Free PCI Security Scan

[Matt]

Well again it is all grey. But if you come across the new requirements for Level 1-4 as you are catching up on the new rules, it would certainly make for some good posting.

[kublaken]

with this statement:

"PCI states that a machine that holds, transmits, or stores sensitive data must be owned by a single entity, and that entity must only grant access to sensitive cardholder data on a "need to know" basis."

Is a VPS account for an e-com client needing to be PCI compliant good enough to pass the compliancy test?

also, could an e-com client be pci compliant in a shared web hosting environment?

Thanks,
Ken