Got a PCI notice, fee, or failed scan? Send it to us — we'll tell you what it actually requires.
Free triage by a PCI professional (CISSP · PCIP). Redact anything sensitive — we'll reply within one business day with what your notice appears to require, and your options.
Get my free triageSound familiar?
You've called the processor, Googled it, asked your developer. You're still stuck on one of these:
“Nobody can tell me which SAQ I’m supposed to fill out.”
“Am I already paying for a scanner somewhere in these fees?”
“The portal wants ‘scan targets’ — what do I even enter?”
“The scan failed. Who actually fixes this — me? my developer? my host?”
“I have the documents. What do I upload, and where?”
“There’s a monthly fee on my statement until this is cleared. How do I make it stop?”
If any of these is you, send it over. Triage is free, and you'll get a real answer — not a sales call.
How it works
1. Send it
The notice, statement line, or failed scan report. Redacted is fine — we tell you what to black out, and we never need card data.
2. We read it
A PCI professional (not software) reviews what your processor is actually asking for, against how your checkout is built.
3. You get your triage
Within 1 business day: what it appears to require, what's probably already covered in what you pay, and your options — DIY, your developer, or us.
CISSP · PCIP · PCI Level 1 experience at scale
We work inside whatever portal your processor gave you — SecurityMetrics, VikingCloud, Trustwave, others. We're not selling you another scanner.
The self-assessment and attestation are yours to make. Our job is making sure you're not making them blind.
Get your free triage
Two quick steps. Only your email and what happened are required.
Quick questions
Is this really free?
Yes. Triage is free. If fixing it takes real work, we'll quote a fixed-price sprint — you'll know the price before anything starts.
Is my data safe?
Redact anything sensitive before sending — we show you what to black out, and we never need card data. Uploaded files are stored encrypted and auto-delete after 30 days.
My deadline is this week.
Say so in the form — short-deadline submissions get read first.
What if it turns out to be simple?
Then we'll tell you it's simple, and what to click. Some triages end with “you don't need us.”