Who it applies to
Anyone who stores, processes or transmits cardholder data.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Version
- 4.0.1
- Requirements
- 12 principal requirements
- Validated by
- QSA assessment or self-assessment questionnaire
What PCI DSS 4.0 asks of you
- 01Network security controls
- 02Secure configurations
- 03Protect stored account data
- 04Vulnerability management
- 05Access control and authentication
- 06Logging and monitoring
How orta covers PCI DSS 4.0
89 PCI DSS 4.0 requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Policies drafted from a conversation
orta interviews your team by voice or text, asks only what PCI DSS 4.0 needs, and drafts the policy set from the answers.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
What feeds it
- Continuous complianceA passing check counts in every framework that needs it.
- Cloud postureYour cloud accounts, checked. Your data, left where it is.
- Runtime detectionCatch the attack while it is happening.
- Vulnerability managementFewer false alarms, real fixes.
