For Businesses · Pumps · ATMs · Checkout · Bars & Venues
A PCI inspection logbook and skimmer detection — check every card reader, and keep proof of every inspection.
Every plan includes the inspection logbook — proof each card reader was checked, the who / what / when / where PCI Requirements 9.5.1.x and 10 ask for, plus the state-law layer where your state names a duty. Your team runs the checks with a quick walk-around and logs each one from a phone. For what happens between those checks, Automated adds around-the-clock skimmer detection on the computers or Wi-Fi you already have. Works on pumps, ATMs, checkout lanes, and the readers at bars, restaurants, and events.
PCI DSS v4.0.1
Everything your assessor asks to see — built in, no add-on.
Every plan includes a simple logbook for checking your card readers, plus a permanent record of who checked what and when — one that can’t be changed later. It helps you document and meet the PCI rules for protecting readers (Requirement 9.5) and keeping records (10.2 and 10.3) — the evidence an assessor or your bank asks to see.
9.5.1.1
Device inventory
A list of every card reader you run — including spares — and a record of everywhere each one has been.
9.5.1.2
Tamper checks
A quick checklist for each reader, with photos and a pass, fail, or “looks suspicious” result. Once saved, it stays put.
9.5.1.2.1
How often to check
You decide how often to check, based on your own risk — a quick guide helps you pick.
9.5.1.3
Staff training
Short staff lessons in 22 languages (or load your own), with easy tracking of who’s trained and who’s due.
10.2 / 10.3
A record that can’t change
A permanent record of who did what and when — it can’t be edited later, and you can export it in one tap.
Requirement 9.5.1.3 · Staff training
Staff training in 22 languages, built in for Requirement 9.5.1.3.
Your team takes short lessons right in the app, or you load your own, and SkimGuard keeps track of who is trained, who is due, and how each location is doing. When your assessor asks, export a clean record in a tap. It helps you document PCI’s training rule (9.5.1.3); it is not a PCI certification on its own. Most owners pay a separate vendor to do this — here it is free, and for a lot of them that alone covers the cost of SkimGuard.
See the PCI inspection logbookSee staff training
Free tools · no account, no email
Start documenting today — every one of these is free to use and download:
SkimGuard helps you document and meet these controls; it is not itself an attestation or certification of PCI compliance, and does not cover logging across your whole cardholder-data environment. Your overall compliance is assessed by your QSA or acquirer.
State skimmer laws
The same system, in the shape your state’s law takes.
As of September 2026, twenty-three states attach a skimmer-related duty to fuel dispensers — four through their own statutes (California, Florida, Michigan, and Texas) and nineteen more through the NIST Handbook 44 UR.4.2 standard they have adopted; the live list is at state-skimmer-laws. SkimGuard resolves the applicable rule for each location. UR.4.2 stacks independently of a state’s own measure list, so meeting one is not meeting the other, and preemption never suppresses it; whether a setup satisfies it is the weights-and-measures authority’s determination, not ours, and SkimGuard holds no UR.4.2 approval. When we say we have verified a state, we mean we read its rule against the enacted text at the state’s own legislature or code publisher and recorded the citation and the date we checked — not that a lawyer reviewed it.
You determine what applies to you; your QSA, your acquirer, or your weights-and-measures authority determines whether you have met it. SkimGuard performs the work you configure and keeps the record of it. It issues no finding of compliance and files nothing on anyone’s behalf, and every submission is an affirmative act by a named person.
Florida — the statute names the measure
Fla. Stat. § 525.07(10)(a)6 names, as one measure, a daily inspection that opens the panels, uses an application that detects a wireless skimmer, and documents it. You supply the daily cadence and the panel opening; SkimGuard supplies the detection application, an append-only panel_opened record, and the documentation. The statute treats a retailer that maintains two measures as compliant with the section — a statutory deeming we report, not a certification we issue. Florida gas-pump skimmer law →
Texas — a reporting duty, and a gap we name
16 TAC § 97.31 lists six specific measures with no application option, no inspection option, and no catch-all, so SkimGuard does not help you meet that measures mandate. What it does carry in Texas is the discovery-and-reporting duty — the deadline clock and the recipient resolved by device kind, TDLR for fuel dispensers and the FCIC for ATMs, POS and kiosks — plus the assembled packet. We name this gap on purpose, because a page that admits a limit is more credible than one that checkmarks everything, and an integrator will check. Texas skimmer reporting →
California — the duty isn’t the merchant’s
The reporting duty sits on the registered service agency, not the merchant, and runs to the county sealer. Same machine, different duty-holder, different clock. SkimGuard opens the incident with that deadline and that office and assembles the packet; the service agency makes the notification, and nothing files itself. California service-agent reporting →
Your inspection programme
Configure the work. Never the record.
The real question an operator with a binder or an SOP asks is whether this fits how they already work. It does, and that is the safest thing on this page, because it makes no legal claim at all. But a record you can configure away is not evidence. The rigid parts are what make the flexible parts worth buying. It all runs on the backend and the web portal, live today and independent of the app stores.
What you configure
An inspection template per device kind — a dispenser, an ATM, a checkout lane and a tableside reader don’t need the same checklist. Cadence per item rather than per device, each item carrying its own written § 9.5.1.2.1 risk justification. Your own training content or the built-in 22 languages. Team scoping to your org chart. SSO, webhook alerting, and scheduled records delivery as add-ons.
What you can’t configure — on purpose
Marking an item not-applicable is an audited, version-pinned assertion with no delete path. The audit trail is append-only. Enforcement posture has a floor and no “off.” And posture only ever dials the reminders about measures — it never reaches a statutory reporting duty, its deadline, its recipient, the quarantine, or the removal gate.
Interior comparison
A wireless scan only sees skimmers that transmit — a clear scan means nothing was detected, not that a reader is safe. On an open panel, SkimGuard compares the interior against a stored reference photo and points at what changed. The image diff is an assist that highlights a difference, never a verdict — your inspector judges. A changed interior opens the incident path, catching a physical or wired skimmer the wireless scan cannot.
Compliance overview
One dashboard rolls every location up as on track, needs attention, or overdue — factual wording, never “compliant” or “certified.” A standard obligation such as UR.4.2 is surfaced, never scored — adequacy is not ours to grade.
Panel-opening log
Every time a panel is opened — during an inspection or a standalone service visit — SkimGuard writes an append-only, timestamped record from the device-inventory page. That is the documentation a daily-inspection measure asks for, kept where an assessor can export it.
Why you need your own eyes on this
A skimmer takes seconds to fit, and the reader keeps working normally.
Nobody at the counter sees it, and by the time the chargebacks arrive the customer’s trust is already gone. SkimGuard puts the same skimmer detection our app already runs to work for your locations. It saves each result as proof and shows it on the public map your customers can already check.
It works on any reader you run — checkout lanes and self-checkout, ATMs, fuel pumps, and the readers at a bar, a restaurant table, a stadium stand, or a festival cart. Each shape has its own threat: in a store it's an overlay or a swapped terminal across many lanes (see grocery & convenience); in hospitality the reader moves between shifts and hands, and people pay fast and distracted (see restaurants & bars); at a fuel dispenser it's a device inside the cabinet. The serial re-read, the reference-photo comparison, and the logbook cover all of them.
The immediate warning
The moment we spot something at one of your readers, you hear about it — by email, on your dashboard, or a push to your phone. You can act on it before the next customer swipes. It comes in as a pending alert your team can confirm or wave off.
The public proof
Your locations get a SkimGuard badge on the public safety map — it reads “SkimGuard Protected · scanned <relative time>” (for example, “scanned 2 hours ago”): a date-only freshness signal, never a per-check or per-inspection log. Customers who look before they pull in can see you take card safety seriously.
The team workflow
Add your team, and everyone sees just what they should: a store manager sees their store, a regional manager sees their region, head office sees it all. And every action they take is logged.
The record that survives the audit
Every check your team makes is saved for good: which reader, who checked it, when, what they found, and the photos. When your assessor asks, export it as a CSV or PDF — nothing to dig out of a binder or piece together from memory.
Every phone running our app is already scanning. SkimGuard for Business turns all of that into your dashboard, your alerts, and your proof.
Setup
From signup to your first verified scan in under five minutes.
You can set it up yourself for anywhere from a single location up to 499. At 500 or more — or when you need terms self-serve can’t model — our team takes over with a quote, invoicing, and a service agreement.
Step 1
Claim your locations
Sign in, name your business, and pick your locations from the map. We make sure no one else has already claimed the same address.
Step 2
Start the 14-day trial
Choose monthly or annual, set how many locations, and confirm. We need a card to start, but you’re not charged for 14 days. After that you pay only for the locations you’re using, and you can add more later without going through checkout again.
Step 3
Add your readers and run your first check
Add your readers — all at once with the free inventory template, or one at a time. Decide how often to check them — the schedule wizard helps you pick. From then on, your team logs each check right from their phone, and it’s all saved automatically. Everyday scans from our app keep your public badge up to date in the background — and if something looks off, you get an alert before it ever shows on the map.
Prefer no card? Start a card-free trial in the app.
An owner can create a business account right in the SkimGuard Business app and start a 14-day trial with no card — then your team records inspections and checks terminals from their phone. (Setting up on the web at b2b.skimguard.io collects a card instead, though nothing is charged for 14 days.)
Handheld plan · Pricing
One price per location. No setup fees. No contracts.
This is the Handheld plan: your team checks readers using the SkimGuard app. One price per location covers your alerts, the team dashboard, your spot on the map, and all the everyday scans at your locations. Want it running on its own instead? See the Automated plan below. Need a custom quote? Talk to sales.
| Band | Monthly | Annual |
|---|---|---|
| Locations 1–5 | $125/mo | $1,250/yr |
| Locations 6–25 | $110/mo | $1,100/yr |
| Locations 26–99 | $98/mo | $980/yr |
| Locations 100–499 | $85/mo | $850/yr |
| 500+ locations | Contact sales | Contact sales |
All rates per location, per period. Switch between monthly and annual above. Both columns stay visible, so you can compare the savings at every band.
Every plan includes: the PCI inspection logbook — your reader list, tamper checks with photos, how often you check, and a permanent record that can’t be changed, exportable as CSV or PDF to help you document and meet PCI 9.5 and 10 · staff training in 22 languages (or your own), tracking who’s trained and who’s due, with an export for your assessor · everyday scans from our app whenever a phone passes your locations · a chance to review an alert before it goes public · a verified badge on the SkimGuard safety map · team invites where each person sees only what they should · kiosk & TV dashboards · promo links that bring customers into the app.
Every plan starts with a 14-day free trial. Start card-free in the SkimGuard Business app, or set up on the web — web setup collects a card, but nothing is charged until the trial ends. Cancel anytime from the billing portal.
Automated plan
Or let it run itself. Go Automated.
Handheld counts on your team remembering to do a walk-around. Automated runs that skimmer scanning for you, around the clock — so there’s no daily walk to remember. Run it two ways, for the same price: a small program on the computers you already use (Windows, Mac, or Linux), or the Wi-Fi you already have. Up to 25 readers per location, one price per location, and Handheld is included free on every Automated location.
One thing Automated doesn’t do for you: the hands-on tamper inspection PCI asks for (9.5.1.2). Someone still has to physically check each reader on your schedule — Automated adds around-the-clock skimmer detection on top of that, it doesn’t replace it. The logbook that records those checks is included in every plan, so your team just logs each one from their phone.
SkimGuard Automated · per location
Always-on, whole-location coverage
Around-the-clock scanning of every reader at a location — through your computers, your Wi-Fi, or both. One price per location, up to 25 readers.
graduated per location — down to $150/mo at 100+ · annual = 2 months free · up to 25 terminals per location
- Always-on scanning, 24/7 — no daily walk to remember
- Runs via desktop agents on lane computers (Windows · Linux · Mac) OR your existing Wi-Fi access points — your choice, same price
- Up to 25 payment terminals — no per-lane or per-AP charge
- SkimGuard Handheld included for the same location at no extra cost
- Same operator alerts, team dashboard, and map verification as Handheld
| Band | Monthly | Annual |
|---|---|---|
| Locations 1–5 | $250/mo | $2,500/yr |
| Locations 6–25 | $210/mo | $2,100/yr |
| Locations 26–99 | $175/mo | $1,750/yr |
| Locations 100–499 | $150/mo | $1,500/yr |
| 500+ locations | Contact sales | Contact sales |
All rates per location, per period. Up to 25 payment terminals per location — no per-lane or per-AP charge within that. Annual is the same rate for ten months, so two months are free. Example: a 12-lane store on Automated is one location at $250/mo ($2,500/yr) — every lane covered, nothing extra. SkimGuard requires no POS integration — no certification cycle, no engineering work on your side, nothing to test against your stack.
| Handheld asks. Automated never forgets. | Handheld | Automated |
|---|---|---|
| Who runs it | Your staff, every day | Runs itself, around the clock |
| Runs on | Android phone | Desktop agents or your existing Wi-Fi APs |
| Daily effort | A manual walk of every terminal | None |
| Coverage proof | Logged when someone scans | Continuous, evidence-logged |
| Best for | Pumps, ATMs, bars, small-format | Staffed lanes & sites on business Wi-Fi |
Two ways to automate
Desktop agents, your Wi-Fi, or both.
Automated is one tier at one price — you just pick how it scans. Both options are always-on, cover the whole location, and cost exactly the same: there's no separate "network" plan and no per-AP charge.
Desktop agents
A lightweight SkimGuard agent installs on your lane computers — Windows, Linux, or Mac — and scans continuously on its own. Best where you have staffed checkout lanes with a computer at each one.
Your existing Wi-Fi
The access points you already run do the scanning — no new hardware. Works with Cisco Meraki, Juniper Mist, HPE Aruba, Ruckus, and Cisco Catalyst (via Cisco Spaces). Best where business Wi-Fi already blankets the floor.
Same Automated plan, same price per location, up to 25 readers either way — and you can mix both across your sites. See all network integrations →
Enterprise
Need terms self-serve can't cover? Talk to sales.
Self-serve scales all the way to 499 locations. At 500 locations or more, or when you need terms self-serve can't model, we step in: custom volume pricing, invoicing on net-30 or net-60, a single SSO-friendly tenant for your whole chain, and a named contact at SkimGuard.
- Custom per-location pricing for chains, franchises, and operators of attended fuel sites
- Invoicing on net-30 or net-60 — Stripe Checkout or wire
- Our quote desk turns custom requests around in one business day
- Reseller and sales-partner program available
Talk to sales
Tell us how many locations, what kind, and where. We'll come back with a quote inside one business day.
Request a quoteor email directly
sales@skimguard.ioCampus & fleet
Terminals that aren't organized by location?
Per-location pricing is a poor fit when a single property holds many terminals, or when terminals are spread across many small unattended sites. Those are priced per deployed terminal instead — on their own pages:
- Campus — many terminals concentrated on one property: theme parks, universities, stadiums, resorts, convention centers.
- Fleet — terminals dispersed across many unattended sites: municipal parking, unattended fuel, ATM estates.
Both price per deployed terminal, and both start at a contracted baseline of 250 terminals — a smaller estate belongs on the per-location plans above. Talk to us about your terminal count. See Campus or Fleet, or email sales@skimguard.io.
FAQ
Questions operators ask.
What's the difference between SkimGuard Handheld and Automated?
Does Automated cover more than one checkout lane?
How does SkimGuard detect a skimmer?
We're a bar, restaurant, or event venue — does SkimGuard apply to us?
How much does SkimGuard for Business cost?
How does Automated scan — desktop agents or my Wi-Fi?
I only have one or two lanes — which should I use?
Does Automated include Handheld, and what does it run on?
Is there a free trial, and am I locked into a contract?
Do I need to integrate SkimGuard with Clover or my POS?
Does SkimGuard help with PCI DSS 9.5 and 10?
What does PCI DSS 9.5.1.1 ask you to record about each payment terminal?
How often do payment terminals need to be inspected, and who decides?
Do spare terminals have to be in the device inventory?
Talk to sales
Tell us about your operation.
Single-location operators can skip this and start the trial directly. Multi-location, franchise, or unattended-fleet operators — tell us a bit and we'll come back with a plan inside one business day.