AppLabs attains PCI QSA and ASV Certifications

Nov 17, 2009

Continues expansion of its Security Testing  Services through PCI QSA and ASV certification

Philadelphia, Lindon, USA; London, UK; Hyderabad, India:  

AppLabs, the world's largest software testing and quality management company, today announced that it has become certified with the Payment Card Industry (PCI) Security Standards Council (SSC) as a Qualified Security Assessor (QSA) and as an Approved Scanning Vendor (ASV).  These two certifications will allow AppLabs to help credit card merchants reach their PCI compliance objectives.  These services compliment AppLabs' other security offerings:  web application penetration testing, network security assessment, and source code review.

Commenting on the significance of the achievement, Scott Andress, Vice President and Global Head, Alliances and Service Lines, AppLabs said, "This a great step  for AppLabs as we continue to further strengthen our Security Testing Services in support of our overall testing and quality management offerings. We have already started to gain traction in this area and we are excited about the future of this initiative."

A Qualified Security Assessor (QSA) evaluates a credit card merchant's PCI compliance by conducting a thorough on-site evaluation of the merchant's infrastructure with respect to the PCI Data Security Standard (DSS). There are over 200 assessable items in the PCI DSS and each is evaluated and documented during the assessment.

An Approved Scanning Vendor (ASV) provides vulnerability scanning services to credit card merchants as required by the PCI SSC.  Credit card merchants are generally required to have quarterly ASV scans completed of their entire public-facing network.  AppLabs offers this as a self-serve option where the customers can initiate their own scans and receive reports via a portal, and as a professional service where AppLabs runs the scans and provides the reports.