Nessus Perimeter Service Wins Global Excellence Award for PCI Compliance
Tenable Network Security was recognized at the 10th Annual Info Security Industry’s Global Excellence Awards dinner held last week in San Francisco. Nessus®/ Nessus Perimeter Service™ received a Global Excellence Award in the PCI Compliance Category. The Info Security Products Guide recognizes that over two-thirds of all PCI-Certified Approved Scanning Vendors (ASV) use Nessus, making Nessus the preferred vulnerability scanning solution for those companies that provide compliance validation services.
The Nessus vulnerability scanner boasts a continuously-updated library of more than 60,000 vulnerability and configuration checks, more than 55,000 additional audit and compliance checks, and the support of Tenable’s expert vulnerability research team. Nessus provides the most current, accurate, and complete results to its more than 20,000 customers.
From a Payment Card Industry Data Security Standard (PCI DSS) compliance perspective, companies use Nessus to satisfy their internal network scanning requirements (PCI DSS 11.2.1) and use Perimeter Service (Tenable is also an ASV) to satisfy their external network scanning requirements (PCI DSS 11.2.2).
Nessus/Perimeter Service are each offered in 1-, 2-, or 3-year subscriptions, as well as in various bundled solutions. Both versions allow unlimited scans of unlimited IP addresses/ranges for the licensing period. For PCI ASV quarterly validation, Perimeter Service subscribers may submit up to two PCI scans per calendar quarter for review and approval in order to generate the required attestations and executive/detailed reports for submission to merchant banks and the card brands.
Have any questions about PCI? You can ask them at the PCI Discussion Forum, Straight Talk about PCI, moderated by Tenable’s PCI expert, Jeff Man.
Related Articles
Tenable Capture the Flag 2022: The Results Are In!
June 16, 2022It’s time to crown the winners of this year’s Capture the Flag Event! This event presented a series of security-related challenges in a Jeopardy-style format. Challenges ranged in difficulty and to...
The State of OT Security, a Year Since Colonial Pipeline
May 19, 2022During a recent podcast, Tenable's VP of Operational Technology Marty Edwards discussed the cyber threats faced by critical infrastructure providers and the importance of OT security, topics he'll add...
Test Your Hacking Skills: Join Tenable’s Annual CTF Competition!
April 25, 2022Tenable launches the 2022 Capture the Flag event for the security community, running from June 9-13. Get ready to test your hacking skills, practice new ones and see how you measure up against othe...
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Events
- Nessus
- PCI