VikingCloud vs Clone Systems
PCI ASV coverage, buying direct, support and published pricing compared.
VikingCloud is the company behind the ControlScan and SecureTrust PCI programs that processors enroll merchants into. This page compares those programs with buying PCI ASV scanning directly from Clone Systems.
Where VikingCloud is strong
- A listed ASV: VikingCloud, Inc.
- The largest processor-channel PCI program in the market, used by acquirers, processors and payment facilitators.
- SecureTrust offers 24x7 support; VikingCloud separately advertises support in 17 languages for partnership programs.
- The SecureTrust PCI Manager small-business bundle at $40 a month includes an SAQ, scanning, a compliance app and a seal.
- QSA and PFI services and penetration testing.
Where Clone Systems is different
- A listed PCI ASV since 2007 under its own certificate. See the PCI SSC list.
- Published prices with online checkout and same-day scanning, no sales call.
- Unlimited rescans until you pass.
- Exceptions and false positives reviewed within 24 hours.
- 24/7 support by email and phone.
- No processor in the middle: you buy from the ASV and the attestation is yours to give any bank.
- Penetration testing sold online at a published price with same-day start.
Feature comparison
| Capability | Clone Systems | VikingCloud |
|---|---|---|
| Listed PCI ASV under its own certificate | Yes (certificate 4262-01) | Yes (VikingCloud, Inc.) |
| Buy a scan online in minutes | Yes, same-day scanning | SecureTrust bundle online; enterprise quote-only |
| Published per-IP scan price | Yes | Not published per IP; bundle $40/month |
| Unlimited rescans | Unlimited until you pass | On-demand and one-click |
| Exception review time | Within 24 hours | Not published |
| Support hours and channels | 24/7 email and phone | 24x7 SecureTrust support; partnership support advertised in 17 languages |
| Sold direct to merchants vs through processors | Direct to merchants | Mainly processors; often auto-enrolled at boarding |
| SAQ tool | Yes, included | Yes |
| Attestation of Scan Compliance | Yes, after passing | Yes |
| Trust seal | Yes, free with scanning | Yes (Assurance Card) |
| Penetration testing with a published price | Yes, automated and managed testing | Yes, quoted |
| Breach warranty | No | Terms apply; amount not published |
| QSA audits | No; works alongside your QSA | Yes |
Published pricing, side by side
| Module | Clone Systems | VikingCloud |
|---|---|---|
| PCI ASV scan, 1 IP | $185/yr | SecureTrust bundle $40/month |
| PCI ASV scan, 10 IPs | $625/yr | Not published |
| PCI ASV scan, 25 IPs | $1,575/yr | Not published |
| Automated external penetration test | From $1,995 | Quoted |
| Support | Included 24/7 | Included |
Checked on Nov 4 2026 against each vendor's public pages and the PCI SSC list. Tell us if something has changed.
SecureTrust advertises $40/month for the small-business bundle, not a published per-IP scan price. Confirm its included target allowance. The 17-language claim applies to VikingCloud partnership programs.
Who should choose which
Choose VikingCloud if your processor runs its PCI program on it and you want to stay inside that portal for the SAQ, scan and reporting.
Choose Clone Systems if you were auto-enrolled and would rather buy the scan yourself at a published price, scan today, keep rescans unlimited, get exceptions answered in 24 hours by the ASV, and own an attestation you can upload to any processor portal that accepts outside vendors.
PCI ASV scanning: how the process compares
- Buying. VikingCloud: SecureTrust bundle online; enterprise quote-only. Clone Systems sells PCI ASV scanning online with same-day portal access and scanning.
- Attestation turnaround. Both listed ASVs provide an Attestation of Scan Compliance after passing. Clone Systems issues it automatically after each passing scan; no separate VikingCloud attestation turnaround is published in the sources linked here.
- Reviews and exceptions. VikingCloud: Not published. Clone Systems reviews exceptions and false positives within 24 hours, with decisions attached to future scans.
- Rescans. VikingCloud: On-demand and one-click. Clone Systems includes unlimited rescans until you pass on every plan.
Switching from VikingCloud to Clone Systems
Processor programs vary: at least one documents that merchants can upload a certificate from any PCI vendor, others give no option; ask yours in writing; watch for the monthly non-compliance fee, which some processors keep charging until the SAQ is completed in their portal, so complete the SAQ there even if you scan elsewhere; keep the program active until your first Clone Systems attestation is in hand.
PCI DSS requires a passing external scan from a listed ASV every 90 days; it does not require any particular vendor, and the Council's own ASV guide tells merchants to compare several. Whether your processor waives its PCI program fee when you bring your own attestation is processor-specific: some document an opt-out, some do not. Ask your processor in writing, then run both for one quarter if you want the overlap. Read the Council's ASV guide.
Use code SWITCH20 for 20% off your first Clone Systems scanning order
VikingCloud and any product names are trademarks of their owners. Clone Systems is not affiliated with VikingCloud. Details were checked against public documentation and the PCI SSC list on Nov 4 2026. Tell us if something has changed.