So what do your competitors do? I know it's an obvious question... but it's probably also the answer to your problem.
Seriously though, our competitors seem to do it themselves. Which probably means PCI compliance and a merchant account, then doing all the integration themselves.