How the agent connects and collects data
Lightweight, read-only agent installs in your CDE. It never handles card numbers or CVVs.
Feature breakdown
From scanning to evidence export, each component maps to a PCI DSS control.
-
Scanning Engine
Runs hourly checks across all 12 PCI DSS 4.0 requirement families. Each check maps to its exact DSS sub-requirement for audit-traceable findings. Set faster intervals for high-change environments.
-
Evidence Classification
Artifacts are automatically tagged by requirement family, date, and environment. Evidence packages follow QSA expectations rather than ticket-system structure.
-
SAQ Wizard
Auto-populates Self-Assessment Questionnaires for SAQ-A through SAQ-D using your CDE scope and scan results. Updates as your environment changes and supports all current PCI DSS 4.0 SAQ types.
-
Alert Routing
Send drift alerts to the team responsible for the affected control. Route by requirement family, environment, or severity, with email, Slack, and PagerDuty integrations.
-
Integration API
Use the REST API to pull scan results, evidence packages, and posture scores into dashboards and SIEM tools. JSON responses and webhooks support real-time event delivery.
Fits your existing stack
Connect cloud environments, network infrastructure, and payment platforms through read-only integrations. No traffic inspection or card data access.
Add more integrations through the REST API. See API Reference
See your compliance posture in real time
Connect your first CDE environment in under 30 minutes. Read docs for integration details.