SecurityMetrics Reviews & Provider Details

Name: SecurityMetrics
Rating: 4.8 (47 reviews)

SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (PCI, CMMC, HIPAA, GDPR, HITRUST). SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), Certified Forensic Investigator (PFI), and Managed Security provider with over 25 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support.

Seller

SecurityMetrics

Discussions

SecurityMetrics Community

Services Offered

PCI Compliance, HIPAA Compliance, HITRUST Assessment, Penetration Testing, CMMC

Locations Serviced

Australia, United Kingdom, United States

Overview by

Landry French-Folsom

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 47 real user reviews.

G2 reviews are authentic and verified.

Here's how.

Jiri H.

Small-Business (50 or fewer emp.)

9/23/2025

"PCI Level 2 compliance with QSA - awesome experience with SecurityMetrics!"

5/5

What do you like best about SecurityMetrics?

David Page from SecurityMetrics did a great job - very professional, reliable, thorough, super helpful. The project went smooth. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

N/A. Nothing could be done better. Super satisfied. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

SecurityMetrics is THE company you're looking for. Our PCI Level 2 compliance renewal with QSA was done within a month. No issues, can highly recommend. I just wish we had more partners like SecurityMetrics and David Page :) Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

PCI Level 2 yearly compliance renewal with Qualified Security Assessor (QSA). Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Jeff H.

Chief Technology Officer

Small-Business (50 or fewer emp.)

7/18/2025

"Great Security Partner"

5/5

What do you like best about SecurityMetrics?

Reliability and deep expertise. Over the past decade, they've been a consistent partner through PCI DSS audits, penetration tests, and ASV scanning. Their auditors are knowledgeable and collaborative, and always have good recommendations. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

One penetration test wasn't as thorough as I expected. The company redid the test. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Their team brings deep knowledge of PCI DSS, real-world penetration testing, and ASV scanning. They take a collaborative approach, explaining issues clearly and offering practical remediation guidance. We've gone through multiple audits and tests with them, and they’ve always been thorough, professional, and easy to work with. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

The have provided us with PCI DSS Audits, ASV Scanning, and Penetration Tests Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Fund-Raising

Mid-Market (51-1000 emp.)

11/13/2025

"SecuirtyMetrics is a great partner in pursuing PCI compliance."

5/5

What do you like best about SecurityMetrics?

They offer a variety of services to help achieve PCI compliance, they provide great information about compliance requirements, and the project management process is very smooth. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

I haven't yet found anything that I dislike. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

I think they are very thorough, are easy to work with, and provide great documentation. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

They are conducting application pen testing for PCI compliance.

This testing helps us meet mandatory PCI CSS requirements, identify real exploitable vulnerabilities, validate security controls, and reduce breach risk and financial impact resulting from a tarnished brand. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Jasmine M.

Enterprise (> 1000 emp.)

7/21/2025

"Amazing work!"

5/5

What do you like best about SecurityMetrics?

The communication! I love that I can send an email with a request or question and they are so fast to respond and get back to me. I love it! Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Nothing honestly, no complaints. Communication and everything is great! Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Do it! Their team is so helpful and dedicated to helping their clients. I never worry about our PCI assessment because I know they are on it and they will be there every step of the way. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

SecurityMetrics is helping our University with our PCI compliance and helping to complete our assessment with us each year. They have been a tremendous help and resource. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Computer Software

Small-Business (50 or fewer emp.)

1/21/2026

"Extremely Knowledgeable Team That Makes PCI Audits Run Smoothly"

5/5

What do you like best about SecurityMetrics?

They’re extremely knowledgeable, and they make our PCI audit run smoothly. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

I honestly can’t think of anything I dislike about it. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Joe H.

Small-Business (50 or fewer emp.)

9/29/2025

"Security Metrics and Jessica"

5/5

What do you like best about SecurityMetrics?

They communication and help during all of the scans. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Penetration testing isn't easy. The first time we had to have our server team help install the beacon. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Call Jessica, she is easy to speak with and very efficient with your time to solve the goals you have in mind. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

Security Metrics is filling a need for Penetration testing, shopping cart monitor, and PCI compliance. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Restaurants

Small-Business (50 or fewer emp.)

8/7/2025

"SecurityMetrics was very professional in working to define our PCI audit and meet our budget."

4.5/5

What do you like best about SecurityMetrics?

They have deep knowledge of the PCI compliance regulations and were able to look at our system architecture and infrastructure and quickly assess what tests and audits need to be performed. They are also very accommodating to our timeline. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

I can't think of anything so far. We just had the kickoff and that we really great. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

If you are looking for a company with expertise in PCI audits and with the flexibility to meet your specific needs, SecurityMetrics is a great option. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

They will be conducting our annual PCI audit which is required for us to continue processing credit card payments through our system. This is a large project and having SecurityMetrics manage the tasks and perform the audit saves us a lot of time. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Vernon M.

Small-Business (50 or fewer emp.)

9/10/2025

"SecurityMetrics was a great company to work with and we look forward to working with them again."

5/5

What do you like best about SecurityMetrics?

The staff at SecurityMetrics was great to work with. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

We experienced NO downsides and had NO issues. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

We are a small business that provides support services to Private Physician Groups. Having access to confidential information requires us to ensure that our networks and systems are secure. We contracted with SecurityMetrics to perform External Penetration Testing to help ensure that our data is safe. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Civic & Social Organization

Small-Business (50 or fewer emp.)

7/31/2025

"Providing the expertise that our small team lacks"

4.5/5

What do you like best about SecurityMetrics?

The tools are easy to use and affordable. While there are other options available through other vendors that are much more sophisticated with enhanced features, they are beyond what we needed and cost prohibitive. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

There was a minimum number of hours we could purchase for consulting services which was more than we needed. It would have been nice if a straight pay-as-you-go hourly rate could have been arranged instead. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

We have retained QSA experts from SecurityMetrics to help advise us on our self-attestation and updates needed for the latest version of PCI standards. In addition to being advisor, we have also been happy with the software services we have purchased from them to support our certification requirements. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

8/5/2025

"SecurityMetrics.com QSA Service Review"

5/5

What do you like best about SecurityMetrics?

The SecurityMetrics QSAs are engaging and assistive. Their efforts to schedule remote or onsite visits while accommodating business needs are truly appreciated. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

QSA resources are available on a first come first served basis so prior planning is mandatory to continuously engage with the same QSA. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Consider conducting a gap analysis prior to engaging a QSA for a PCI DSS assessment so that you are aware of the current expectations/requirements. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

The external Payment Card Industry (PCI) Qualified Security Assessor (QSA) services have significantly increased my ability to internally support cardholder data environment analyses throughout our organization. The lessons learned, industry knowledge, and peer information sharing provided by QSAs from SecurityMetrics are invaluable. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic