InstantSSL, EnterpriseSSL  and EVSSL

Comodo is the 2nd largest high assurance SSL Certification Authority. Comodo is focused on providing next generation, trust and security enabling products, services and solutions. Our innovative products are accompanied with the highest level of support to ensure you can fully unleash the potential of your online business.

Hacker Guardian

Hacker Guardian PCI Scan Compliancy is an on-demand network security auditing service that enables merchants and service providers to comply with the quarterly scanning requirements of the Payment Card Industry (PCI). The service tests externally facing IP addresses with over 14,000 individual vulnerability checks and helps administrators identify security flaws; backdoors; un-patched software and other ways hackers can compromise a network.

Trust Logos

Website visitors demand proof that a site is secure from threats. Until now, site seals were the answer, but they did nothing more than just sit there to be seen. Comodo has taken site seals to the next level by giving them the functionality to prove to visitors that they are, indeed, working…and working hard. Comodo offers three distinct versions of our TrustLogo™; Corner of Trust (COT), HackerGuardian certification for a hacker free website, and a Credit Card TrustLogo™ confirming your trustworthiness to take credit card details online.

What is PCI DSS

PCI DSS is a new standard that is being adopted to fight against identity theft,  As governments around the world step up efforts to protect citizens from devastating effect of credit card theft,   All merchants are being asked to comply with the new PCI DSS standard. 

Twelve Principle Requirements of PCI DSS
PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.

Below are the twelve principle requirements of PCI DSS:

• Build and Maintain a Secure Network
  1.) Install and maintain a firewall configuration to protect cardholder data
  2.) Do not use vendor-supplied defaults for system passwords and other security parameters
  
• Protect Cardholder Data
  3.) Protect stored cardholder data
  4.) Encrypt transmission of cardholder data across open, public networks
  
• Maintain a Vulnerability Management Program
  5.) Use and regularly update anti-virus software
  6.) Develop and maintain secure systems and applications
  
• Implement Strong Access Control Measures
  7.) Restrict access to cardholder data by business need-to-know
  8.) Assign a unique ID to each person with computer access
  9.) Restrict physical access to cardholder data
  
• Regularly Monitor and Test Networks
  10.) Track and monitor all access to network resources and cardholder data
  11.) Regularly test security systems and processes
  
• Maintain an Information Security Policy
  12.) Maintain a policy that addresses information security
  

PCI Security Standards Council
The five major credit card networks (American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International) announced the formation of an independent body to manage the ongoing evolution of the PCI DSS.

The PCI Security Standard Council will:

• Develop and manage the PCI DSS, including maintenance, clarification and revisions of the standard;
  
• Establish and maintain industry-level approval processes for qualified security assessors and network scanning vendors, and routinely evaluate and approve qualified assessors and vendors;
  
• Publish and distribute the PCI DSS, and all related documents associated with Qualified Security Assessor (QSA) and Approved Scanning Vendors (ASV) policies and procedures;
  
• Provide an open forum where all key stakeholders can provide input into the ongoing development of other payment security standards and business practices.
  

• PCI DSS v1.1
  
• PCI DSS Supporting Documentation
  
• List of Qualified Security Assessors (QSA)
  
• List of Approved Scanning Vendors (ASV)
  
• PCI Security Standards Council
  
• VISA Canada AIS Program
  
• VISA Canada AIS Merchant Guide
  
• VISA USA CISP Program
  
• VISA PABP
  
• MasterCard Worldwide SDP Program