CandyPress has been rigorously tested and scanned utilizing the top 3 PCI security firms, and passes all testing. We are subsequently notified of any new vulnerabilities and act upon those immediately through the release of any necessary patches/upgrades to ensure that your online store is safe from threats. You can always feel safe when using our product.
*Please note - While we state that our software is compliant, end users may make modifications to the source that may render the software NON-Compliant. CandyPress is not responsible for the actions of end users. Also, your hosting environment should be checked for PCI Compliance.