SecurityMetrics
SecurityMetrics grew up as a PCI scanning vendor and built one of the industry's best-known SMB PCI programs: bundled ASV scanning, SAQ guidance, and QSA-led assessments under one roof. It is a practical pick for merchants that want the scanning, the questionnaire, and the assessor from a single vendor.
At a glance
| Headquarters | Orem, Utah |
|---|---|
| Founded | 2000 |
| Firm type | PCI-focused compliance company (QSA company and ASV) |
| ROC planning range | $15K–$75K (published planning range (Sept 2026)) |
| Typical fieldwork window | 4–8 wk |
| Frameworks (per firm) | PCI DSS, SOC 2, HIPAA, GDPR |
| Official website | securitymetrics.com |
Best fit
Small and mid-size merchants that want ASV scans, SAQ support, and QSA assessment bundled.
Before you engage
Ask where the QSA practice's independence line sits relative to its managed-compliance products.
Questions about SecurityMetrics
Does SecurityMetrics bundle ASV scanning with the assessment?
SecurityMetrics grew up as a scanning vendor and offers ASV scanning alongside QSA assessments -- confirm in your proposal whether scan fees are included in the assessment quote.
Is SecurityMetrics good for small merchants?
Its SMB PCI program (scanning + SAQ guidance + assessment) is built for smaller merchants. It is listed as both a QSA company and an ASV.
What does SecurityMetrics charge for PCI?
It does not publish assessment fees -- request a scoped quote. Our planning range for this tier is $15K–$75K (September 2026).
Get a scoped quote
Assessment fees depend on your environment, scope, and readiness. Get comparable quotes from SecurityMetrics and similar assessment firms.
Request quotes from SecurityMetrics & peersFree · No obligation · Takes 2 minutes
Alternatives to SecurityMetrics
Comparable firms buyers also evaluate -- same buyer type, different trade-offs:
Coalfire
Cybersecurity and compliance assessment firm · $25K–$150K
LevelBlue (formerly Trustwave)
Managed security services provider with PCI assessment practice · $25K–$150K
ControlCase
Compliance assessment and managed-compliance firm · $15K–$75K
Compare quotes from these firms
One request reaches the firms above -- scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match licensed auditors to your size and scope → they send scoped quotes directly. Free, no obligation.