After a lot of research and testing, I’m pleased to ControlScan services for PCI compliance. They have a process in place to assist you in obtaining and maintaining PCI compliance for your website.

There are two main steps to obtain PCI compliance.

1.  A questionnaire about your business and card-handing practices.

2.  A remote scan of your server, to determine any vulnerabilities that might exist.

This service is $249 / year, which allows you to scan your site quarterly.   My recommendation to my ecommerce clients at this point it this:  Try the service for 1 year – fill out the questions, and scan your server.  This will help you button up your site, and when your merchant account provider asks you about PCI compliance, you are ahead of the game.  So far PCI enforcement seems pretty lax, but that could change any time.  Having some PCI documentation under your belt will also help you if there are any security issues.

The site is here – read about the included services, and sign up using the buy now button on the left.