There are many reasons why your scan could be failing. First, be sure that you’ve listed the correct URL to be scanned. This URL should be the one where customers enter in card data, not necessarily just your home page. For example, the difference between “shop.mybusiness.com” instead of “www.mybusiness.com”. If you’re sure you listed the appropriate URL, it is likely that SecurityMetrics has detected some critical holes in your site’s security. When this happen, a report is produced that details the issues and how to correct them.
Posted in: PCI Compliance