Leverage the expertise of a vendor with over 60 ecommerce clients to:


Proactively prevent breaches


Consolidate scans and vendors


Ensure remediation and results

Recent high profile security exploits have demonstrated the difficulty involved in protecting data online. In particular, ecommerce is a popular target for malicious activity. Retailers cannot afford to react to security incidents; they need to be proactive. Unfortunately, many don’t have the internal expertise or resources needed to manage the security of their web stores.

As an ecommerce specialist Tenzing has over a decade of experience managing online stores on platforms like Oracle Commerce, Hybris and Magento. To help merchants proactively address security concerns, Tenzing has leveraged their ecommerce and security expertise to build a vulnerability management program specifically designed to mitigate risks for online merchants as well as address PCI compliance requirements.

Do all of this without any capital expenditure or additional head count.

Tenzing’s Vulnerability Management Program is an operational expenditure that can be customized to meet the changing needs of a growing business. The program can be deployed quickly, without any infrastructure changes or hardware installation.

The program includes;

Vulnerability Scanning
Internal and web application scans as well as external PCI scans by an Approved Scanning Vendor (ASV).
Penetration Testing
Asset discovery and web crawler scans of targeted and connected systems as well as manual attempts to exploit vulnerabilities.
Comprehensive Reports
A ranked report of vulnerabilities, a remediation advisory and plan and an ASV scanning attestation (technical, management and PCI-SSC).
Remediation Support
Management of ticketing and case tracking for critical vulnerabilities including scheduled reviews and progress updates.

Tenzing’s vulnerability management program allows merchants to reduce risk and meet PCI requirements 11 and 6.1 with:

A team of security experts to analyze results and create remediation plans.

A custom scanning schedule designed to regularly check for vulnerabilities.

Integration into the Tenzing support network to ensure remediation.

Managed by a team of certified security experts, Tenzings Vulnerability Management Program is specifically designed for online merchants.

Program details include;

  • Multiple scans per year
  • PCI compliance scanning – Internal, External and ASV
  • ASV test scans for remediation
  • Technical support provided by dedicated IT Security professionals
  • Scheduling, configuration and management of scans
  • Escalation of critical vulnerabilities
  • Secure results storage for reporting history, trending, and baseline
  • Reporting for PCI compliance requirements
  • ASV Attestation of Scan