About
What PCI and DSS is
PCI and DSS is an independent quote-matching and education site for PCI DSS assessments. We publish source-backed guides on costs, scoping, SAQ selection, and assessor selection, and we match companies with PCI assessment firms.
What we do
- Educate. Cost guides, scoping guides, SAQ explainers, timelines, and a cited pricing report -- all with visible sources. Our methodology page documents exactly how we vet firms and label prices.
- Match. Our quote form connects you with assessors that fit your environment, scope, and timeline. The service is free to you.
What we don't do
- We are not a QSA company and do not perform assessments or sign Reports on Compliance.
- We don't sell certifications, "guaranteed" passing reports, or assessment shortcuts.
- We don't publish paid placement rankings disguised as editorial. Provider listings are presented with factual profiles.
- We don't invent statistics, reviews, or testimonials. Every number on this site has a source you can click.
How we make money
When you request quotes, matched assessment firms may pay us a lead or referral fee. That never affects which firms we list or what our guides say -- firms can't pay to change a profile or buy a recommendation.