Yes, you must use a Qualified Security Assessor (QSA) that has been approved by the PCI Security Standards Council (PCI SSC). A list of approved Qualified Data Security Companies can be found on the PCI SSC's website at www.pcisecuritystandards.org. Your Scanning vendor is both a certified QSA and an Approved Scan Vendor (ASV).

If you do not understand the details of your SAQ, Host 99 can assist you with the SAQ for a small fee. Please Contact Us if your not a Host 99 customer for more information. If you are a Host 99 Customer please use our Customer Sales contact form "Here"