PF

Verified User in Fund-Raising

Mid-Market (51-1000 emp.)

11/13/2025

"SecuirtyMetrics is a great partner in pursuing PCI compliance."

5/5

What do you like best about SecurityMetrics?

They offer a variety of services to help achieve PCI compliance, they provide great information about compliance requirements, and the project management process is very smooth. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

I haven't yet found anything that I dislike. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

I think they are very thorough, are easy to work with, and provide great documentation. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

They are conducting application pen testing for PCI compliance.

This testing helps us meet mandatory PCI CSS requirements, identify real exploitable vulnerabilities, validate security controls, and reduce breach risk and financial impact resulting from a tarnished brand. Review collected by and hosted on G2.com.

JM

Jasmine M.

Enterprise (> 1000 emp.)

7/21/2025

"Amazing work!"

5/5

What do you like best about SecurityMetrics?

The communication! I love that i can send an email with a request of question and they are so fast to respond and get back to me. I love it! Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Nothing honestly, no complaints. Communication and everything is great! Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Do it! Their team is so helpful and dedicated to helping their clients. I never worry about our PCI assessment because i know they are on it and they will be there every step of the way Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

SecurityMetrics is helping our University with out PCI compliance and helping to complete our assessment with us each year. They have been a tremendous help and resource. Review collected by and hosted on G2.com.

OC

Verified User in Computer Software

Small-Business (50 or fewer emp.)

1/21/2026

"Extremely Knowledgeable Team That Makes PCI Audits Run Smoothly"

5/5

What do you like best about SecurityMetrics?

They’re extremely knowledgeable, and they make our PCI audit run smoothly. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

I honestly can’t think of anything I dislike about it. Review collected by and hosted on G2.com.

JH

Joe H.

Small-Business (50 or fewer emp.)

9/29/2025

"Security Metrics and Jessica"

5/5

What do you like best about SecurityMetrics?

They communication and help during all of the scans. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Penetration testing isn't easy. The first time we had to have our server team help install the beacon. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Call Jessica, she is easy to speak with and very efficient with your time to solve the goals you have in mind. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

Security Metrics is filling a need for Penetration testing, shopping cart monitor, and PCI compliance. Review collected by and hosted on G2.com.

ER

Verified User in Restaurants

Small-Business (50 or fewer emp.)

8/7/2025

"SecurityMetrics was very professional in working to define our PCI audit and meet our budget."

4.5/5

What do you like best about SecurityMetrics?

They have deep knowledge of the PCI compliance regulations and were able to look at our system architecture and infrastructure and quickly assess what tests and audits need to be performed. They are also very accommodating to our timeline. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

I can't think of anything so far. We just had the kickoff and that we really great. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

If you are looking for a company with expertise in PCI audits and with the flexibility to meet you specific needs, SecurityMetrics is a great option. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

They will be conducting our annual PCI audit which is required for us to continue processing credit card payments through our system. This is a large project and having SecruityMetrics manage the tasks and perform the audit saves us a lot of time. Review collected by and hosted on G2.com.

VM

Vernon M.

Small-Business (50 or fewer emp.)

9/10/2025

"SecurityMetrics was a great company to work with and we look forward to working with them again."

5/5

What do you like best about SecurityMetrics?

The staff at SecurityMetrics was great to work with. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

We experienced NO dowsides and had NO issues. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

We are a small business that provides support services to Private Physician Groups. Having access to confidential information requires us to ensure that our networks and systems are secure. We contracted with SecurityMetrics to perform External Penetration Testing to help ensure that our data is safe. Review collected by and hosted on G2.com.

AC

Verified User in Civic & Social Organization

Small-Business (50 or fewer emp.)

7/31/2025

"Providing the expertise that our small team lacks"

4.5/5

What do you like best about SecurityMetrics?

The tools are easy to use and affordable. While there are other options available through other vendors that are much more sophisticated with enhanced features, they are beyond what we needed and cost prohibitive. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

There was a minimum number of hours we could purchase for consulting services which was more than we needed. It would have been nice if a straight pay-as-you-go hourly rate could have been arranged instead. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

We have retained QSA experts from SecurityMetrics to help advise us on our self-attestation and updates needed for the latest version of PCI standards. In addition to being advisor, we have also been happy with the software services we have purchased from them to support our certification requirements. Review collected by and hosted on G2.com.

PH

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

8/5/2025

"SecurityMetrics.com QSA Service Review"

5/5

What do you like best about SecurityMetrics?

The SecurityMetrics QSAs are engaging and assistive. Their efforts to schedule remote or onsite visits while accommodating business needs are truly appreciated. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

QSA resources are available on a first come first served basis so prior planning is mandatory to continuously engage with the same QSA. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Consider conducting a gap analysis prior to engaging a QSA for a PCI DSS assessment so that you are aware of the current expectations/requirements. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

The external Payment Card Industry (PCI) Qualified Security Assessor (QSA) services have significantly increased my ability to internally support cardholder data environment analyses throughout our organization. The lessons learned, industry knowledge, and peer information sharing provided by QSAs from SecurityMetrics are invaluable. Review collected by and hosted on G2.com.

AH

Verified User in Health, Wellness and Fitness

Mid-Market (51-1000 emp.)

7/30/2025

"SecurityMetrics Makes PCI Compliance Easier"

4/5

What do you like best about SecurityMetrics?

The integrated platform for vulnerability scans, network segmentation, and SAQ management makes the entire PCI compliance process feel cohesive and less stressful. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Some vulnerability scanning settings aren’t available for self-configuration in the portal, so we have to contact support to make changes—this adds extra steps and can delay our workflow. Review collected by and hosted on G2.com.

Recommendations to others considering SecurityMetrics:

Make sure to explore all their services—especially if you need both vulnerability scanning and SAQ guidance. Their bundled offerings can save you time and keep everything organized in one place. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

SecurityMetrics helps us manage the full PCI compliance lifecycle—from vulnerability scans and segmentation testing to completing the Self-Assessment Questionnaire (SAQ)—saving us significant time and reducing compliance risk. Review collected by and hosted on G2.com.

PM

Verified User in Marketing and Advertising

Enterprise (> 1000 emp.)

8/12/2025

"Security Metrics has been wonderful to work with."

4/5

What do you like best about SecurityMetrics?

They are knowledgeable about PCI and are wonderful about clarifying PCI requirements so that we can meet our compliance goals. Review collected by and hosted on G2.com.

What do you dislike about SecurityMetrics?

Returning pen test hardware can take a bit of work sometimes. Review collected by and hosted on G2.com.

What problems is SecurityMetrics solving and how is that benefiting you?

Security Metrics has done our PCI assessments and penetration testing for several years and we have had a wonderful working relationship with them. They have also helped with PCI questions between assessments so we have been able to avoid issues before they caused issues with our PCI certification. Their auditors are wonderful to work with and are willing to clarify any issues they find so they can be remediated. Review collected by and hosted on G2.com.