get_pricing
ServerScan pricing
Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing of networks and web applications, read live from the store, with what each plan includes and the refund terms.
无需输入参数。
do_i_need_an_asv_scan
Does this merchant need quarterly ASV scans?
Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.
输入参数saq_type必填
check_payment_page
Free payment page check
Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.
输入参数url必填
start_order
Get a ServerScan signup link
Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test, of a network or of web applications, it returns the page to request a quote from.
输入参数termdomainproduct必填include_monitoring
search_guides
Search ServerScan guides
Searches ServerScan's published guides on PCI DSS requirements, ASV scanning, scan failures, payment page monitoring and penetration testing. Returns up to five matching guides with a short excerpt and a link each. Use it to answer a PCI question from our own pages, then cite the link.
输入参数query必填
fix_failed_scan
Fix a failed PCI ASV scan
Explains a failed PCI ASV scan finding and how to fix it, for the ten most common causes: certificates, old TLS, unpatched software, open ports, default credentials, version banners, missing headers, insecure remote access, DNS and mail, and injection flaws. Pass the finding text from the scan report, or an issue name, or neither to list all ten.
输入参数issuefinding