TrustedSite vs Clone Systems
PCI ASV coverage, buying direct, support and published pricing compared.
TrustedSite is the trust seal many stores know from its McAfee SECURE days, and its sister brand Halo Security sells the scanning. This page separates the two and compares the PCI ASV scan with buying directly from Clone Systems.
Where TrustedSite / Halo is strong
- A listed ASV: TrustedSite LLC, with Halo Security ASV 2026.
- The most widely installed trust seal in ecommerce, on hundreds of thousands of sites and 30,000+ Shopify stores, with a free tier.
- An attack surface management platform with a free trial, dark web monitoring and integrations including Slack, Jira, ServiceNow and Vanta.
- US-based support and penetration testing from a published starting price.
- The current Halo pricing page publishes platform and manual penetration testing starting prices.
Where Clone Systems is different
- A listed PCI ASV since 2007 under its own certificate. See the PCI SSC list.
- Published prices with online checkout and same-day scanning, no sales call.
- Unlimited rescans until you pass.
- Exceptions and false positives reviewed within 24 hours.
- 24/7 support by email and phone.
- No processor in the middle: you buy from the ASV and the attestation is yours to give any bank.
- Penetration testing sold online at a published price with same-day start.
Feature comparison
| Capability | Clone Systems | TrustedSite |
|---|---|---|
| Listed PCI ASV under its own certificate | Yes (certificate 4262-01) | Yes (TrustedSite LLC; Halo Security ASV 2026) |
| Buy a scan online in minutes | Yes, same-day scanning | Seal online; PCI scan via demo, call or free scan |
| Published per-IP scan price | Yes | Platform add-on or first-year offer; not per IP |
| Unlimited rescans | Unlimited until you pass | Unlimited within subscription |
| Exception review time | Within 24 hours | Not published |
| Support hours and channels | 24/7 email and phone | US-based phone, email and live chat; hours not published |
| Sold direct to merchants vs through processors | Direct to merchants | Direct, sales-led |
| SAQ tool | Yes, included | No |
| Attestation of Scan Compliance | Yes, after passing | Yes |
| Trust seal | Yes, free with scanning | Yes, sold separately from scanning |
| Penetration testing with a published price | Yes, automated and managed testing | Yes, from $3,950 |
| Breach warranty | No | No merchant breach warranty |
| QSA audits | No; works alongside your QSA | No |
Published pricing, side by side
| Module | Clone Systems | TrustedSite |
|---|---|---|
| PCI ASV scan, 1 IP | $185/yr | Platform from $399/month plus $100/month PCI reporting; confirm target allowance |
| PCI ASV scan, 10 IPs | $625/yr | Platform from $399/month plus $100/month PCI reporting; confirm target allowance |
| PCI ASV scan, 25 IPs | $1,575/yr | Platform from $399/month plus $100/month PCI reporting; confirm target allowance |
| Automated external penetration test | From $1,995 | From $3,950 |
| Support | Included 24/7 | Included; hours not published |
Checked on Nov 4 2026 against each vendor's public pages and the PCI SSC list. Tell us if something has changed.
Halo publishes the platform and PCI reporting add-on prices, but the reviewed pages do not confirm a paid-plan target allowance or the supplied $349 first-year offer. Confirm scope, package and renewal terms with Halo.
Who should choose which
Choose TrustedSite / Halo if the trust seal is what you are after, or you want an attack surface management platform with PCI reporting as one output.
Choose Clone Systems if you want the PCI scan itself at a published per-IP price, bought online today, with unlimited rescans, 24-hour exception review, 24/7 support, an SAQ module included, and a free trust seal that comes with the scan rather than a separate subscription.
PCI ASV scanning: how the process compares
- Buying. TrustedSite: Seal online; PCI scan via demo, call or free scan. Clone Systems sells PCI ASV scanning online with same-day portal access and scanning.
- Attestation turnaround. Both listed ASVs provide an Attestation of Scan Compliance after passing. Clone Systems issues it automatically after each passing scan; no separate TrustedSite attestation turnaround is published in the sources linked here.
- Reviews and exceptions. TrustedSite: Not published. Clone Systems reviews exceptions and false positives within 24 hours, with decisions attached to future scans.
- Rescans. TrustedSite: Unlimited within subscription. Clone Systems includes unlimited rescans until you pass on every plan.
Switching from TrustedSite to Clone Systems
Halo itself states a mid-cycle switch from another ASV is fine; your seal subscription and your scan are separate, so you can keep one and move the other; Halo subscriptions auto-renew and are cancelled by emailing support, so cancel before the renewal date; keep the old scan until your first Clone Systems attestation is in hand.
PCI DSS requires a passing external scan from a listed ASV every 90 days; it does not require any particular vendor, and the Council's own ASV guide tells merchants to compare several. Whether your processor waives its PCI program fee when you bring your own attestation is processor-specific: some document an opt-out, some do not. Ask your processor in writing, then run both for one quarter if you want the overlap. Read the Council's ASV guide.
Use code SWITCH20 for 20% off your first Clone Systems scanning order
TrustedSite and any product names are trademarks of their owners. Clone Systems is not affiliated with TrustedSite. Details were checked against public documentation and the PCI SSC list on Nov 4 2026. Tell us if something has changed.