The most accurate, easy and cost-effective cloud solution for PCI ASV compliance testing, reporting and submission
Qualys has been easy for us to deploy, and makes it possible for us to secure our systems, save time, and maintain PCI compliance more easily.
Information Security Manager
OfficeMax Mexico
User-friendly, guided approach
PCI ASV streamlines and walks you through the Payment Card Industry Data Security Standard compliance process. With tips, a friendly, intuitive interface, online help and 24/7 Qualys email and phone support, PCI ASV lets you protect cardholder information from breaches. No need to hire costly experts to achieve compliance.
Streamlined scanning and remediation
PCI ASV scans all Internet-facing networks and systems with Six Sigma (99.9996%) accuracy, generates easy to use reports and provides detailed patching instructions for each vulnerability discovered. That way, you’ll make sure you’re meeting the PCI DSS requirements for protecting the collection, storage, processing and transmission of cardholder data.
Support for web app requirement
PCI ASV also covers the standard’s requirement for maintaining secure web applications. Its Web Application Scanning module automates the evaluation of web apps during and after development, ensuring they’re built and maintained securely. The module conducts authenticated and unauthenticated scans within any web app type — custom-built in house, or commercial.
Automated report submission
An auto-submission feature completes the compliance process once you’re finished with remediation. Enter your bank and merchant IDs in your account settings to activate this feature. PCI ASV will send the compliance status report directly to the acquiring banks. You can also download PCI ASV compliance reports in PDF.
Expand beyond PCI ASV scanning to meet more than 97% of all PCI DSS requirements with the complete Qualys PCI compliance solution. Get security and compliance across asset management, vulnerability detection and response, payment web app security, secure configuration management, and security assessment questionnaires. Learn more about the complete Qualys PCI compliance solution.
As an Approved Scanning Vendor (ASV), Qualys has been authorized by the PCI Security Standards Council to conduct the quarterly scans required to show compliance with PCI DSS. The cloud-based Qualys PCI compliance solution helps you achieve compliance via a streamlined process that also gives you assurance your network is secure.
Benefit from the ASV requirements that Qualys PCI fulfills, including:
Follow an easy step-by-step approach and intuitive compliance tips in a user-friendly interface
Automatically complete the required quarterly scans, and also scan as often as you like on an ad hoc manner, for PCI compliance and for identifying and remediating vulnerabilities as soon as they appear in your network
Scan your network in segments and remediate/re-scan for vulnerabilities on target IPs. No need to scan your entire network
Leverage 24/7 online help and email/telephone support for understanding and pursuing compliance
Monitor all assets on premises and in private, public or hybrid clouds
Scan web apps during and after development to ensure they’re built and maintained securely
PCI DSS requires businesses to perform a network security scan every 90 days on all Internet-facing networks and systems in accordance with a defined set of procedures. To achieve compliance, businesses must identify and remediate all critical vulnerabilities detected during the scan. Qualys PCI ASV app:
Automates and greatly simplifies scanning and remediation
Provides easy-to-use reporting of vulnerabilities that will cause you to fail PCI DSS
Uses the Enterprise TruRisk Platform to accurately scan vulnerabilities
Provides detailed instructions for each detected vulnerability, with links to verified patches for rapid remediation
Qualys PCI ASV generates two PCI network reports that are similar but intended for different purposes: One designed to offer proof of compliance, and the other to serve as a remediation guide.
Generates PCI Executive Report for submitting to the acquiring bank to document PCI compliance. This report provides summary level information only
Generates PCI Technical Report for identifying vulnerabilities and prioritizing remediation. This report includes technical details to assist with remediation
Includes in the reports an overall PCI compliance status of “passed” or “failed”
Once you have met the validation actions, the Qualys PCI ASV application “auto-submission” feature completes the compliance process.
Automatically submits compliance status directly to your acquiring banks
Allows you to download PCI compliance reports in PDF to submit to your acquiring bank or to assist in remediation efforts
Single-pane-of-glass UI
See the results in one place, in seconds. With AssetView, security and compliance pros and managers get a complete and continuously updated view of all IT assets — from a single dashboard interface. Its fully customizable and lets you see the big picture, drill down into details, and generate reports for teammates and auditors. Its intuitive and easy-to-build dynamic dashboards to aggregate and correlate all of your IT security and compliance data in one place from all the various Qualys Cloud Apps. With its powerful elastic search clusters, you can now search for any asset – on-premises, endpoints and all clouds – with 2-second visibility.
Centralized & customized
Centralize discovery of host assets for multiple types of assessments. Organize host asset groups to match the structure of your business. Keep security data private with our end-to-end encryption and strong access controls. You can centrally manage users’ access to their Qualys accounts through your enterprise’s single sign-on (SSO). Qualys supports SAML 2.0-based identity service providers.
Easy deployment
Deploy from a public or private cloud — fully managed by Qualys. With Qualys, there are no servers to provision, software to install, or databases to maintain. You always have the latest Qualys features available through your browser, without setting up special client software or VPN connections.
Scalable and extensible
Scale up globally, on demand. Integrate with other systems via extensible XML-based APIs. You can use Qualys with a broad range of security and compliance systems, such as GRC, ticketing systems, SIEM, ERM, and IDS.
