Urgent: Who is my Web Host, please?

[pinkypie]

Bloody Security Metrics again who reckon I am no longer compliant (funny how I was for the last 6 months and renewal is not due!!), want to make sure I've got this form filled out correctly, can you tell me if it is 123reg who I have the site registered with, or Bluepark, please.

I've also got:
Shopping Cart: Bluepark
Co-location: Bluepark

£120 a year and I do not even see any bloody card holder data let alone store it. Don't even see why I should pay anything!!



Thank you

[Rich]

Bluepark is your web host. 123-reg, I would assume, is your domain registrar. Our site passed the SecurityMetrics test only last month, send me an email with the failure report.

[Neil]

Why does the report say you have failed. If you are failing its for a reason. Blue Park should actually fly through the test.

I have found securitymetrics very helpful the 95% of the time. The 5% when they dig their heels in then they don't budge.

When was your scan run, try running it again manually in the day time.
Your web host is blue park. your domain registrar would be 123reg.

[Neil]

Beat me to it Rich!

[pinkypie]

Thank you, I have just checked and rechecked again, there is not even an option on mine for Bluepark on web host, I've got to enter it manually which I thought strange and this is why i thought I would check. Maybe it is because I had 123reg so I am changing that now. I'll run it again and post back here. It has passed the last 2 times but I got this email tonight:


Hi C,

Thank you for using SecurityMetrics for your PCI DSS compliance.

After reviewing our records, we noticed you are not currently PCI compliant.

Some acquiring banks or processors charge their merchants a PCI non-compliance fee. In order to avoid PCI non-compliance fees (if applicable) we recommend that you become compliant as soon as possible.

You need to complete the online questionnaire with a "Passing" status.

To complete the PCI self-assessment questionnaire (SAQ), please log into your account at https://www.securitymetrics.com and click on the take/retake questionnaire link.

For more information regarding the SAQs, please see:

https://www.pcisecuritystandards.org/saq/index.shtml

[pinkypie]

This is at the top of the screen:

Security Console High-Level Report


Merchant Compliance — Please complete the following:

• Renew your answers to the questionnaire.



Welcome C! You are currently not PCI Compliant
PCI Compliance
Not Compliant

Help Send Report AMEX Reporting
Site Certification
Passing

SecurityMetrics has determined that Lingerie Heaven is COMPLIANT with the PCI scan validation requirement.

Questionnaire (SAQ)
Expired

Type: SAQ C 1.2

Recertify the Questionnaire
Site Certification Subscriptions Table of Contents:
Service Domain Name IP Address Next Run On Expires Last Test PCI Compliance
Quarterly client-82-20-62-60.brnt.adsl.virgin.net 82.20.62.60 2010-08-05 04:00 -0600 2011-02-04 1632074

I had a hoo har with them as I paid online and they then called me and demanded more money. I argued about it (my friend pays £35 a month for her!!) and he said he would call back 'tomorrow' and he never did.

I've redone the questionairre but it is saying the site passes but the questionaire is not compliant and I need to 'renew or buy'.

[Neil]

It is exactly what the wording says, the site has passed the scan as i expected it would.

There is an answer in the questionaire that they do not like.

[pinkypie]

OH MY, is this why I have had no orders today? I've had people calling and emailing to say they cannot get the payments to go through so they have given up trying. Could this be why?

I've now redone the questionairre, nothing has changed and now it has passed. Who the bloody hell knows!!??

Bloody Security Metrics!!!!!!

Does anyone else use anyone else?

[pinkypie]

Thanks Neil, I went to the next page and everything was ticked green. I did change the host to bluepark but it has been 123reg and nothing changed with that. I checked the box, ticked nothing had changed and went to the other screen and it has passed.

Can it stop orders going through at all if you are not compliant? Does it come up on the screen to alert people?

[Rich]

Nothing on your site would be affected by SecurityMetrics, it can't interfere with your orders. It's just a requirement of your bank / merchant account provider.

I'm glad you got it sorted.

[pinkypie]

I did Richard, thanks for clearing that up for me, I did wonder if it would affect anything.

I've calmed down from my rant not too.

[Neil]

It won't be the reason you have not had any orders. The pop up window only refers to the scan i believe.

[Terry]

Security metrics charge me £75 annually