SecurityMetrics PANscan®

Identify unencrypted payment data at your business to get PCI compliant.

An employee working on card data discovery

Get PCI compliant with PCI requirement 3

With an integrated support system, video tutorials, and 24/7 award-winning technical support, you will be able to accurately and efficiently locate unencrypted credit card data residing on your business network.                        

Compare plans

PANscan
Lite
PANscan
Basic
PANscan
Advanced
Total number of card data found
Files containing card data
Light on system resources
Immediate summary results
Fast Scans (1-3 GB/min)
Tuned to reduce false positives
Unlimited scanning (per machine)
Technical support
View card type
View track data
View file path to payment card data
Navigation to cardholder data
Mark files as false positives
Specify which drives to scan
Save current results
Clear current results
Exclude image files
Exclude executable files
Online scanning
Offline scanning (optional)
Exclude specific file types
Exclude specific file directories
Scan for specific file types
Scan specific directories
Preserve last access dates
Export text report
Check for spaces/dashes in card numbers
Linux support
Mac support

How it works

Card data discovery simplified

A recent SecurityMetrics study found that 88% of businesses store unencrypted Primary Account Numbers (PANs) on their network. Storing unencrypted information creates liability for you and less work for hackers.

Fortunately, SecurityMetrics PANscan runs light on your systems and makes it easy to find out if your organization is storing unencrypted payment card data.

Find card data

SecurityMetrics PANscan locates unencrypted payment card data on your devices so that you can securely delete or encrypt it. PANscan identifies primary account numbers and magnetic stripe track data on computer systems, hard drives, and attached storage devices.

PANscan software or services provided by SecurityMetrics may be protected by any or all of the following patents and other pending applications:

  • U.S. Patent No. 10,679,218
  • U.S. Patent No. 10,417,283
  • U.S. Patent No. 8,616,443
  • U.S. Patent No. 8,608,063

Reduce your risk with data discovery

Once you have identified the unencrypted payment card data on your devices, you can securely delete or encrypt it. Then patch systems or processes that cause you to store this data. You can also rescan as many times as you would like to ensure that your organization is maintaining a secure data environment.

Running PANscan gives your organization the confidence you’re properly handling card data and not inadvertently storing unencrypted payment data.      

Secure your PCI data

Complying with each PCI requirement can be time-consuming and complicated. Requirement 3 of the PCI Data Security Standard requires that organizations secure cardholder data.

Using PANscan saves you time and simplifies the process of identifying and securing unencrypted card data so you can confidently validate compliance.        

Identifying and secure unencrypted card data so you can confidently validate compliance.        

Start scanning your network for unencrypted payment cards

Request A Quote

Resources

The following are related resources that we have prepared for you. Find more answers to your questions in our Learning Center.

Why choose SecurityMetrics?

Get fully-supported PCI compliance

Learn to get PCI compliant without the confusion–even if you're new to PCI.

If your business accepts, stores, or transmits card data, PCI DSS compliance validation is required by card brands such as Visa, MasterCard and Discover.

editor_choice
Award-winning PCI support
Get help with a pre-onsite gap analysis, onsite assessment, remediation assistance, to a delivered PCI Report on Compliance.
sync_saved_locally
Tools to simplify compliance
Get tools to simplify  the compliance process including: scanning, penetration testing, card data discovery, security policies, and security training.
groups
Partner with a full-service vendor
We are one of only a few vendors worldwide that hold credentials for all aspects of PCI compliance.
sell
Straightforward pricing
Your PCI scope is evaluated based on your needs, avoiding unnecessary add-on charges.

Recognition for Outstanding Work

SecurityMetrics has worked hard over the years to provide outstanding products and services. Here are some of the awards the team has won.

The Golden Bridge Award 2020 Gold logo
Global Infosec Award Winner 2024 Logo
Cybersecurity Excellence Award Winner 2023 Logo

20+ years of experience

QSA | PFI | ASV | P2PE | SSF | SLC | 3DS | QPA | PCIP

PCI Qualified Security Assessor logo
HITRUST Authorized CSF Assessor logo
CISSP logo
HCISPP logo
CISA logo

See how we've helped our clients succeed

When you succeed, we succeed. That's why we pay such close attention to detail and provide award-winning support. Let's work together!

TESTIMONIALS

The relevance of ensuring proper ecommerce website security and protecting card holder data continues to be paramount for our organization, and we could not manage this process better without the reporting tools and excellent technical expertise provided by SecurityMetrics.

Jason Drake
Premiere Sports Travel

SecurityMetrics is an integral part of the team in our PCI program. We depend on the assessors to make sure that we stay on the compliance track. They do it with developing relationships across campus, discussing upcoming projects or application changes, and being available to us for consulting. They are knowledgeable, helpful and help us keep the campus engaged by their friendly demeanors.

Robbyn Lennon
University of Arizona

We have been customers of SecurityMetrics for about eight years. We are so impressed with the patient and professional way that their staff treats customers. They do not hurry, seem tired, act annoyed or too busy to work with their customers. Every person I spoke to was great!

Naomi Christman
The ProImmune Co, LLC

SecurityMetrics is the most retail friendly solution. At the small business level, frequently the person that has to interface with the tool is an owner or someone who has financial responsibility, but they may not necessary be technically savvy with using online tools. We believe SecurityMetrics meets that need better than anyone else we've seen.

Steve Methvin
Bozzutos

SecurityMetrics' Pen Testing has definitely helped us improve our network security in ways I could have never imagined. You just don't know what you don't know. I am absolutely confident in their team's abilities and my experience has led me trust them implicitly as a security partner. Their depth of understanding is impressive, and their professionalism is unmatched.

Morgan Leppink
Internet Ticketing Systems

We’ve been using SecurityMetrics for our onsite PCI audits for more than 10 years now. We have continued to come back and return to SecurityMetrics due to the value that has been supplied by them. SecurityMetrics has been around long enough now and they’ve been one of the top providers when it comes to PCI compliance, that I know they’re in it for the long haul.

Dawn Martinez
SVP, NewTek Merchant Solutions

Request a Quote for PANscan

PANscan takes the manual work out of identifying unencrypted payment card data on your systems. It also helps you with PCI DSS requirement 3. Talk to a specialist about how PANscan can help your business.

Fill out this form to get a quote.

We strive to fulfill privacy requirements and protect your data.
We want to send you emails containing educational and promotional information. You can unsubscribe at any time. By submitting your personal data, you give us permission to send you emails. We will not share your data with anyone. The SecurityMetrics data retention policy is to keep data for five years after no further activity from you. You have the right to control the data you submit, lodge a complaint to a supervising authority, and to unsubscribe or withdraw consent at any time. You are not required to give us your data. We use marketing automation to match our solutions with your interests. See our privacy policy for more info. If you are unfamiliar with GDPR, you can learn about it on our blog.
Thank you! Your submission has been received!

We'll contact you in 1–2 business days.
Oops! Something went wrong while submitting the form.