--- title: SecurityMetrics Reviews meta\_title: 'SecurityMetrics Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 45 reviews by the users' company size, role or industry to find out how SecurityMetrics works for a business like yours. aggregate\_rating: rating\_value: 4.8 review\_count: 45 scale: '5' date\_modified: '2026-08-10' parent\_category: name: Security and Privacy Services url: https://www.g2.com/categories/security-and-privacy-services --- # SecurityMetrics Reviews & Provider Details Claimed ###### Profile Status This profile is currently managed by SecurityMetrics but has limited features. Are you part of the SecurityMetrics team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (PCI, CMMC, HIPAA, GDPR, HITRUST). SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), Certified Forensic Investigator (PFI), and Managed Security provider with over 25 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support. * * * Seller [SecurityMetrics](https://www.g2.com/sellers/securitymetrics) Discussions [SecurityMetrics Community](https://www.g2.com/products/securitymetrics-securitymetrics/discuss) Services Offered PCI Compliance, HIPAA Compliance, HITRUST Assessment, Penetration Testing, CMMC Locations Serviced Australia, United Kingdom, United States Overview by Landry French-Folsom Show More ## Top-Rated Alternatives [ ![Insight Assurance](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Insight Assurance") Insight Assurance 4.9/5(144) ](https://www.g2.com/products/insight-assurance/reviews) [ ![SHI](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SHI") SHI 4.7/5(119) ](https://www.g2.com/products/shi/reviews) [ ![Johanson Group](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Johanson Group") Johanson Group 4.9/5(105) ](https://www.g2.com/products/johanson-group/reviews) [ View All Alternatives ](https://www.g2.com/products/securitymetrics-securitymetrics/competitors/alternatives) ## User Insights Average based on 45 real user reviews. [Log in to unlock pricing and user insights](/login) ![Rolian R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Rolian R.") RR Rolian R. Small-Business (50 or fewer emp.) 3/3/2026 "People-First SecurityMetrics Partnership That Keeps Us Audit-Ready Year-Round" 5/5 What do you like best about SecurityMetrics? People and security first, that's what we love most about SecurityMetrics' approach to navigating regulatory compliance, including PCI DSS 4.0.1. 4 years into our partnership, the improvements are felt on a daily basis. What stands out is how they've transformed security from an annual audit event into an ongoing commitment, we maintain regular monthly communication with their team, ensuring we stay audit-ready while keeping a genuinely secure and protected environment for our cardholders and merchants year-round. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? One area for improvement is the Suralink platform, which could benefit from a more intuitive experience. More broadly, we'd love to see SecurityMetrics evolve into a truly all-in-one compliance solution, consolidating all the tools and services needed to maintain PCI compliance under a single roof. Currently, having to source additional solutions externally adds both cost and complexity to a program that is already resource-intensive to manage. A unified, seamless platform experience would be a game changer for small organizations like ours. Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: If your organization handles payment data and is navigating PCI DSS compliance, SecurityMetrics is a partner worth serious consideration. Don't wait until an audit is looming, engage them early. The value isn't just in passing your annual assessment, but it's in building a security culture that protects your business, your merchants, and your customers every single day. For payment processors and fintechs especially, the regulatory landscape is only getting more complex. Having a team that combines compliance expertise with practical security guidance means you're not just checking boxes, you're genuinely reducing risk. Four years in, we can confidently say SecurityMetrics has made Strictly a stronger, more secure organization, and that investment pays for itself in trust, readiness, and peace of mind. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? SecurityMetrics supports our ongoing security program through quarterly external vulnerability assessments, penetration testing, and annual onsite evaluations. What sets them apart is their deep industry experience, they don't just function as a compliance checkbox; they act as a trusted advisor, guiding us on security best practices and helping Strictly become a more resilient and secure organization year over year. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic GC Guido C. Enterprise (\> 1000 emp.) 2/25/2026 "Professional auditor and always willing to improve our security" 5/5 What do you like best about SecurityMetrics? The professionalism of the auditor and their constant intention to help improve the company's security. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? There is nothing about the company or the auditor that has displeased me. Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: SecurityMetrics is, without a doubt, the best option for organizations that need to organize and simplify PCI DSS compliance. It facilitates ASV scans, the management of findings, and the tracking of remediations, which helps keep the process under control. I recommend it for its operational clarity and the support it provides during the certification process. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? SecurityMetrics helped us manage PCI DSS 4.0.1 compliance in a clear and organized manner, especially in ASV scans, vulnerability detection, and remediation tracking. The platform also simplified documentation and allowed us to reduce audit times. As a result, we improved risk visibility and strengthened our security posture. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: OrganicAI Translated ![Mark K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mark K.") MK Mark K. Enterprise (\> 1000 emp.) 8/4/2026 "Marcus Makes PCI Assessments Easy with Great Guidance" 5/5 What do you like best about SecurityMetrics? Our assessor, Marcus, makes it very easy to complete the PCI assessments. He provides guidance and any necessary resources to assist in meeting our PCI deadline. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? There really isn't anything that I dislike about SecurityMetrics. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? They are helping our company complete our PCI SAQ-A and SAQ-P2PE assessments. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic TT Tyler T. Mid-Market (51-1000 emp.) 11/4/2025 "Reliable PCI Compliance Partner with Excellent Support" 5/5 What do you like best about SecurityMetrics? What I like best about SecurityMetrics is the friendliness and professionalism of their staff. Our assigned QSA is always very knowledgeable and takes the time to explain requirements clearly, helping ensure our company remains fully compliant. The personalized support and expertise they provide make the PCI audit process far less stressful and much more efficient. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? Overall, our experience with SecurityMetrics has been very positive. If I could make one recommendation, it would be to implement a single sign-on experience for all platforms — including the main compliance portal and vulnerability scanning features. Consolidating access under one login would make the process more efficient and user-friendly, especially when managing multiple tasks during the audit cycle. Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: I would highly recommend SecurityMetrics to any organization that needs to maintain PCI compliance or strengthen its overall security posture. Their team is knowledgeable, responsive, and genuinely invested in helping clients succeed. The audit process is well-structured, and their QSAs provide clear guidance that makes compliance much easier to manage. If you’re looking for a partner that combines strong technical expertise with excellent customer support, SecurityMetrics is a great choice. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? Our company is required to perform annual PCI Compliance audits with an on-site auditor. SecurityMetrics helps streamline this process by providing clear guidance, tools, and documentation needed to meet PCI requirements. Their platform simplifies evidence collection, vulnerability scanning, and reporting, which reduces the time and complexity of preparing for the annual audit. By using SecurityMetrics, we’ve been able to identify and remediate potential vulnerabilities more efficiently, ensuring that our environment remains secure and compliant year-round—not just at audit time. Overall, this has improved our security posture, reduced compliance risk, and saved both time and resources during the audit process. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") PI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 2/6/2026 "Director of GRC, I have been a QSA, HITRUST certified and I complete ISO 27001 and SOC audits." 5/5 What do you like best about SecurityMetrics? Their patience and professionalism. They also work with you closely. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? There is nothing to dislike at this moment (and I've been working with them for 3 years). Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: They are cost effective and know their stuff Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? Annual PCI audit. SecurityMetrics completes 3 PCI audits for our organization a year Review collected by and hosted on G2.com. Show More 7/8/2026 Validated ReviewerSource: Organic JL james l. Small-Business (50 or fewer emp.) 9/26/2025 "Shopping Cart Monitor" 4.5/5 What do you like best about SecurityMetrics? The ease of using a portal to review scripts, authorise or decline scripts with a justification, options to download inventories / scans, when I do have an issue I am able to reach out to Maloy who does respond and helps us to get issues resolved along with Shane. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? The turnaround for bugfixes or portal updates does seem a little slow, inline scripts at the moment seems to be the most dislike at the moment as it requires emailing support to get more details which would be better for reviewing scripts, a manual option like the basic pages on the shopping cart plus option so not waiting for the system to run the test Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: I would recommend using SecurityMetrics as it is simple to sign up, good product to use for meeting the new PCI DSS 4.0.1 requirements, the dashboard is easy to use and the scanning works without having to add any coding or anything extra to your pages in order for the scanning to take place. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? The shopping cart monitor is helping us to monitor scripts, and headers on our pages to help detect anything malicious and to help meet PCI DSS 4.0.1 requirements Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") PI Verified User in Information Technology and Services Small-Business (50 or fewer emp.) 7/31/2025 "Independent security audit company vs Knowledge Transfer resource" 5/5 What do you like best about SecurityMetrics? Security Metrics QSA staff, PEN Testing and ASV staff are always willing to provide 1st hand guidance when they deem the situation to be necessary. In a sense, Security Metrics seems to adopt our cyber-sec environment as their environment and as such, engages our staff with their cultural perspective that their standard's for QA are standards that we must take to heart in the same manner as they do within their own organization - simply stated they take "ownership" of their client's welfare - a very rare quality to find in today's private sector culture. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? I personally wish the virtual threat analyses were available more often. These virtual sessions are highly instructive and provide a 1st hand sense of the risk associated with most APTs today. The high-level threat analyses that we get from our 3rd party Intel resources are good, but the Security Metrics virtual threat analyses take many of the APT threats and tend to put a very fine point on many of these international threats and how they are expanding their scope of activity. Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: Please see my comments in "What do you dislike about Security Metrics"?. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? Security Metrics is much, much more than just a highly recognized independent security assessment audit company. More precisely, Security Metrics takes the engaging position that professional knowledge transfer from their staff to our cyber security staff is an utmost priority. Consequently, security awareness is elevated far above what one might encounter in other business organizations that are comparable to our organization. A great example of what we mean by "knowledge transfer" is Security Metric's ongoing "Threat Briefings" that go a long way toward enhancing our 1st hand knowledge of the nation-state adversaries that threaten businesses of all stripes across the United States. Also, when Security Metrics QSA perform their exit review, it is not one that is perfuntory in nature, it is one of the most value packed And for companies like ours that operate in nearly every state in the Country, that is a critical value that is numbered by the many mechanisms and constantly evolving operational traits that we have adopted over the years via Security Metrics never ending engagement efforts in the advancement of our overall cyber-sec defensive strategies. Review collected by and hosted on G2.com. Show More 12/4/2025 Validated ReviewerSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") EF Verified User in Financial Services Small-Business (50 or fewer emp.) 3/30/2026 "Quick when urgency matters. Great Communication and a Well-Structured Portal for Easy Uploads" 5/5 What do you like best about SecurityMetrics? Great communication, and the portal is well structured for uploading all the necessary information. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? The cost was in line with other vendors, but since this was an unexpected expense for my business (a small business, to be clear), it was still a burden. This isn’t feedback related to SecurityMetrics. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? A last-minute change to our business categorization meant we suddenly needed to become PCI compliant within just a few weeks (very short notice). SecurityMetrics was able to stand up the assessment quickly, which helped us meet this requirement in time. Thank you. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") PI Verified User in Information Technology and Services Small-Business (50 or fewer emp.) 6/29/2026 "I'm a SecurityMetrics customer and fan" 5/5 What do you like best about SecurityMetrics? SecurityMetrics goes beyond focusing on ensuring compliance and provides insight and help with education on why various requirements are important. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? I had nothing I disliked about them and would not hesitate to use them or recommend them. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? Security compliance, scanning, pen testing, and audits. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic BI Brandon I. Mid-Market (51-1000 emp.) 8/5/2025 "Worth It for the Peace of Mind Alone" 5/5 What do you like best about SecurityMetrics? The human side of things. Yes, their bot does the work to detect anything malicious but their team will also investigate it and help you eliminate the issue. Review collected by and hosted on G2.com. What do you dislike about SecurityMetrics? There is nothing that I have found to dislike. Review collected by and hosted on G2.com. Recommendations to others considering SecurityMetrics: We only use SecurityMetrics for their Shopping Cart Monitor, but it's been well worth it. If you suspect anything strange on your cart, I highly recommend giving them a shot. They identified our issue almost immediately and have consistently stayed on top of any malicious activity since. Review collected by and hosted on G2.com. What problems is SecurityMetrics solving and how is that benefiting you? We've been using SecurityMetrics to monitor our shopping cart, and it's been a solid layer of protection. Their bot watches for any code changes in our stack and sends alerts right away when something looks off. What really stands out is their team — they don’t just notify me, they actively help track down where the changes came from and work with me to eliminate the issue at the source. They also follow up to make sure the threat is fully resolved. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ## Questions about SecurityMetrics? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about SecurityMetrics ](https://www.g2.com/products/securitymetrics-securitymetrics/discussions/new) GU Guest User What is SecurityMetrics PCI Compliance used for? 0 Upvotes 0 [ Join the conversation ](https://www.g2.com/discussions/what-is-securitymetrics-pci-compliance-used-for) [ View all Discussions ](https://www.g2.com/products/securitymetrics-securitymetrics/discuss) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/securitymetrics-securitymetrics/pricing) ##### Categories on G2 [Cybersecurity Consulting](https://www.g2.com/categories/cybersecurity-consulting)[IT Compliance Services](https://www.g2.com/categories/it-compliance-services)[Vulnerability Assessment Services](https://www.g2.com/categories/vulnerability-assessment-services) [Cybersecurity Consulting](https://www.g2.com/categories/cybersecurity-consulting)[IT Compliance Services](https://www.g2.com/categories/it-compliance-services)[Vulnerability Assessment Services](https://www.g2.com/categories/vulnerability-assessment-services)[Penetration Testing Services](https://www.g2.com/categories/penetration-testing-services)[Data Privacy Services](https://www.g2.com/categories/data-privacy-services) [Show MoreShow Less](javascript:void(0);) ##### Explore More [What commenting systems with AI-powered moderation work best for publishing companies managing high-volume reader discussions?](https://www.g2.com/discussions/what-commenting-systems-with-ai-powered-moderation-work-best-for-publishing-companies-managing-high-volume-reader-discussions%20)[What are the most reliable endpoint security services based on reviews from enterprise security teams avoiding vendor lock-in?](https://www.g2.com/discussions/what-are-the-most-reliable-endpoint-security-services-based-on-reviews-from-enterprise-security-teams-avoiding-vendor-lock-in%20)[What unified workspace tool combines chat, files, and project management so a team stops switching between apps throughout the day?](https://www.g2.com/discussions/what-unified-workspace-tool-combines-chat-files-and-project-management-so-a-team-stops-switching-between-apps-throughout-the-day%20) [Which Autodesk Construction Cloud integration partners streamline collaboration without requiring separate file-sharing platforms?](https://www.g2.com/discussions/which-autodesk-construction-cloud-integration-partners-streamline-collaboration-without-requiring-separate-file-sharing-platforms)[Which corporate volunteering platforms are worth using when you just want to understand what tools exist and how the main options compare before picking one?](https://www.g2.com/discussions/which-corporate-volunteering-platforms-are-worth-using-when-you-just-want-to-understand-what-tools-exist-and-how-the-main-options-compare-before-picking-one)[Pros and Cons Details](https://www.g2.com/products/securitymetrics-securitymetrics/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)