Defining PCI DSS scan policy in Invicti Standard
In Invicti Standard, you can define a scan policy to perform a PCI Checks test, which scans exclusively for vulnerabilities classified under PCI DSS. Invicti Standard has a PCI scan profile which is not an informal PCI scan and exists to let you know about certain PCI gaps you have.
Additionally, you can generate a PCI DSS Compliance Report, which provides a detailed list of detected vulnerabilities that fall under PCI classifications.
How to define the PCI Scan Policy in Invicti Standard
- In Invicti Standard, in the Home tab, select New.
- The Start a New Website or New Service Scan dialog is displayed.
- In the Target Website or Web Service URL field, enter the URL of the website you want to scan.
- In the Scan Policy drop-down, select PCI Checks.
- Complete the remaining fields as required.
- Select Start Scan on the bottom of the page.
When the scan is complete, you will receive a notification.
Exporting informal PCI DSS Compliance report
Invicti Standard gives you the option to export the compliance reports either as PDF or HTML files. For instructions on how to export the report, refer to our Exporting PCI DSS Compliance report in Invicti Standard.
Understanding the informal PCI DSS Compliance report
The compliance report consists of several sections. For detailed description of each, refer to our Understanding the informal PCI DSS Compliance report.