PCI ASV licence checked at attestation submission
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- Tenable One PCI ASV Licensing: current PCI ASV SKUs are licensed by asset count and checked at the moment of attestation, not continuously; the number of unique IP addresses in the attestation (FQDNs resolved to IPs) is compared with the purchased count, and an attestation over the limit is blocked. Licences are bought at least 7 at a time; PCI Standard allows 12 attestations per year and PCI Enterprise unlimited. (vendor page undated; as published on 2026-09-27)
- Applies when
- Submitting a PCI DSS external scan attestation.
- Applies to
- Tenable One PCI ASV.
- Related metrics
- Related programs