It's just a vulnerability scan, which is one small component of compliance. It's also the easiest component, and in many ways the least important. A clean scan

It's just a vulnerability scan, which is one small component of compliance. It's also the easiest component, and in many ways the least important. A clean scan does not mean you are compliant. In fact, if you are running the scan to check if you are compliant, then you are not compliant, guaranteed. Compliance is a process. It takes work, and an ongoing program. Anyone who offers you a product to make it easy is selling snake oil. As far as PCI, this scan covers only three requirements out of hundreds.