--- title: SecurityMetrics Reviews meta_title: 'SecurityMetrics Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 45 reviews by the users' company size, role or industry to find out how SecurityMetrics works for a business like yours. aggregate_rating: rating_value: 4.8 review_count: 45 scale: '5' date_modified: '2026-08-10' parent_category: name: Security and Privacy Services url: https://www.g2.com/categories/security-and-privacy-services --- # SecurityMetrics Reviews **Vendor:** SecurityMetrics **Category:** [IT Compliance Services Providers](https://www.g2.com/categories/it-compliance-services) **Average Rating:** 4.8/5.0 **Total Reviews:** 45 ## About SecurityMetrics SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (PCI, CMMC, HIPAA, GDPR, HITRUST). SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), Certified Forensic Investigator (PFI), and Managed Security provider with over 25 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support. ## SecurityMetrics Pros & Cons **What users like:** - Users appreciate the **ongoing monitoring** feature of SecurityMetrics, essential for maintaining PCI compliance seamlessly. (1 reviews) - Users value the **ongoing monitoring** provided by SecurityMetrics, essential for maintaining PCI compliance effectively. (1 reviews) **What users dislike:** - Users believe that **vulnerability scanning needs improvement** as it currently lacks coverage for various scanning types. (1 reviews) - Users find the **vulnerability scanning limited** as it doesn't encompass all necessary types of scans. (1 reviews) - Users feel the **vulnerability scanning** could improve, as it currently lacks coverage for all scanning types. (1 reviews) ## SecurityMetrics Reviews ### 1. PCI Audit **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Supermarkets | Mid-Market (51-1000 emp.) **Reviewed Date:** August 01, 2025 **What do you like best about SecurityMetrics?** We had a 12 month contract to complete the audit. It was apparent we would not make that timeframe so Security Metrics agreed to work with us an additional 6 months at no additional charge. The Security Metrics auditor that did our onsite audit has been very helpful and informative. **What do you dislike about SecurityMetrics?** This was the very first time that our company had to go through a PCI audit. Since this was our first audit, it would probably have been incumbent on Security Metrics to stress that we might need the services of a PCI consultant to assist us in satisfying the requirements of the audit. **Recommendations to others considering SecurityMetrics:** Very professional and competent company. I had pulled various documents and forms from their website for years in a previous job, this is my first experience actually working with them. I do have some frustrations with the audit process in general, but Security Metrics does not control the process. I found Security Metrics to be very easy to work with. If you have never been through an audit before, Security Metrics provides templates that provide a starting point for you in gathering the required documents and putting required processes in place. If this is your first audit, you might consider hiring a PCI consultant that can work with you and Security Metrics in order to satisfactorily complete your audit. **What problems is SecurityMetrics solving and how is that benefiting you?** PCI Audit required by Visa/Mastercard ### 2. Preferred partner for penetration testing and PCI compliance **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Consulting | Mid-Market (51-1000 emp.) **Reviewed Date:** August 05, 2025 **What do you like best about SecurityMetrics?** I like the responsiveness of Security Metrics staff. I like the tools they provide to us and our clients for penetration testing coordination and PCI compliance management. I like the free 90-day retest for penetration testing, providing our firm and our clients ample time to remediate penetration test findings and obtain a clean report at no additional charge. **What do you dislike about SecurityMetrics?** Some of our clients have complained of being targeted with misleading marketing emails for other services after contracting Security Metrics for penetration testing. **Recommendations to others considering SecurityMetrics:** If you are engaging Security Metrics for penetration testing, make sur to follow the test prep instructions including whitelisting of Security Metrics scanning IP addresses. This will ensure smooth and complete execution of your penetration test without unnecessary fire drills or limiting testing scope due to interference from your IDS/IPS. **What problems is SecurityMetrics solving and how is that benefiting you?** Our consulting firm partners with Security Metrics to provide our clients penetration testing services and PCI DSS related tools and services. ### 3. SecurityMetrics Makes PCI Compliance Easier **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.) **Reviewed Date:** July 30, 2025 **What do you like best about SecurityMetrics?** The integrated platform for vulnerability scans, network segmentation, and SAQ management makes the entire PCI compliance process feel cohesive and less stressful. **What do you dislike about SecurityMetrics?** Some vulnerability scanning settings aren’t available for self-configuration in the portal, so we have to contact support to make changes—this adds extra steps and can delay our workflow. **Recommendations to others considering SecurityMetrics:** Make sure to explore all their services—especially if you need both vulnerability scanning and SAQ guidance. Their bundled offerings can save you time and keep everything organized in one place. **What problems is SecurityMetrics solving and how is that benefiting you?** SecurityMetrics helps us manage the full PCI compliance lifecycle—from vulnerability scans and segmentation testing to completing the Self-Assessment Questionnaire (SAQ)—saving us significant time and reducing compliance risk. ### 4. Security Metrics has been wonderful to work with. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Marketing and Advertising | Enterprise (> 1000 emp.) **Reviewed Date:** August 12, 2025 **What do you like best about SecurityMetrics?** They are knowledgeable about PCI and are wonderful about clarifying PCI requirements so that we can meet our compliance goals. **What do you dislike about SecurityMetrics?** Returning pen test hardware can take a bit of work sometimes. **What problems is SecurityMetrics solving and how is that benefiting you?** Security Metrics has done our PCI assessments and penetration testing for several years and we have had a wonderful working relationship with them. They have also helped with PCI questions between assessments so we have been able to avoid issues before they caused issues with our PCI certification. Their auditors are wonderful to work with and are willing to clarify any issues they find so they can be remediated. ### 5. Great experience with SecurityMetrics **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** August 05, 2025 **What do you like best about SecurityMetrics?** Being able to schedule the recurring scans and knowing we will get a prompt response if we reach out to the team for anything. **What do you dislike about SecurityMetrics?** We had a small snafu with billing when we first kicked off with them but their team worked quickly to resolve it. **What problems is SecurityMetrics solving and how is that benefiting you?** SecurityMetrics handles our Vulnerability Scanning. Their platform is user friendly (easy to navigate, easy to use). We are able to schedule recurring scans which was a game changer for us. Their team is responsive, friendly, and so helpful. ### 6. PCI-DSS certification for financial iundustry. **Rating:** 3.5/5.0 stars **Reviewed by:** Sambit M. | Lead Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** September 27, 2023 **What do you like best about SecurityMetrics?** As PCI compliance requires continuous monitoring and maintenance, the best part of SecurityMetrics is on going monitoring . **What do you dislike about SecurityMetrics?** Vulnerability scanning can be better as current scan does not cover all types of scanning. **What problems is SecurityMetrics solving and how is that benefiting you?** Analyzing the gap for PCI-DSS. ## SecurityMetrics Discussions - [What is SecurityMetrics PCI Compliance used for?](https://www.g2.com/discussions/what-is-securitymetrics-pci-compliance-used-for) - [View SecurityMetrics pricing details and edition comparison](https://www.g2.com/products/securitymetrics-securitymetrics/reviews?filters%5Bnps_score%5D%5B%5D=4§ion=pricing&secure%5Bexpires_at%5D=2026-08-13+18%3A28%3A41+-0500&secure%5Bsession_id%5D=cb37dd14-d454-4877-803c-ad8e3120f48b&secure%5Btoken%5D=2b809fdc8e21ec1dffc307f9db16967b804bcd9dedda192066db51771b8fbd22&format=llm_user) ## SecurityMetrics Features **Planning** - Needs Assessment - Resource Allocation - Stayed within Budget - Statement of Work - Best Practices **Agentic AI - Penetration Testing** - Autonomous Task Execution - Multi-step Planning - Adaptive Learning - Natural Language Interaction - Multi-Language **Delivery** - Technical Expertise - Met Deadlines - Meeting Management - Project Updates - Scope Management - Roll-out **Team Quality** - Change Management Skills - Executive Presence - Vertical Expertise - Technology Partnerships ## Top SecurityMetrics Alternatives - [Insight Assurance](https://www.g2.com/products/insight-assurance/reviews) - 4.9/5.0 (144 reviews) - [SHI](https://www.g2.com/products/shi/reviews) - 4.7/5.0 (116 reviews) - [Johanson Group](https://www.g2.com/products/johanson-group/reviews) - 4.9/5.0 (105 reviews)