Adding Online Security & Payments to your Website

There are four pieces to the online payment puzzle:
    • a bank account
    • a payment gateway
    • a payment processor
    • a web site with an SSL certificate on it

SSL certificates vary in price depending on what you are using it for and what level of security/encryption you need. You will need to check with your hosting company or a company that sells SSL Certs for current pricing.

You will generally need a dedicated server, or a virtual private server with your own dedicated IP address. Again, prices vary greatly depending on needs and speeds.

Part of the SSL Certification is making sure that your site is PCI compliant. This is another additional annual fee that may have to pay to a PCI Compliance certification company such as McAffe, GeoTrust or VeriSign. Your credit card processor and/or payment gateway processor may suggest or require you to utilize their PCI compliance partner(s).

Here is an example of how that might look from our host, alphasites.net:

  • Virtual Private Server (VPS) with Dedicated IP address [$30/month + $12 domain registration = $372/annually]
  • Alphasites.net PCI Compliance Setup Fee - [$95 one-time] (The server must be modified and secured in a particular manner for PCI compliance)
  • SSL Certification [$129/annually]
  • PCI Compliance Check [$120/annually]
So the total cost just to host your site and make sure that is is secure might be about $720 for the first year.

Once you know your site is secure and you are confident that you are PCI compliant, you will then want to check with your bank to see if you can receive payments online with them. You may have to establish a merchant service account with them if you do not already have one. If your bank does allow you to take online payments you will want to find out what payment gateway they work best with. Your bank will also be able to provide you with a fee listing of what they will charge you per transaction, deposit, etc.

Your payment gateway is a bridge between your customer's bank and your bank. If you were to use authorize.net as your gateway, you may incur charges like a 1 time gateway setup fee, a monthly service fee, a per transaction fee and a batch fee. Of course there are also other services they will encourage you to purchase as well.

Once all of these pieces are in place you can then add code to your web site, or use an eCommerce software package that integrates with your payment gateway.



Article ID: 14, Created On: 12/17/2009, Modified: 12/17/2009