topic Re: Security audit or certification? in Partner Programs

Security audit or certification?

golevel — Wed, 17 Aug 2011 22:29:27 GMT

Hello,

We have a client that we've developed an application for that will be going live in a few weeks. They're using Authnet's CIM system for billing clients on a yearly basis.

I've read about Authnet's certifications but I'm not sure what path is best for us. This is a custom solution for only this client, and we'd it to go through some sort of official approval process by Authnet. Is this possible?

Re: Security audit or certification?

golevel — Mon, 22 Aug 2011 15:42:50 GMT

Bump :)

Re: Security audit or certification?

Alex — Wed, 24 Aug 2011 15:34:40 GMT

Happy to hear of this project utilizing CIM. If you have any errors or issues with the integration feel free to post them to the Integration and Testing section of the Developer Community. Unfortunately we don't have a program to validate or certify individual integrations.

Alex

Re: Security audit or certification?

golevel — Wed, 24 Aug 2011 16:05:27 GMT

I'm not having issues or problems, nor am I looking for verification. I'm really more looking for some kind of security audit with regard to the CIM system. I know the PCI compliance is handled by Authnet but it'd be great if someone could run some tests against it.

Re: Security audit or certification?

Alex — Wed, 24 Aug 2011 22:30:37 GMT

We actually don't handle anything related to PCI audits. I recommend taking a look at the PCI Security Council website to learn more.

Re: Security audit or certification?

David — Wed, 14 Sep 2011 18:06:35 GMT

Hi golevel,

Sorry for the late response to this thread, but I wanted to point out that Authorize.Net has a preferred PCI vendor, Trustwave. You can learn more about their offerings here: http://www.authorize.net/trustwave.

Thanks!

David