Aperia Compliance vs Clone Systems
PCI ASV coverage, buying direct, support and published pricing compared.
If your PCI portal address starts with pciapply.com, your processor's compliance program runs on Aperia. This page explains how that program works and compares it with buying PCI ASV scanning directly from Clone Systems.
Where Aperia Compliance is strong
- A listed ASV: Aperia Compliance, LLC, with two scan products.
- The program behind more than 100 payment providers, including portfolios recently moved from Trustwave, Sysnet and SecurityMetrics.
- An SAQ wizard, policy templates, reminders and portfolio reporting built for processors.
- US-based support in many languages.
- Add-ons for payment page script monitoring and breach protection.
Where Clone Systems is different
- A listed PCI ASV since 2007 under its own certificate. See the PCI SSC list.
- Published prices with online checkout and same-day scanning, no sales call.
- Unlimited rescans until you pass.
- Exceptions and false positives reviewed within 24 hours.
- 24/7 support by email and phone.
- No processor in the middle: you buy from the ASV and the attestation is yours to give any bank.
- Penetration testing sold online at a published price with same-day start.
Feature comparison
| Capability | Clone Systems | Aperia Compliance |
|---|---|---|
| Listed PCI ASV under its own certificate | Yes (certificate 4262-01) | Yes (Aperia Compliance, LLC; two scan products) |
| Buy a scan online in minutes | Yes, same-day scanning | No; processor enrollment only |
| Published per-IP scan price | Yes | Not published; fees set by processor |
| Unlimited rescans | Unlimited until you pass | Scheduled scans at least 72 hours apart; no rescan fee published |
| Exception review time | Within 24 hours | ASV team review in 1 to 2 business days |
| Support hours and channels | 24/7 email and phone | US-based phone, chat and web form; Mon-Fri 7am-7pm Central |
| Sold direct to merchants vs through processors | Direct to merchants | Processors only; merchants auto-enrolled |
| SAQ tool | Yes, included | Yes |
| Attestation of Scan Compliance | Yes, after passing | Yes |
| Trust seal | Yes, free with scanning | Not found |
| Penetration testing with a published price | Yes, automated and managed testing | No |
| Breach warranty | No | Offered through some processor programs |
| QSA audits | No; works alongside your QSA | Not currently claimed |
Published pricing, side by side
| Module | Clone Systems | Aperia Compliance |
|---|---|---|
| PCI ASV scan, 1 IP | $185/yr | Set by your processor; not published by Aperia |
| PCI ASV scan, 10 IPs | $625/yr | Set by your processor; not published by Aperia |
| PCI ASV scan, 25 IPs | $1,575/yr | Set by your processor; not published by Aperia |
| Automated external penetration test | From $1,995 | Not offered |
| Support | Included 24/7 | Weekday hours |
Checked on Nov 4 2026 against each vendor's public pages and the PCI SSC list. Tell us if something has changed.
Aperia fees depend on the processor program. The linked processor support article documents weekday hours for that program, but the supplied 72-hour scan spacing and 1-to-2-business-day review figures were not independently confirmed from an accessible portal guide.
Who should choose which
Stay in the Aperia program if your processor requires it and you want the SAQ, scan and reporting handled in the processor's portal.
Choose Clone Systems if you would rather buy the scan yourself at a published price, scan today, keep rescans unlimited, get exceptions answered within 24 hours by the ASV, reach support 24/7, and hold an attestation you can upload to the processor's portal; several processors on Aperia document accepting an outside attestation and some credit part of the program fee.
PCI ASV scanning: how the process compares
- Buying. Aperia Compliance: No; processor enrollment only. Clone Systems sells PCI ASV scanning online with same-day portal access and scanning.
- Attestation turnaround. Both listed ASVs provide an Attestation of Scan Compliance after passing. Clone Systems issues it automatically after each passing scan; no separate Aperia Compliance attestation turnaround is published in the sources linked here.
- Reviews and exceptions. Aperia Compliance: ASV team review in 1 to 2 business days. Clone Systems reviews exceptions and false positives within 24 hours, with decisions attached to future scans.
- Rescans. Aperia Compliance: Scheduled scans at least 72 hours apart; no rescan fee published. Clone Systems includes unlimited rescans until you pass on every plan.
Switching from Aperia Compliance to Clone Systems
Ask your processor in writing whether it accepts an outside Attestation of Scan Compliance and how the program fee changes (Paya/Nuvei credits part of its fee, Forte accepts third-party documentation by the 20th business day, others give no option); complete the SAQ in the processor portal regardless, since the monthly non-compliance fee is usually tied to the SAQ; keep the program active until your first Clone Systems attestation is in hand.
PCI DSS requires a passing external scan from a listed ASV every 90 days; it does not require any particular vendor, and the Council's own ASV guide tells merchants to compare several. Whether your processor waives its PCI program fee when you bring your own attestation is processor-specific: some document an opt-out, some do not. Ask your processor in writing, then run both for one quarter if you want the overlap. Read the Council's ASV guide.
Use code SWITCH20 for 20% off your first Clone Systems scanning order
Aperia Compliance and any product names are trademarks of their owners. Clone Systems is not affiliated with Aperia Compliance. Details were checked against public documentation and the PCI SSC list on Nov 4 2026. Tell us if something has changed.