SecurityMetrics

SecurityMetrics provides PCI DSS compliance validation, vulnerability scanning, penetration testing, and payment-card forensic investigation services, with a customer base concentrated among small and mid-sized merchants who need to meet payment-card industry security requirements but typically lack in-house security teams. As an Approved Scanning Vendor (ASV) and Qualified Security Assessor (QSA), the company helps merchants complete the compliance validation processes that payment processors and card brands require.

Founded in 2000 and headquartered in Orem, Utah, SecurityMetrics has built a two-decade track record specifically serving the SMB segment of the payments ecosystem, a market often underserved by security vendors that focus on larger enterprise deals. Its forensic investigation practice has also historically been engaged to investigate real-world payment-card breaches, giving the company direct exposure to how card-data compromises actually happen in the field.

At the 2026 Global InfoSec Awards, SecurityMetrics was recognized as The Most Promising in SMB Cybersecurity, reflecting its long-standing focus on making PCI compliance and breach-related forensic services accessible to smaller merchants that larger security vendors often overlook.