SecurityMetrics

Orem, Utah, United States

Penetration TestingIncident ResponseDigital ForensicsNetwork SecurityIncident-response hotline

Founded 2000Serves Enterprise, SMB, Public Sector

Profile last updated: August 16, 2026

About

Founded in 2000, SecurityMetrics is a cybersecurity company based in Orem, United States working in penetration testing, incident response, digital forensics +5 more.

SecurityMetrics is a data security and compliance provider headquartered in Orem, Utah. Founded in 2000 by Brad Caldwell, it offers PCI DSS validation and assessments, HIPAA compliance services, penetration testing, vulnerability scanning, forensic investigation and incident response, and security policy templates and training. Its products include Shopping Cart Monitor for ecommerce skimming detection and guided HIPAA compliance software. The company is a PCI Council-certified provider holding multiple PCI credentials, and states that it has tested over one million systems and serves small to large businesses, healthcare organisations, merchants, acquirers and government customers worldwide.

Location

Orem, United States

Founded

2000

Focus areas

PCI DSSHIPAAApproved Scanning VendorPenetration TestingEcommerce SecurityDigital ForensicsSecurity TrainingPolicy Templates

Languages

Services & products

Security domains

Penetration TestingIncident ResponseDigital ForensicsNetwork SecurityApplication SecurityData ProtectionGRC & ComplianceSecurity Awareness

How they deliver

Professional ServicesConsultingSoftwareTraining

Operations

Publishes an incident-response hotline on its website

Products

Shopping Cart Monitor

Ecommerce security

Cloud-based, code-free tool that scans ecommerce sites for malicious JavaScript and monitors payment page scripts to help meet PCI DSS requirements 6.4.3 and 11.6.1.

HIPAA Compliance for Small Business

HIPAA Compliance Software

Guided software that helps organisations work toward HIPAA compliance, including risk analysis, risk management plan, policies and procedures, training and support.

FastPass

PCI compliance software

Automated technology that answers parts of the PCI Self-Assessment Questionnaire and removes non-relevant questions.

Customers

EnterpriseSMBPublic Sector

Industries served

HealthcareRetailHospitalityHigher EducationPaymentsGovernment

Compliance & partners

Compliance frameworks

PCI DSSHIPAAGDPRHITRUSTCIS ControlsCMMCNIST SP 800-30