PCI DSS-Compliant DevOps & Monitoring Vendors
DevOps & Monitoring vendors that hold PCI DSS certification
Datadog
17/32Cloud monitoring and analytics platform for infrastructure, applications, and logs.
Listed on Datadog Trust Center
MongoDB Atlas
17/32Fully managed cloud database service with multi-cloud support.
PCI DSS 4.0 certified service provider, listed on MongoDB Trust Portal
ServiceNow
17/32Cloud platform for IT service management, workflow automation, and enterprise operations.
GitHub
13/32Code hosting platform with version control, CI/CD, and collaboration tools.
GitHub maintains PCI DSS Attestation of Compliance
Mendix
13/32Low-code application development platform, owned by Siemens.
Google Apigee
10/32API management platform, part of Google Cloud.
Postman
9/32API platform for building, testing, and documenting APIs.
New Relic
6/32Observability and application performance monitoring (APM) platform.
MuleSoft
6/32Integration and API management platform (Anypoint Platform), part of Salesforce.
Rollbar
5/32Real-time error monitoring and crash reporting platform for applications.
Referenced via infrastructure provider, not Rollbar directly
Supabase
4/32Open-source Firebase alternative with PostgreSQL database, auth, and storage.
PCI DSS handled via Stripe (certified Level 1) for payment processing. Supabase itself not directly PCI certified
Honeycomb
4/32Observability platform for distributed tracing and debugging production systems.
Merchant compliance via third-party processors
Datto RMM
4/32Remote monitoring and management platform for MSPs, part of Kaseya.
Kaseya
4/32IT management and security software suite for MSPs.
Tyk
4/32Open-source API gateway and management platform.
Partial per the vendor's trust center; the specific condition is not detailed there.
Grafana Cloud
3/32Managed observability platform (metrics, logs, traces, dashboards) from Grafana Labs.
Maintained via third-party approved scanning vendors
These devops & monitoring vendors do not currently hold PCI DSS certification:
- PagerDuty (not documented)
- GitLab (not documented)
- Freshservice (not documented)
- Bitbucket (not documented)
- CircleCI (not documented)
- Travis CI (not documented)
- Jenkins (not documented)
- Sentry (not documented)
- LaunchDarkly (not documented)
- AppDynamics (not documented)
- Bugsnag (not documented)
- JFrog (not documented)
- Zapier (not documented)
- Bubble (not documented)
- Make (not documented)
- n8n (not documented)
- Retool (not documented)
- OutSystems (not documented)
- Betty Blocks (not documented)
- Glide (not documented)
- Softr (not documented)
- SolarWinds (not documented)
- ManageEngine (not documented)
- ConnectWise (not documented)
- NinjaOne (not documented)
- Kong (not documented)
- BrowserStack (not documented)
- Sauce Labs (not documented)
- LambdaTest (not documented)
- TestRail (not documented)
- Cypress.io (not documented)
- Applitools (not documented)
- SonarQube (not documented)
Know a vendor we're missing?