PCIDSS Dashboard

npx add-mcp 'https://pcidss-dashboard.com/mcp'

PCI ComplianceWithout the Chaos

PCI Compliance Is Hard.It Shouldn't Be.

80% of compliance work is organizational overhead—not technical implementation. Most teams struggle with:

Spreadsheet Hell

Tracking 300+ requirements across multiple Excel files leads to version chaos, missed updates, and audit nightmares.

Evidence Scattered Everywhere

Screenshots in email, policies in SharePoint, scan reports on someone's desktop. Finding proof during audits is a fire drill.

Enterprise Tools Are Overkill

GRC platforms cost $50K+ per year and take months to implement. You need something that works now.

Features

Everything You Need to Stay Compliant

Built by compliance professionals who've been through dozens of PCI assessments.

Requirement Tracking

All 12 PCI DSS requirements and 300+ sub-requirements with status tracking, owner assignment, and deadlines.

Evidence Repository

Centralized evidence storage with AI auto-categorization. Upload a document and AI maps it to relevant PCI DSS domains and sub-requirements.

AI Compliance Analysis

AI pre-screens your evidence before your assessor does — flags gaps, scores confidence levels, and checks whether policies address the intent of each requirement.

SAQ Wizard & PDF Export

Guided wizards for SAQ-A through SAQ-D walk through requirements in plain English and generate signed PDF documents.

Asset & Diagram Analysis

Track all CDE systems, network segments, and data flows. Upload network diagrams and AI extracts every component automatically.

Vulnerability Management

Log vulnerabilities with CVE/CVSS scores, schedule scans, track remediation, and document penetration test results.

Security Controls

Manage firewalls and rules, IDS/IPS systems, anti-malware solutions, access controls, and physical security logs.

Policy & Change Management

Store policies with version tracking, manage acknowledgements, and run change requests through approval workflows.

Multi-Client Support

Manage multiple clients and certifications with role-based access. Tiered dashboards adapt to each client's SAQ type.

No Vendor Lock-In

Download your entire certification as a structured ZIP file — each PCI DSS Requirement in its own folder with all evidence neatly organised inside, ready for your QSA to open and assess. We don't hold you or your QSA a hostage.

AWS Cloud Auto-Discovery

Connect your AWS account with a read-only IAM role and the platform discovers your EC2, RDS, S3, VPCs, security groups, and IAM automatically — then collects evidence and flags vulnerabilities on a daily sync, no manual data entry.

Google Drive Integration

Link existing policies and evidence straight from Google Drive instead of re-uploading duplicates. We watch for renames, deletions, and permission changes so nothing goes stale without you knowing.

New: AI Assistant Access

Ask Claude About Your Compliance

Connect Claude to your PCIDSS Dashboard and ask questions in plain English. It reads your requirements, evidence and recurring tasks, and answers with links straight to the proof.

• Answer the assessor's question. "Show me you ran your scans every quarter last year" becomes one question: dates, who did it, any gaps, and the completion report ready to hand over.
• Know what's left before your assessment. Readiness by requirement, overdue tasks, open findings and answers that still need evidence.
• Read-only and private. Claude sees only what your account can see, can't change anything, and never receives your evidence files. Disconnect it any time.
• Connect in a minute. Add PCIDSS Dashboard as a connector in Claude and sign in with your usual account. Developers can use Claude Code, Cursor or VS Code with an access key.

Included with SAQ D, SAQ D Service Provider and Enterprise (ROC) plans, and for partner accounts. Built on the Model Context Protocol (MCP), the open standard for connecting AI assistants to your data.

Did we run our quarterly vulnerability scans every quarter this year?

Yes, 4 of 4 quarters are covered:

• 14 Jan, 9 Apr, 8 Jul and 6 Oct, all marked completed
• Each run has the scan report attached
• No gaps longer than a quarter The next scan is due 5 Jan. For your assessor: Completion history (PDF)

How It Works

Get Audit-Ready in 3 Steps

No complex implementation. No consultants required. Start in minutes.

1

Import Your Data

Import from AWS, add systems manually or let us know which integration you need. Import policies, procedures from google cloud.

2

Track & Document

Upload evidence and the pcidss-dashboard auto-categorizes it. Run compliance checks with confidence scoring, then complete the SAQ wizard.

3

Stay Audit-Ready

Automated reminders for recurring tasks. Generate SAQ PDFs and export evidence packages for your QSA.

Free to Complete. Pay Only When You're Ready to Download.

Every wizard is free to fill out. Choose the assessment that matches your business.

SAQ-A Compliance Report

For e-commerce or mail/telephone-order merchants who fully outsource payment processing

€99 one-time

• Guided wizard through all 27 SAQ-A requirements
• Fully completed SAQ-A with your answers filled in
• Digital signature embedded — submission-ready
• PCI DSS v4.0.1 compliant format
• Official invoice emailed automatically
• Re-download anytime from your account

SAQ B-IP Compliance Report

For merchants using standalone, IP-connected point-of-sale terminals with no cardholder data storage

€99 one-time

• Guided wizard through all 50 SAQ B-IP requirements
• Fully completed SAQ B-IP with your answers filled in
• Digital signature embedded — submission-ready
• PCI DSS v4.0.1 compliant format
• Official invoice emailed automatically
• Re-download anytime from your account

SAQ A-EP Compliance Report

For e-commerce merchants whose website affects the security of a hosted or redirected payment page

€699 one-time

• Guided wizard through all 139 SAQ A-EP requirements — covering e-commerce payment pages hosted or redirected from your website
• Fully completed SAQ A-EP with your answers filled in
• Digital signature embedded — submission-ready
• PCI DSS v4.0.1 compliant format
• Official invoice emailed automatically
• Re-download anytime from your account

About Us

Two Decades of Payment Security Excellence

With over 20 years of hands-on experience building payment card infrastructure and ensuring PCI DSS compliance, we understand the complexities organizations face in protecting cardholder data.

Our founders have been at the forefront of payment security since the early days of e-commerce—designing secure payment gateways, implementing tokenization systems, and guiding organizations through countless PCI DSS assessments.

We built this platform because we lived the challenges ourselves. After years of managing compliance with spreadsheets and scattered documentation, we knew there had to be a better way. Every feature in PCI DSS Dashboard comes from real-world experience.

20+

Years in Payment Security

v4.0.1

PCI DSS Compliant

300+

Requirements Tracked

24/7

Access to Your Data

Our Core Expertise

Payment Infrastructure

Secure payment gateway design, tokenization systems, and end-to-end encryption implementations.

PCI DSS Compliance

Gap assessments, remediation planning, and ongoing compliance management for all SAQ types and ROC.

Security Architecture

Network segmentation, access control design, and security monitoring for cardholder data environments.