Hmm, interesting. Automated threat analysis, how exactly would that work? Like the configuration OVALs? If I'm not mistaken Red Hat has quite the support via OVALs to some of the PCI requirements.

Regarding the card processing environment, what does that usually consist of? Linux servers?

You can reply to info@ SecureIT or here. I'm interested in knowing more.

Cheers