Managed IT and cybersecurity for auto care and fueling businesses.
EDG.tech runs IT and security for repair shops, tire and lube centers, car washes, and fueling stations across Gaithersburg, Rockville, Bethesda, Germantown, Washington, DC, and Frederick: the payment network separated from everything else, shop and diagnostic computers patched and backed up, pump and camera systems off default passwords. Essentials is $45 per device per month; Complete is $100 per user.
Who this is for
For independent and small-chain operators with one to ten locations: repair and collision shops, quick lube and tire centers, car washes, and convenience and fueling stations. Dealerships with a manufacturer-mandated IT stack, and station networks run by a fuel brand's corporate IT, are a fit only for what corporate does not cover.
What is at stake for a shop or station?
Skimming is a billion-dollar business, and the pump is the target
The FBI estimates that skimming costs financial institutions and consumers more than $1 billion each year, through devices installed on or inside ATMs, point-of-sale terminals, and fuel pumps. A compromised reader at a station is discovered by the card brands, and the chargebacks and the processor's response land on the operator.
Source: FBI: Skimming
The card standard got stricter in 2025
PCI DSS version 4 added 64 requirements, and 51 of them, including stronger authentication and monitoring, became mandatory on March 31, 2025. Your processor's annual self-assessment questionnaire reflects the new version, and a shop that answers it the way it did in 2022 is attesting to controls it does not have.
Source: PCI SSC blog: future-dated v4.x requirements (Aug 20, 2024)
Vehicle and customer records are personal information under Maryland law
Shop management systems hold names, addresses, phone numbers, plate and VIN records, and often card details for every customer. Maryland's Personal Information Protection Act requires reasonable security for that data and notice to affected individuals within 45 days of a breach, and a ransomware event on the shop computer is where that usually begins.
Source: Maryland Attorney General: PIPA guidelines for businesses
What do PCI and your card processor ask of a shop or station?
If you accept cards, your payment processor holds you to the PCI Data Security Standard. For most shops and stations that means a self-assessment questionnaire each year, the processor's approved terminals and pump payment hardware, no card numbers stored on shop computers, a segmented network that keeps payment devices away from the office PC, cameras, and guest Wi-Fi, and quarterly scans where the questionnaire requires them. The processor and its assessors own formal compliance; we do not certify PCI. Maryland's Personal Information Protection Act covers your customer records with a reasonable-security duty and a 45-day breach notice. Fueling stations also answer to the fuel brand's security program and state weights-and-measures inspection of pump skimmers. EDG.tech builds the technical controls PCI expects into the plan and gives you the evidence to answer the questionnaire honestly.
How does EDG.tech serve auto care and fueling businesses?
The payment network on its own island
Card readers, pump payment controllers, and the point-of-sale sit on a segmented network with no path to the office PC, the shop floor laptops, the cameras, or customer Wi-Fi, which is the single control that most reduces what PCI asks of you and what an attacker can reach.
Shop computers and diagnostic laptops kept healthy
The office machine that runs the shop management and accounting software, and the laptops that plug into vehicles for diagnostics and programming, are patched, protected, and backed up with versions, so a failed drive or a ransomware event on a Monday does not stop the bays.
Pumps, cameras, and controllers off their factory passwords
Pump controllers, car wash systems, camera recorders, and the vendor boxes nobody has logged into since installation get their default passwords changed, their remote access limited to the vendor's maintenance windows, and their firmware tracked, because those are the devices attackers find first.
The questionnaire, answered from evidence
When the processor's annual PCI self-assessment arrives, we provide the network diagram, device inventory, patching records, and scan results that back each answer, and we flag the questions where the honest answer is no, so you fix them before attesting rather than after a card-brand investigation.
Which plan fits a shop or station?
Smart, affordable IT management & cybersecurity.
See EDG.tech EssentialsShops and stations usually belong on Essentials. The exposure is in devices, the office PC, the diagnostic laptops, the point-of-sale, and the pump controllers, rather than in a large staff of email users, and per-device pricing matches that. Complete fits multi-location operators with an office team, a bookkeeper moving significant money, and a need for 24/7 security monitoring across sites.
EDG.tech Complete is $100 per user per month. Compare both plans
"The shop PC, the diagnostic laptop, the cameras, and the card readers should never be on the same network. In most shops we walk into, they are. That is the first fix," says Duane Epperly, founder of EDG.tech.
“We have been incredibly pleased with the service and support we've received from Duane and the team at EDG.tech. Duane is knowledgeable, responsive, and always goes above and beyond to ensure our technology runs smoothly. Whether it's resolving IT issues, strengthening our cybersecurity, or providing expert guidance, he consistently delivers professional, reliable service. It's a relief knowing we have someone we can trust to keep our systems secure and our business operating efficiently. We highly recommend Duane and EDG.tech to any business looking for dependable IT support and outstanding customer service.”
Auto care IT questions, answered
Can EDG.tech make our shop PCI compliant?
We build and maintain the technical controls PCI expects, network segmentation, patching, protection on the computers, and no stored card data, and we give you the evidence to answer your processor's self-assessment questionnaire truthfully. Formal compliance is attested by you and assessed by your processor; we do not certify it, and we will say so to anyone who asks.
What does IT support cost for an auto repair shop or gas station?
EDG.tech Essentials is $45 per device per month, month to month. A shop with an office PC, two diagnostic laptops, and a point-of-sale terminal pays $180 per month. Pump controllers and camera systems are covered by the network and segmentation work, quoted per site. Complete is $100 per user per month for multi-location operators with an office staff.
Do you work with our shop management and diagnostic software?
Yes. We support the shop management, estimating, parts, and accounting systems you use, and the vehicle diagnostic and programming tools on your laptops, keeping the machines they run on patched and compatible, and working the vendor's support when a problem is on their side. We do not resell any of it.
How do you protect the pumps from skimmers?
Physical skimmers are found by inspection, seals, and the brand's program; our part is the network and the controller. We isolate pump payment devices from everything else, change default passwords, limit vendor remote access, and monitor the network for unknown devices, so an electronic skimmer or a tampered controller is noticed instead of running for months.
Ready for IT you never have to worry about?
Book a free 30-minute consultation, or start with a free security assessment. You get a fixed price within two business days. No pressure, no jargon.