SecurityMetrics Reviews & Provider Details

Name: SecurityMetrics
Rating: 4.8 (47 reviews)

SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (PCI, CMMC, HIPAA, GDPR, HITRUST). SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), Certified Forensic Investigator (PFI), and Managed Security provider with over 25 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support.

Seller

SecurityMetrics

Discussions

SecurityMetrics Community

Services Offered

PCI Compliance, HIPAA Compliance, HITRUST Assessment, Penetration Testing, CMMC

Locations Serviced

Australia, United Kingdom, United States

Overview by

Landry French-Folsom

Top-Rated Alternatives

View All Alternatives

User Insights

Average based on 47 real user reviews.

G2 reviews are authentic and verified.

Here's how.

Verified User in Health, Wellness and Fitness

Mid-Market (51-1000 emp.)

7/30/2025

"SecurityMetrics Makes PCI Compliance Easier"

4/5

What do you like best about SecurityMetrics?

The integrated platform for vulnerability scans, network segmentation, and SAQ management makes the entire PCI compliance process feel cohesive and less stressful. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Some vulnerability scanning settings aren’t available for self-configuration in the portal, so we have to contact support to make changes—this adds extra steps and can delay our workflow. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Make sure to explore all their services—especially if you need both vulnerability scanning and SAQ guidance. Their bundled offerings can save you time and keep everything organized in one place. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

SecurityMetrics helps us manage the full PCI compliance lifecycle—from vulnerability scans and segmentation testing to completing the Self-Assessment Questionnaire (SAQ)—saving us significant time and reducing compliance risk. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Marketing and Advertising

Enterprise (> 1000 emp.)

8/12/2025

"Security Metrics has been wonderful to work with."

4/5

What do you like best about SecurityMetrics?

They are knowledgeable about PCI and are wonderful about clarifying PCI requirements so that we can meet our compliance goals. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Returning pen test hardware can take a bit of work sometimes. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

Security Metrics has done our PCI assessments and penetration testing for several years and we have had a wonderful working relationship with them. They have also helped with PCI questions between assessments so we have been able to avoid issues before they caused issues with our PCI certification. Their auditors are wonderful to work with and are willing to clarify any issues they find so they can be remediated. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Financial Services

Small-Business (50 or fewer emp.)

12/9/2025

"Exceptional Service and Communication, Top-Notch QSA"

5/5

What do you like best about SecurityMetrics?

Very easy to work with and very communicative. Best thing is the QSA that we've been working with for several years. Top notch. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Nothing I can think of. They do a great job for our company. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Zoltan V.

Enterprise (> 1000 emp.)

10/10/2025

"PCI audit"

4.5/5

What do you like best about SecurityMetrics?

responsiveness, the QSA's willingness to educate and drive the actual understanding of the process Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

that they are located in the USA!

Not much else I can highlight Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Financial Services

Small-Business (50 or fewer emp.)

8/9/2025

"PayForward has had a very positive experience with SecurityMetrics as our PCI Assessor"

5/5

What do you like best about SecurityMetrics?

The SM PCI auditor is very skilled at explaining what is required, how the requirements meet PCI standards and why they are important, and in exploring threat scenarios, suggesting multiple approaches to meet PCI requirements, and even suggesting solutions that exceed PCI requirements. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

There is nothing our team dislikes about SecurityMetrics. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

PayForward recommends SecurityMetrics for PCI assessment services without hesitation. We also recommend their vulnerability scanning services as our ASV provider. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

SecurityMetrics assists PayForward in preparedness for annual PCI assessments and completing the assessments in a well-organized, fair and systematic manner. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Dirk W.

Mid-Market (51-1000 emp.)

7/23/2025

"SecurityMetrics Satisfaction"

5/5

What do you like best about SecurityMetrics?

They are established in the industry and provide us with what we need. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

There is nothing that I dislike about Security Metrics. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Mark S.

Enterprise (> 1000 emp.)

7/18/2025

"SecurityMetrics has been wonderful to work with"

5/5

What do you like best about SecurityMetrics?

SecurityMetrics representatives are excellent at communication, knowledgeability, response times, and project ownership. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

The website could be a little more intuitive in a few areas. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Listen to Jen Stone's podcast ("The SecurityMetrics Podcast"). It's a great resource to help understand the depth of knowledge and resources their organization has. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

SecurityMetrics performs our annual PCI Compliance assessment and also our ASV scans Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Financial Services

Small-Business (50 or fewer emp.)

9/29/2025

"Excellent and kind customer service, very quick response times"

5/5

What do you like best about SecurityMetrics?

Everyone I've encountered there has been helpful, knowledgeable, and kind. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

There isn't anything I dislike about SecurityMetrics. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

It's a great one-stop-shop option to fit multiple needs for us. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

Security Metrics helped us solve out quarterly scans, penetration testing needs, PCI requirements via the shopping cart monitor, and has made the PCI DSS SO much easier to complete with the digital format. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

8/5/2025

"Great price for a great product"

5/5

What do you like best about SecurityMetrics?

They cater to your needs and budgets, are responsive, and have a great team. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

We've had some issues with contracts in the past and their terms are not negotiable for smaller companies so you get what you get with them. Review collected by and hosted on G2.com.

Validated ReviewerSource: Organic

Verified User in Computer Software

Mid-Market (51-1000 emp.)

8/5/2025

"Great experience with SecurityMetrics"

4/5

What do you like best about SecurityMetrics?

Being able to schedule the recurring scans and knowing we will get a prompt response if we reach out to the team for anything. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

We had a small snafu with billing when we first kicked off with them but their team worked quickly to resolve it. Review collected by and hosted on G2.com.