Can you remind me again why hackerone is relevant here? Who claimed where that they performed a PCI DSS external scan that failed?