Security Analysis for PCI DSS
All Technical Security Analyses from a Single Source
The requirements of PCI DSS are complex – especially when it comes to technical security analyses. Here, too, we are there for you as a full-service provider: With our team of experienced security analysts at usd HeroLab, we provide you with targeted support in implementing the required testing measures. Whether it's a pentest, ASV scan, or vulnerability scan of your systems, we cover all relevant analyses. With a clear goal: in addition to successfully proving PCI DSS compliance, we also want to make your company a little bit more secure.
PCI DSS Pentest
With our PCI DSS pentest, we analyze your relevant IT systems and applications specifically in accordance with Requirement 11.4. You will receive clear, actionable recommendations from us on how to effectively remedy identified vulnerabilities and risks.
External PCI DSS Scan (ASV Scan)
With our ASV Scan, we check your IT systems accessible from the Internet for vulnerabilities – exactly as required by Requirement 11.3.2 of the PCI DSS.
Internal PCI DSS Scan
Our internal PCI DSS scans check your IT systems – such as servers and other infrastructure components – for known vulnerabilities. This enables you to comply with Requirement 11.3.1 and receive specific recommendations for improving your security situation.
Segmentation Tests
As part of Requirement 11.4, we conduct segmentation tests to ensure that the cardholder data environment is effectively isolated from other networks. These tests are performed either once according to Requirement 11.4.5 or semi-annually according to Requirement 11.4.6.
PCI Consulting
As one of the leading Qualified Security Assessors (QSA) in Central Europe, our team has been auditing complex PCI environments for more than 20 years. And it is precisely this experience that we bring to your projects.
PCI Audit
Do you need to comply with PCI standards such as DSS, SSF, P2PE, PIN or 3DS? We analyze your environment and deliver reliable results that go beyond mere compliance.
