Quick answer SAQ A is for merchants who have fully outsourced card capture. Every element of the payment page comes directly from your provider, and card data never reaches a system you control. Around 31 requirements. SAQ A-EP is for e-commerce merchants whose own website affects the payment page but
Quick answer PCI DSS compliance costs between about $500 and $200,000 a year, and the single biggest factor is not your company size. It is how your checkout is built. A merchant whose payment page is a hosted iframe from Stripe or Adyen files SAQ A and pays a
Disclosure PM3 is an open framework, published by SecurityWall and free to use, cite, adapt and build on. No licence, no certification body, no fee. Consultancies are welcome to score clients with it, GRC teams to benchmark against it, and other vendors to map their products to its levels. We
Disclosure before you read SecurityWall builds SLASH. This page compares our product to a competitor, so read it with that in mind. We have put "Where PlexTrac wins" before "Where SLASH wins", named seven specific areas where PlexTrac is the better choice, and told you plainly
Disclosure before you read SecurityWall builds SLASH, one of the platforms below. We have reviewed it on the same criteria as everything else and named the three situations where you should buy something other than SLASH. Every price is sourced and dated, including the gaps. Quick answer Most lists of
Seven questions buyers ask right before booking Every answer below is direct and self contained. Ranges are market rates from published sources, listed under each answer. SecurityWall quotes fixed scope in a call rather than posting a price list, so treat these as budget planning bands, not quotes. 01What does
QUICK ANSWER · BOTH FRAMEWORKS AUDIT EVIDENCE · 2026 Does ISO 27001 require a penetration test? Not by name. ISO/IEC 27001:2022 is risk based, but Annex A 8.8 (management of technical vulnerabilities) and Annex A 8.29 (security testing in development and acceptance) are the applicable controls, and ISO/
× Running MCP servers in production? 40 plus CVEs in 2026 · Are you exposed? Schedule a Meeting → QUICK ANSWER · MCP SECURITY 40 PLUS CVES · 2026 The Model Context Protocol (MCP), released by Anthropic in November 2024, lets AI agents call external tools, APIs, files, and services through a standardised interface. Between
× August 2026 high risk AI deadline? Article 9 security testing · Ready? Schedule a Meeting → QUICK ANSWER · EU AI ACT AUG 2 2026 DEADLINE EU AI Act Regulation 2024/1689 Article 9 requires providers of high risk AI systems to establish, implement, document, and maintain a risk management system throughout the
× Raising? Investors ask about security. Pentest for VC diligence · 2 to 3 weeks Schedule a Meeting → QUICK ANSWER · FUNDRAISING SECURITY DEAL BLOCKER · 2026 A penetration test before fundraising is a scoped security assessment run in the weeks before a Series A, B, or growth round to produce the evidence a
× Scan a few times a year? Skip the $4,790 licence · SME friendly quote Schedule a Cost Comparison Call → QUICK ANSWER · COST COMPARISON TCO ANALYSIS · 2026 Tenable Nessus Professional costs $4,790 per year for a single scanner with unlimited target IPs (Tenable published pricing, verified July 2026). Real total
× Small fleet, need real audit? Router, switch, firewall config audit · SME friendly Schedule a Scoping Meeting → QUICK ANSWER · NETWORK AUDIT PRICING TRANSPARENCY · 2026 Titania Nipper is a network configuration audit tool used by 30+ US federal agencies and 800+ organisations globally to assess firewalls, routers, and switches against CIS Benchmarks,