An Approved Scan Vendor (ASV) is an organization authorized by the Payment Card Industry Security Standards Council (PCI SSC) to conduct external vulnerability scanning services for PCI DSS compliance validation. ASVs perform regular scans of merchants’ and service providers’ networks to identify vulnerabilities that could be exploited by attackers, thereby helping organizations maintain a secure cardholder data environment.