Securitymetrics

SecurityMetrics is a compliance assessment and cybersecurity firm. Its services include PCI DSS, HIPAA, CMMC and HITRUST assessments, penetration testing, external and internal vulnerability scanning, card and personal data discovery, shopping cart monitoring, security training, policy templates and PCI forensic investigations. The company was founded in 2000 by Brad Caldwell, after a security breach at his first business.

Customers include enterprise and Level 1 and Level 2 merchants, service providers, payment acquirers and ISOs, healthcare systems and business associates, and defense industrial base contractors. Small businesses are served through guided compliance programs. Revenue comes from assessments, testing, scanning tools and compliance programs sold to these organizations.

The company is headquartered in Orem, Utah, and lists open roles there in software engineering, sales development, account management, quality assurance and customer support. It states that it has tested more than 100 million systems, that its employees hold CISSP, PFI, QSA, ASV and P2PE QSA credentials, and that its call center handles over 135,000 calls each month.

Product: Compliance assessments (PCI DSS, HIPAA, CMMC, HITRUST), penetration testing, vulnerability scanning, data discovery, shopping cart monitoring and PCI forensic investigations.