System review and analysis
Data flows and the boundaries of the cardholder data environment, architecture, code and configuration security, assessment readiness — before an assessor sees it.
We don't just find what needs fixing — we fix it. Reviews, host integrations, IPS and AZQR, changes to meet PCI DSS and Central Bank requirements.
Data flows and the boundaries of the cardholder data environment, architecture, code and configuration security, assessment readiness — before an assessor sees it.
Host-to-host and terminal integrations: field mapping, reversals and advices, MAC, testing against the acquirer host.
Connecting to the Central Bank's instant payment system over ISO 20022 and to the national QR standard.
Enhancements and new components designed for PCI DSS and Central Bank requirements from day one: as few systems in scope as possible, tokenization, logging.
We prepare and remediate the system, but we don't assess our own work. The assessment is done by an independent QSA — or by you via SAQ, where your acquirer and the card schemes allow it.
That way you get one contractor for preparation and remediation — and an honest check of the result.
We examine the system and the requirements it has to meet.
Scope, timeline and a fixed price.
Code, infrastructure, integrations, testing.
Documentation and knowledge transfer to your team.