An ASV is an organization with a set of security services and tools (“ASV scan solution”) to conduct external vulnerability scanning services to validate adherence with the external scanning requirements of PCI DSS Requirement 11.2.2. The scanning vendor’s ASV scan solution is tested and approved by PCI SSC before an ASV is added to PCI SSC’s List of Approved Scanning Vendors.
Please note, the PCI Security Standards Council maintains a structured process for security solution providers to become Approved Scanning Vendors (ASVs), as well as to be re-approved each year.
Approval and re-approval indicate only that the applicable ASV has successfully met all PCI Security Standards Council requirements to perform PCI data security scanning, and the PCI Security Standards Council does not endorse these security solution providers or their business processes or practices.
Although the PCI Security Standards Council strives to ensure that the list of Approved Scanning Vendors linked to this page is current, the list is updated frequently and the PCI Security Standards Council cannot guarantee that the list is current at all times. Accordingly, each time a client engages an ASV, the client is advised to check this list on a regular basis to ensure that its ASV has successfully maintained its status as an Approved Scanning Vendor.
* 'In Remediation' status indicates a determination by the Council, after an Approved Scanning Vendor organization has violated applicable ASV Qualification Requirements. This status may result from failure to comply with any number of applicable ASV Qualification Requirements. ASVs are notified when remediation is required, and ASVs listed as "In Remediation" may be actively seeking to remedy this status. For more about remediation please review the Remediation section of the Qualification Requirements for Approved Scanning Vendors.
For information about the status of a particular ASV, please contact that ASV.