirements
Network segmentation testing
Internal and external penetration tests
Policies, logging and evidence
How it works
01
Scope
Map card data flows.
02
Gap assessment
Against PCI DSS v4.0.1.
03
Remediate
Fix gaps and reduce scope.
04
Test
Pentest and segmentation checks.
05
Assess
Support for QSA or SAQ.
What you get
✓
Card data flow diagram✓
Gap report and roadmap✓
Pentest and segmentation reports✓
Evidence pack for assessmentWho needs it?
✓
Payment gateways and aggregators
✓
E-commerce and retail
✓
Fintechs and card issuers
✓
Service providers to merchants
Why HostX
Testing in-house
Pentests by our own team.
Scope first
Less to secure and audit.
Tracked live
Evidence in the Compliance Tool.
Related services
Frequently asked questions
No. A QSA issues the Report on Compliance, or you complete an SAQ. HostX prepares you and provides testing evidence.