QualysGuard Web Service for PCI Compliance Scans

by David Strom

With the compliance status dashboard, you can see how many of your servers are in or out of spec quickly, along with how many vulnerabilities exist.

Included with the product is a handy reference to PCI specs, the user guide and payment processor Websites.

This is the main dashboard of the service, showing you quickly how many of your servers are in compliance and how far you have completed your questionnaire.

Reports are PDF files that contain pages of detailed information about the various vulnerabilities of each server.

The self-assessment questionnaire is an annual task that requires you to answer dozens of questions on particular security practices.

Included in the service is this wizard that can automatically generate the required reports to submit to your merchant banks.

Part of the reports are these summary graphs showing the distribution of vulnerabilities by their severity level.

The service shows which vulnerabilities have been discovered for particular servers, along with links to resolve them.

You can secure your user account information with a VeriSign two-factor token.