About PCI DSS Companies
PCI DSS Companies is an independent directory of PCI QSA companies, built for the person who has to buy a PCI DSS assessment and doesn’t want to do it blind.
What we do
- Profile real QSA companies — firm facts, planning-range fees, and buyer fit, verified against public materials.
- Publish honest cost and planning guides — every number labeled with its source and date.
- Match buyers with QSA companies — one free quote request reaches the firms that fit your scope.
What we are not
We are not an auditor, not a QSA company, and not a certification body. We don’t perform assessments, sign ROCs, or issue certifications. PCI DSS assessments must be performed by qualified assessors employed by accredited QSA companies.
How we make money
When you request quotes, matched QSA companies may pay us a lead or referral fee. That payment cannot change which firms we list, what our guides say, or which firms we recommend — sponsorship never buys directory ranking, and firms cannot pay for placement, better positioning, or softer profiles.
Corrections
Found a stale fact? Tell us — we check corrections against the firm’s public materials and date material fixes.