- Short answer
- Clone Systems charged $185 a year for one IP or domain, Sectigo $286 for up to 5 IPs or domains (Oct 20, 2026); ask your acquirer and Shopify first.
- Units
- Sectigo's plan card counts IPs or domains, as Clone Systems' plans do
- Reseller price
- SectigoStore, a licensed reseller run by The SSL Store, sold Sectigo Standard for $95.59 a year on October 20, 2026
- Shopify's scan
- Shopify posts a quarterly ASV attestation; no Shopify page we checked says whether your domain is in it
- Who asks
- A merchant bank or payment brand may ask for PCI evidence; ask your acquirer about ASV partners
How much do ASV scan plans cost?
On October 20, 2026, Clone Systems' smallest plan cost $185 a year and Sectigo Standard $286. Clone's plan covers one IP address or domain and Sectigo's up to 5 IPs or domains, so compare by what you need scanned.
| Plan | What it covers | Vendor price, one year |
|---|---|---|
| Sectigo HackerGuardian Standard | Up to 5 IPs or domains | $286 |
| Sectigo HackerGuardian Enterprise | Up to 20 IPs or domains | $459 |
| Clone Systems Starter | 1 IP address or domain | $185 |
| Clone Systems Standard | Up to 10 IPs or domains | $625 |
| Clone Systems Advanced | Up to 25 IPs or domains | $1,575 |
Read October 20, 2026; Sectigo's prices load in the browser.
SectigoStore, which The SSL Store runs under licence from Sectigo, sold Standard for $95.59 and Enterprise for $327.78 for one year that day: a reseller's price, not Sectigo's.
Does a Shopify store need its own ASV scan?
PCI SSC says SAQ A under PCI DSS v4.x includes ASV scans of merchant e-commerce webpages even where payment processing is fully outsourced. Our PCI guide covers whose bill that is on Shopify.
Shopify says its PCI certification covers your store, the store's shopping cart and web hosting; that sentence does not mention scans. Shopify posts a quarterly ASV attestation, but no Shopify page we checked on October 20, 2026 (its Compliance Reports, help and PCI pages) says whether your domain is in that scan.
The ASV Resource Guide says it is essential to confirm with your hosting third-party service provider (TPSP) who is responsible for ASV scans; for a storefront Shopify hosts, that provider is Shopify. If Shopify's scans leave your website out, the guide says to coordinate with your hosting TPSP on getting it scanned at least once every three months.
Who asks for the scan?
A merchant bank or payment brand may ask for evidence of PCI DSS compliance, the ASV Resource Guide notes; ask your acquirer about ASV partnerships and contact several ASVs.
This page was written by AI. Separate AI agents that did not write it check its figures and claims against official sources and test its links and interactive tools. A human editor sets the site's editorial direction, topics and rules and checks that pages are complete and display correctly, but does not check their facts or edit their text. Details may change — always confirm critical data at shopify.com.
Editorial Policy