The Payment Card Industry has a list of approved scan vendors. You'll want to have qualified personnel administer the scan and any subsequent steps to remediate potential vulnerabilities.