Self-assessments and results on PCI Assessments Center are free and online-only. When you need a signed SAQ, an Attestation of Compliance, or a Report on Compliance, a certified QSA takes it from here.
A QSA validates your self-assessment, reviews evidence, and issues the signed SAQ and AoC your acquirer or payment brand requires.
For anything beyond a straight SAQ: QSA-assisted assessments, Level 1 Report on Compliance readiness, and time-boxed remediation sprints.
Ongoing QSA advisory, evidence management, quarterly reviews, and the annual signed SAQ or AoC bundled in one retainer.
A predictable path from your free self-assessment to a signed deliverable — no upsells, no surprises.
Submit an engagement request. We link it to your self-assessment when relevant.
A QSA reviews your environment and confirms scope, timelines and effort.
You receive a fixed-scope statement of work with a firm price and terms.
The QSA executes the engagement and issues the signed SAQ, AoC, or ROC deliverable.
Every QSA engagement is scoped and quoted individually. Complexity, environment size, evidence maturity and geography all affect effort, so we don't publish generic price tags. Submit a request and we'll respond with a written quote after the scoping call.