: You will have to do a scan if you use PayPal Pro, they spring it on you a few months down the track, though don't store CC data, you'll have to have a fort-knox setup. And be able to

@Steve110

You will have to do a scan if you use PayPal Pro, they spring it on you a few months down the track, though don't store CC data, you'll have to have a fort-knox setup. And be able to prove it.

Just going through this PCI DSS compliance process ourselves. Its not too difficult - certainly not 6 months - all you have to do is identify which errors you are patched for, and dispute any scan findings.

This is a basic vulnerability scan from Trust Wave, its not particularly authoritative, and, to my eye, it seems like a revenue share arrangement between them and PayPal. It doesn't really require much "hardening" rather just puts some hoops up to be jumped through.

Vote Up Vote Down

Login to post a comment!