PCI DSS ASV Scan for PSPs
Quarterly Approved Scanning Vendor (ASV) vulnerability scans of external-facing systems, as required by payment service providers and acquiring banks under PCI DSS. Includes scan setup, execution, remediation guidance for failing findings, and rescanning until a passing report is achieved for attestation.
Who it is for
Operators whose payment service providers or acquiring banks require quarterly ASV scan reports as a condition of card processing.
Scope
- Scoping of every external-facing IP address, domain and endpoint in the card processing environment
- Quarterly Approved Scanning Vendor (ASV) vulnerability scans performed to PCI DSS requirements
- Triage of failing findings with prioritised remediation guidance
- Rescanning until a passing scan is achieved within the quarter
- Support submitting the passing report to your PSP or acquiring bank
Deliverables
- Passing ASV scan report, issued quarterly, for attestation
- Remediation summary for failing findings, with fixes ranked by severity
- Scan scheduling across all four quarters of the year
- Confirmation documentation for PSP and acquiring bank submissions
How this differs from PCI DSS compliance support
PCI DSS v4.0.1 Compliance Support is the full compliance programme: it identifies where cardholder data lives, closes gaps in infrastructure and policy, and carries you through validation. The ASV Scan is the recurring external test that proves your internet-facing systems are free of known vulnerabilities — the piece PSPs and acquiring banks typically demand on its own. If your compliance programme is already running, the ASV Scan is usually the only part you need from us.
- Compliance Support builds the programme; the ASV Scan proves the result — every quarter.
- Compliance Support covers people, process and internal controls; the ASV Scan tests only external-facing systems.
- Compliance Support is a project with annual revalidation; ASV scans recur four times a year and every scan must pass.
Need more than one service?
Describe your full project and the AI Compliance Advisor will combine the right services into a clear plan.