How to:PCI compliant w OpenCart & PayPal Website Payment Pro

Hi all,

Just want to share our learnings from achieving PCI compliance. Knowing all the reading and researching of service providers we've done this may be of value for others in the same situation and can take the stress out of it.

Setup/config:
eCommerce: OpenCart 1.5.4
Payment gateway: PayPal Website Payment Pro
Web host: http://www.panthur.com.au (provides OpenCart via Installatron)
SSL certificate installed
Security service provider: http://www.trust-guard.com (they use Clone Systems which is a certified ASV)
Cost for quarterly IP scanning (cheapest alternative): $8.10US/mth or $87.30/yr with discount code: tgdiscount

Once registered with trust-guard we ran a scan, resulting in a PASS, and sent the result to PayPal as well as a completed SAQ C (self-assessment questionnaire C). The SAQ C is provided from trust-guard.com and will be pre-populated with information. Within a day their PCI compliance department had confirmed us as being PCI compliant.



Regards,
Johan

Hi Johan

Thanks so much for this! Can't believe I didn't see it before. Been reading about PCI compliance the last few days and it is stressful and can't seem to find proper information anywhere.

Just to confirm, is this the scanning service that you used? http://www.trust-guard.com/security-scanned.htm

I found McAfee PCI compliance scan offer for $99/year, which i'm leaning towards only cause the seal will be more recognizable.