Store devices kept PCI-ready for a regional retail co-operative
A UK regional retail co-operative deployed Rebasoft, delivered by its PCI compliance partner, to keep track of the handhelds and point-of-sale terminals in its stores, check them for vulnerabilities and close findings automatically once devices are patched.
- 4 years
- renewed every year since 2023
- MDM
- store devices imported from SOTI MobiControl
- Auto-close
- vulnerabilities fixed by Android patches cleared
- Monthly
- certificate health reporting
The challenge
- Card payments in every store mean PCI compliance obligations across hundreds of devices.
- Android handhelds and point-of-sale terminals managed in an MDM, not on the corporate network view.
- Vulnerability lists full of findings already fixed by monthly Android security patches.
Our approach
- Rebasoft delivered and run by the co-operative’s PCI compliance partner.
- Device inventory, serial numbers and Android security patch levels imported from SOTI MobiControl.
- A policy that matches each device’s patch level to Android security bulletins and closes vulnerabilities already fixed.
Built out with the partner
Store devices in scope
Handhelds and point-of-sale terminals in the same inventory as the network.
Accurate vulnerability lists
Findings closed automatically when the device’s patch date is past the fix.
Exploited threats first
Policies highlighting vulnerabilities known to be exploited.
Certificate health
Monthly reporting on certificates before they expire or fail.
Evidence for PCI
Asset and vulnerability data ready for the compliance team.
Partner-delivered
Run as part of the partner’s PCI service, renewed every year.
The outcome: store devices tracked and vulnerability lists that reflect reality, giving the co-operative’s PCI programme facts instead of noise.
Why it matters for retailers
PCI-ready
Payment devices inventoried and assessed continuously.
Less noise
Patched vulnerabilities close themselves.
A long-term partner
Features built with the partner, renewed every year.