Free to complete. $24.99 for the signed report.
Answer your Self-Assessment Questionnaire in the browser — all nine SAQ types, verbatim PCI DSS v4.0.1 requirements, progress saved as you go. Pay once when you want the dated, requirement-by-requirement PDF. No account. No subscription.
The SAQ workbook your acquirer sends was built for printing, not for finishing.
Spreadsheet workbooks fall out of sync the day they are signed. Generic compliance suites want a subscription and an onboarding call before you can answer a single requirement. Most merchants just need the questionnaire, the right subset of requirements, and a clean report at the end.
Three steps. One payment, only if you want it.
Two numbers. Zero, and $24.99.
All nine SAQ types. Every requirement, verbatim. Progress saved in your browser.
Start freeDated, requirement-by-requirement report from your answers. Emailed + re-downloadable. No subscription. Launch price — normally $49.
Finish & unlockNeed a full workspace — evidence, team review, ASV tracking, more frameworks? Sign in to the app (free tier) or see platform pricing.
Questions merchants actually ask
Is the wizard really free?
Yes. Answering all questions for any of the nine SAQ types costs nothing and needs no card. You pay only if you want the signed PDF report at the end — $24.99 (launch price, normally $49), one time, no subscription.
What do I get for the $24.99?
A dated, requirement-by-requirement PDF report generated from your answers: compliance summary, every requirement with your response, and cross-references to the official PCI SSC AOC so you can transfer answers one-to-one. It is emailed to you and re-downloadable.
Can I get the PDF without paying?
No — the report is generated only after Stripe confirms payment. Your answers stay saved in your browser, so you can come back and pay later without redoing anything.
Do I need an account?
No account is needed for the wizard. If you want a full workspace — evidence storage, team review, ASV scan tracking, multiple frameworks — sign in to the SentinelPanda app, where the same SAQ workflow runs with a free tier.
Which SAQ types are covered?
All nine: A, A-EP, B, B-IP, C, C-VT, P2PE, D-Merchant, and D-Service Provider — each with the verbatim PCI DSS v4.0.1 requirement text.
Is this the official PCI SSC attestation?
No. The report is evidence of your self-assessment walkthrough, formatted to map one-to-one onto the official SAQ/AOC documents your acquirer requires. The official templates remain free at pcisecuritystandards.org.