Overview#

The PCI DSS Compliance Checker is a security assessment tool designed to evaluate whether an organization meets the Payment Card Industry Data Security Standard (PCI DSS) requirements. This API accepts detailed information about your payment processing infrastructure, security controls, and operational practices, then performs a thorough compliance analysis across all 12 PCI DSS requirements.

Organizations handling payment card data—whether through e-commerce platforms, physical point-of-sale systems, mobile payments, or third-party processors—must maintain PCI DSS compliance to protect cardholder data and avoid regulatory penalties. This tool streamlines the self-assessment process by analyzing your security posture across network security, access controls, encryption, vulnerability management, and security policies.

The Compliance Checker is ideal for merchants, payment processors, service providers, security teams, and compliance officers who need to understand their PCI DSS compliance status, identify gaps in their security controls, and prioritize remediation efforts.

Usage#

Sample Request:

json

{
  "organization_name": "TechRetail Inc.",
  "business_type": "E-commerce Retailer",
  "company_size": "Medium (50-500 employees)",
  "transaction_volume": "1-5 million transactions/year",
  "card_brands": ["Visa", "Mastercard", "American Express"],
  "processing_methods": ["Online", "Mail Order/Telephone"],
  "stores_card_data": true,
  "transmits_card_data": true,
  "processes_card_data": true,
  "ecommerce_website": true,
  "physical_locations_pos": false,
  "mobile_payments": true,
  "third_party_processors": true,
  "cloud_services": true,
  "firewall_installed": true,
  "default_passwords_changed": true,
  "network_segmentation": true,
  "card_data_protected": true,
  "transmission_encrypted": true,
  "cryptographic_keys": true,
  "antivirus_installed": true,
  "secure_systems_development": true,
  "vulnerability_management": true,
  "access_controls_by_role": true,
  "unique_user_ids": true,
  "multifactor_auth": true,
  "physical_access_restricted": true,
  "media_securely_handled": true,
  "access_logged": true,
  "logs_regularly_reviewed": true,
  "log_integrity_protected": true,
  "vulnerability_scans": true,
  "penetration_testing": true,
  "network_monitoring": true,
  "security_policy_maintained": true,
  "security_awareness_program": true,
  "incident_response_plan": true,
  "service_provider_monitoring": true
}

Sample Response:

json

{
  "compliance_status": "Compliant",
  "overall_score": 98,
  "assessment_date": "2025-01-20",
  "organization": "TechRetail Inc.",
  "requirement_summary": {
    "requirement_1": {
      "name": "Install and maintain firewall configuration",
      "status": "Compliant",
      "score": 100
    },
    "requirement_2": {
      "name": "Do not use vendor-supplied defaults",
      "status": "Compliant",
      "score": 100
    },
    "requirement_3": {
      "name": "Protect stored cardholder data",
      "status": "Compliant",
      "score": 100
    },
    "requirement_4": {
      "name": "Encrypt transmission of cardholder data",
      "status": "Compliant",
      "score": 100
    },
    "requirement_5": {
      "name": "Protect systems against malware",
      "status": "Compliant",
      "score": 100
    },
    "requirement_6": {
      "name": "Develop and maintain secure systems",
      "status": "Compliant",
      "score": 100
    },
    "requirement_7": {
      "name": "Implement strong access control measures",
      "status": "Compliant",
      "score": 95
    },
    "requirement_8": {
      "name": "Identify users and restrict access",
      "status": "Compliant",
      "score": 100
    },
    "requirement_9": {
      "name": "Restrict physical access to cardholder data",
      "status": "Compliant",
      "score": 100
    },
    "requirement_10": {
      "name": "Track and monitor access to cardholder data",
      "status": "Compliant",
      "score": 95
    },
    "requirement_11": {
      "name": "Test security systems regularly",
      "status": "Compliant",
      "score": 100
    },
    "requirement_12": {
      "name": "Maintain information security policy",
      "status": "Compliant",
      "score": 100
    }
  },
  "recommendations": [
    "Continue conducting regular vulnerability scans and penetration tests.",
    "Maintain robust service provider monitoring programs.",
    "Schedule quarterly access control audits to ensure least privilege is maintained."
  ],
  "next_steps": "Schedule annual compliance validation assessment."
}

Endpoints#

POST /pci-compliance#

Description: Performs a PCI DSS compliance assessment based on the organization's payment processing environment and security controls.

Method: POST

Path: /pci-compliance

Request Body:

The endpoint accepts a JSON object with the following properties:

ParameterTypeRequiredDescriptionorganization_namestringYesName of the organization undergoing assessmentbusiness_typestringYesType of business (e.g., E-commerce Retailer, Payment Processor, Service Provider)company_sizestringYesSize of the organization (e.g., Small, Medium, Large, Enterprise)transaction_volumestringYesAnnual transaction volume (e.g., <1M, 1-5M, 5-10M, >10M transactions/year)card_brandsarray[string]YesList of payment card brands processed (e.g., Visa, Mastercard, American Express, Discover)processing_methodsarray[string]YesPayment processing methods (e.g., Online, Mail Order/Telephone, In-Person, Mobile)stores_card_databooleanYesWhether organization stores cardholder datatransmits_card_databooleanYesWhether organization transmits cardholder dataprocesses_card_databooleanYesWhether organization processes cardholder dataecommerce_websitebooleanYesWhether organization operates an e-commerce websitephysical_locations_posbooleanYesWhether organization operates physical POS locationsmobile_paymentsbooleanYesWhether organization accepts mobile paymentsthird_party_processorsbooleanYesWhether organization uses third-party payment processorscloud_servicesbooleanYesWhether organization uses cloud services for payment processingfirewall_installedbooleanYesWhether firewall is installed and configureddefault_passwords_changedbooleanYesWhether all default passwords have been changednetwork_segmentationbooleanYesWhether cardholder data environment is segmented from public networkcard_data_protectedbooleanYesWhether stored cardholder data is encryptedtransmission_encryptedbooleanYesWhether cardholder data transmission is encryptedcryptographic_keysbooleanYesWhether cryptographic keys are securely managedantivirus_installedbooleanYesWhether antivirus/malware protection is installedsecure_systems_developmentbooleanYesWhether secure development practices are followedvulnerability_managementbooleanYesWhether vulnerability management processes are in placeaccess_controls_by_rolebooleanYesWhether access controls are based on business need and roleunique_user_idsbooleanYesWhether all users have unique user IDsmultifactor_authbooleanYesWhether multi-factor authentication is implementedphysical_access_restrictedbooleanYesWhether physical access to cardholder data facilities is restrictedmedia_securely_handledbooleanYesWhether media containing cardholder data is securely handledaccess_loggedbooleanYesWhether access to cardholder data is loggedlogs_regularly_reviewedbooleanYesWhether logs are regularly reviewedlog_integrity_protectedbooleanYesWhether log integrity is protectedvulnerability_scansbooleanYesWhether regular vulnerability scans are performedpenetration_testingbooleanYesWhether penetration testing is conducted annuallynetwork_monitoringbooleanYesWhether network is monitored for unauthorized accesssecurity_policy_maintainedbooleanYesWhether information security policy is maintained and updatedsecurity_awareness_programbooleanYesWhether security awareness training program is in placeincident_response_planbooleanYesWhether incident response plan is documented and testedservice_provider_monitoringbooleanYesWhether service providers are monitored for compliance

Response (200 OK):

Returns a JSON object containing the compliance assessment results, including:

• compliance_status: Overall compliance status (Compliant, Non-Compliant, Partial)
• overall_score: Numeric compliance score (0-100)
• assessment_date: Date of assessment
• organization: Organization name from request
• requirement_summary: Detailed assessment for each of the 12 PCI DSS requirements with status and individual scores
• recommendations: List of prioritized remediation recommendations
• next_steps: Guidance on follow-up actions

Response (422 Validation Error):

Returns validation errors if required fields are missing or invalid:

json

{
  "detail": [
    {
      "loc": ["body", "organization_name"],
      "msg": "field required",
      "type": "value_error.missing"
    }
  ]
}

Pricing#

PlanCalls/DayCalls/MonthPriceFree550FreeDeveloper20500$39/moProfessional2005,000$99/moEnterprise100,0001,000,000$299/mo

About#

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

• toolweb.in
• portal.toolweb.in
• hub.toolweb.in
• toolweb.in/openclaw/
• rapidapi.com/user/mkrishna477
• youtube.com/@toolweb-009

References#

• Kong Route: https://api.mkkpro.com/compliance/pci-dss-checker
• API Docs: https://api.mkkpro.com:8038/docs