SecurityMetrics

We help customers close data security and compliance gaps to avoid data breaches. SecurityMetrics provides managed data security services and is certified to help customers achieve the highest data security and compliance standards.

SecurityMetrics is a PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), Certified Forensic Investigator (PFI), and Managed Security provider with 18 years of data security experience. From local shops to some of the world’s largest brands, we help all businesses achieve data security through managed services and compliance mandates (PCI, HIPAA, GDPR). We have tested over 1 million systems for data security and compliance. We are privately held and are headquartered in Orem, Utah, where we maintain a Security Operations Center (SOC) and 24/7 multilingual technical support.

We are one of only two companies worldwide certified by Visa, MasterCard, and the PCI Security Council, to conduct all major PCI validations:

PCI scans (ASV)
PCI DSS Assessments (QSA)
Payment Application Data Security Standard Audits (PA-QSA)
PCI Forensic Investigations (PFI)
Point-to-Point Encryption Assessments (P2PE QSA)

Our award-winning tools and customer service help simplify data security and compliance efforts at organizations of all sizes:

PIIscan: discovers Personally Identifiable Information (PII) like SSNs, birth dates, and card data.
PANscan: discovers cardholder data like Primary Account Numbers.
Health Network Portal: tool to manage network-wide HIPAA compliance for large medical networks.
Managed Firewall: managed in-house by data security and compliance experts.
GDPR Defense for Small Businesses: tools to find PII and assess compliance with GDPR requirements .
GDPR Consulting for Large Businesses: professional guidance from experienced network security experts.
SecurityMetrics Mobile: scans devices for vulnerabilities.
CCPA Training
Webpage Integrity Monitoring (WIM) for e-Commerce JavaScript Skimming