I strongly recommend contacting SecurityMetrics if you need help with PCI assessments. They were helpful throughout the process and made the assessment easier to navigate. Review collected by and hosted on G2.com.

Assisted with a PCI DSS SQA assessment Review collected by and hosted on G2.com.

If your organization handles payment data and is navigating PCI DSS compliance, SecurityMetrics is a partner worth serious consideration. Don't wait until an audit is looming, engage them early. The value isn't just in passing your annual assessment, but it's in building a security culture that protects your business, your merchants, and your customers every single day. For payment processors and fintechs especially, the regulatory landscape is only getting more complex. Having a team that combines compliance expertise with practical security guidance means you're not just checking boxes, you're genuinely reducing risk. Four years in, we can confidently say SecurityMetrics has made Strictly a stronger, more secure organization, and that investment pays for itself in trust, readiness, and peace of mind. Review collected by and hosted on G2.com.

SecurityMetrics supports our ongoing security program through quarterly external vulnerability assessments, penetration testing, and annual onsite evaluations. What sets them apart is their deep industry experience, they don't just function as a compliance checkbox; they act as a trusted advisor, guiding us on security best practices and helping Strictly become a more resilient and secure organization year over year. Review collected by and hosted on G2.com.

SecurityMetrics is, without a doubt, the best option for organizations that need to organize and simplify PCI DSS compliance. It facilitates ASV scans, the management of findings, and the tracking of remediations, which helps keep the process under control. I recommend it for its operational clarity and the support it provides during the certification process. Review collected by and hosted on G2.com.

SecurityMetrics helped us manage PCI DSS 4.0.1 compliance in a clear and organized manner, especially in ASV scans, vulnerability detection, and remediation tracking. The platform also simplified documentation and allowed us to reduce audit times. As a result, we improved risk visibility and strengthened our security posture. Review collected by and hosted on G2.com.

If your timelines are critical ensure you understand the flow of your project once the deal is signed. Review collected by and hosted on G2.com.

PCI DSS assessment and qualification Review collected by and hosted on G2.com.

They are helping our company complete our PCI SAQ-A and SAQ-P2PE assessments. Review collected by and hosted on G2.com.

I would highly recommend SecurityMetrics to any organization that needs to maintain PCI compliance or strengthen its overall security posture. Their team is knowledgeable, responsive, and genuinely invested in helping clients succeed. The audit process is well-structured, and their QSAs provide clear guidance that makes compliance much easier to manage.

If you’re looking for a partner that combines strong technical expertise with excellent customer support, SecurityMetrics is a great choice. Review collected by and hosted on G2.com.

Our company is required to perform annual PCI Compliance audits with an on-site auditor. SecurityMetrics helps streamline this process by providing clear guidance, tools, and documentation needed to meet PCI requirements. Their platform simplifies evidence collection, vulnerability scanning, and reporting, which reduces the time and complexity of preparing for the annual audit.

By using SecurityMetrics, we’ve been able to identify and remediate potential vulnerabilities more efficiently, ensuring that our environment remains secure and compliant year-round—not just at audit time. Overall, this has improved our security posture, reduced compliance risk, and saved both time and resources during the audit process. Review collected by and hosted on G2.com.

They are cost effective and know their stuff Review collected by and hosted on G2.com.

Annual PCI audit. SecurityMetrics completes 3 PCI audits for our organization a year Review collected by and hosted on G2.com.

I would recommend using SecurityMetrics as it is simple to sign up, good product to use for meeting the new PCI DSS 4.0.1 requirements, the dashboard is easy to use and the scanning works without having to add any coding or anything extra to your pages in order for the scanning to take place. Review collected by and hosted on G2.com.

The shopping cart monitor is helping us to monitor scripts, and headers on our pages to help detect anything malicious and to help meet PCI DSS 4.0.1 requirements Review collected by and hosted on G2.com.

Please see my comments in "What do you dislike about Security Metrics"?. Review collected by and hosted on G2.com.

Security Metrics is much, much more than just a highly recognized independent security assessment audit company. More precisely, Security Metrics takes the engaging position that professional knowledge transfer from their staff to our cyber security staff is an utmost priority. Consequently, security awareness is elevated far above what one might encounter in other business organizations that are comparable to our organization. A great example of what we mean by "knowledge transfer" is Security Metric's ongoing "Threat Briefings" that go a long way toward enhancing our 1st hand knowledge of the nation-state adversaries that threaten businesses of all stripes across the United States. Also, when Security Metrics QSA perform their exit review, it is not one that is perfuntory in nature, it is one of the most value packed And for companies like ours that operate in nearly every state in the Country, that is a critical value that is numbered by the many mechanisms and constantly evolving operational traits that we have adopted over the years via Security Metrics never ending engagement efforts in the advancement of our overall cyber-sec defensive strategies. Review collected by and hosted on G2.com.

A last-minute change to our business categorization meant we suddenly needed to become PCI compliant within just a few weeks (very short notice). SecurityMetrics was able to stand up the assessment quickly, which helped us meet this requirement in time. Thank you. Review collected by and hosted on G2.com.