PCI Compliance

Tenable for PCI Compliance

Tenable offers a range of solutions for PCI compliance, from basic PCI audits and PCI Approved Scanning Vendor (ASV) validation to continuous monitoring and centralized intelligence.

PCI Audits

Integrate PCI audits into your vulnerability scanning with the Nessus® vulnerability scanner. Use Nessus to run PCI audit reports, generating PCI pass/fail results, to prepare for a Payment Card Industry Data Security Standard (PCI DSS) assessment.

PCI Validation and Certification

Tenable's Nessus Perimeter Service including the Tenable PCI Scanning Service is an on-demand, hosted service which audits Internet-facing IP addresses for network and web application vulnerabilities and validates PCI ASV compliance. Tenable Network Security is recognized as an ASV by the PCI Security Standards Council and can validate your company's compliance to PCI DSS requirements. 

Continuous Monitoring and Centralized Intelligence

Using Nessus and the Nessus Perimeter Service together with Tenable SecurityCenter, the Tenable Passive Vulnerability Scanner (PVS), and the Tenable Log Correlation Engine (LCE) creates a Unified Security Monitoring (USM) environment that offers continuous monitoring and centralized intelligence. 

• Continuously monitor and discover new devices on the network which may create unmanaged PCI exposure
• Secure log aggregation and storage, plus log normalization and search for compliance monitoring and analysis
• Identify the PCI-relevant assets and limit PCI scans to those assets, reducing time and resources required for regular scans
• Create a single view of risk exposure which includes Internet-facing web application vulnerabilities

Read more about how Tenable's USM platform can help monitor the 12 PCI Requirements.

---

The PCI Security Standards Council Approved Scanning Vendor logo is a trademark or service mark of The PCI Security Standards Council in the United States and in other countries.