On-Demand Vulnerability Scanning

Sign up for a FREE 14 Day Trial More »

For validating compliance, the PCI DSS requires Level 2-4 organizations to complete a self assessment questionnaire and successfully pass quarterly vulnerability scans of all Internet accessible systems (including those not directly related to cardholder data processing).

As an approved PCI scanning vendor, Halock is certified to help merchants and service providers assess and achieve continuous compliance with the PCI DSS, facilitating the completion of your validation requirements.

Delivered as an on demand Web application with no hardware or software to be installed and maintained, Halock PCI is the most effective, lowest cost, and most user friendly tool for turnkey PCI compliance testing, reporting and submission. Halock PCI draws upon its highly accurate and certified scanning infrastructure to scan and protect your networks from security vulnerabilities that make attacks against networks possible.

Using Halock’s PCI On-Demand Vulnerability Scanning service, users can easily complete and submit the PCI self-assessment questionnaire online, and perform unlimited pre-defined PCI scans on all external systems to identify and resolve network and system vulnerabilities as required by the PCI standard.

Generally speaking, the scope of vulnerability scanning should include, at a minimum, all systems that are accessible via the Internet, whether for public use or for authenticated employees only.

It is highly recommended that perimeter systems be rescanned whenever changes are made to any Internet-accessible system or device. The Halock PCI scanning service allows for unlimited scanning of all licensed IP addresses for a full year, allowing the opportunity to rescan systems whenever necessary at no additional cost.

What are Hybrid Services Firms?

Hybrid Services Firms are the new breed of professional services organizations. As security partners, the Hybrid Services Firm can perform strategy and governace counseling as well as implement technical solutions. Only Hybrid Services Firms are capable of delivering Purpose Driven Security