SecurityMetrics
SecurityMetrics is a PCI-focused QSA company whose published materials emphasize practical, deadline-driven assessments with strong communication. Its practice covers the full PCI spectrum — SAQ guidance, ASV scanning, penetration testing, and full ROC assessments — making it a common choice for companies doing PCI alongside other security work.
At a glance
| Headquarters | Orem, Utah |
|---|---|
| Founded | Not disclosed |
| Firm type | QSA company (QSAC); PCI-focused security firm |
| ROC planning range | $15K–$45K (planning estimate (Sept 2026)) |
| Typical fieldwork window | 4–8 wk |
| Frameworks (per firm) | PCI DSS, SAQ support, ASV scanning, pen testing, forensics |
| Official website | securitymetrics.com |
Best fit
Mid-market merchants that want a PCI-specialist assessor with testing services under one roof.
Before you engage
PCI-specialist depth; confirm multi-framework needs (SOC 2, ISO) are covered if you need them.
Questions about SecurityMetrics
Is SecurityMetrics an accredited QSA company?
SecurityMetrics operates as a QSA company (QSAC); PCI-focused security firm. Only a Qualified Security Assessor employed by an accredited QSA company can perform an on-site PCI DSS assessment and sign a Report on Compliance — confirm the firm's current QSA status on the PCI SSC's assessor listings before engaging.
What frameworks does SecurityMetrics support?
Per the firm's public materials: PCI DSS, SAQ support, ASV scanning, pen testing, forensics.
How do I get pricing from this firm?
QSA fees are scoped per engagement and almost never published. Use our quote request to get a scoped fee from SecurityMetrics and comparable QSA companies.
Get a scoped quote
QSA fees depend on your size, scope, and readiness. Get comparable quotes from SecurityMetrics and similar accredited QSA companies.
Request quotes from SecurityMetrics & peersFree · No obligation · Takes 2 minutes
Alternatives to SecurityMetrics
Comparable QSA companies buyers also evaluate — same buyer profile, different trade-offs:
Schellman
QSA company (QSAC) · $50K–$120K
A-LIGN
QSA company (QSAC) · $40K–$100K
VikingCloud
QSA company (QSAC) · $50K–$120K
Compare quotes from these firms
One request reaches the firms above — scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match accredited QSA companies to your size and scope → they send scoped quotes directly. Free, no obligation.
← All QSA companies · PCI DSS cost guide · How to choose a QSA company