Compliance assessments and security testing for organizations of every size
SecurityMetrics is a compliance assessment firm specializing in PCI DSS, HIPAA, CMMC, and HITRUST. It’s one of only a handful of firms certified by the PCI Security Standards Council to perform every major PCI validation, as a Qualified Security Assessor (QSA), PCI Forensic Investigator (PFI), Approved Scanning Vendor (ASV), SSA, and P2PE QSA. We assess Level 1 merchants and service providers, test the networks of Fortune 500 enterprises, and investigate payment card breaches for the world's largest acquirers. We have tested more than 100 million systems.
We understand the importance of industry standards, which is why we hold our tools, training, and support to a higher, more thorough standard of performance and service. Never have a false sense of security.™
A bit of history
After a security breach in his first business, Brad Caldwell founded SecurityMetrics in 2000 to make expert data security available to every organization that handles sensitive data. That mission has made SecurityMetrics a trusted assessor for Fortune 500 retailers, global payment acquirers, Level 1 service providers, healthcare systems, and defense contractors. It also lets us bring the same expertise to hundreds of thousands of small businesses through guided compliance programs.
Headquartered in Orem, Utah, we help organizations treat cybersecurity as a mindset rather than a checklist.
We take care of our customers
Friendly and informative customer service is the cornerstone of our company. We have one of the largest in-house call centers in the payments industry, handling over 135,000 calls each month. Our dedicated support team helps businesses navigate data security and compliance with knowledgeable, personalized assistance.
Our expertise speaks for itself
Experience
We have more than 20 years of experience with data security and compliance.
Accreditations
Our employees hold certifications like Certified Information Systems Security Professional (CISSP), PCI Forensic Investigator (PFI), Qualified Security Assessor (QSA), Approved Scanning Vendor (ASV), Payment Application Qualified Security Assessor (PA-QSA), and Point-to-Point Encryption Qualified Security Assessor (P2PE QSA).
Global solutions
We are one of only a handful of companies worldwide certified by the PCI Council to conduct all major PCI compliance validations.
Who we serve
- Enterprise and Level 1 and Level 2 merchants: onsite PCI DSS assessments (ROC/AOC), penetration testing, and multi-framework programs.
- Service providers: Level 1 and Level 2 service provider ROCs, P2PE and Secure Software Assessor (and Secure SLC Assessor) validations, and PCI scoping.
- Healthcare: HIPAA risk analysis and HITRUST assessments for health systems and business associates.
- Defense industrial base: CMMC Primes, Level 1 and Level 2 readiness and CMMC assessment support.
- Acquirers and ISOs: white-label merchant compliance programs at portfolio scale.
- Small businesses: guided SAQ, ASV scanning, and HIPAA tools.
- Breach response: PFI forensic investigations.
Meet our executive team
Brad Caldwell
Brad Caldwell is Chief Executive Officer and founder of SecurityMetrics, Inc. Under Caldwell's leadership, SecurityMetrics has grown from a one-room scanning company to a global leader of industry compliance and data security solutions.
Caldwell is certified as a data forensic investigator (PFI), onsite auditor (QSA), authorized scan vendor engineer (QSE) and certified information systems security professional (CISSP).
Prior to founding SecurityMetrics, Caldwell co-founded Software Development Corporation, which developed WordPerfect for UNIX/Linux for Novell and Corel corporations. Brad is a graduate of Brigham Young University and enjoys racquetball, cars, and travel.
Blake Stevens
Blake Stevens is the Chief Financial Officer at SecurityMetrics. With over 25 years of finance and accounting experience in a number of industries, Stevens is responsible for accounting, audit, financial analysis, treasury, tax, and investor relations.
Stevens began his career as a financial analyst with Coldwell Banker and for twelve years served as the director of finance and corporate controller of Marie Callender's Pie Shops, Inc. where he was instrumental in developing accounting and POS systems and achieving company growth.
Stevens later became the CFO of Logic General Inc., a manufacturer of CD and DVD's. Stevens holds a bachelor's degree in business administration, with a major in finance from Brigham Young University.
John (JB)
Bartholomew
Since SecurityMetrics inception, JB has worked with the world’s largest acquirers helping keep their merchants secure and compliant while accomplishing the acquirers’ business objectives.
Starting as a COBOL programer with a degree from Brigham Young University, JB has over 35 years' experience in the high tech field. Specializations include cyber security technology solutions for payments, healthcare, manufacturing and entertainment.
His greatest work satisfaction comes from helping clients understand and enjoy the benefits of new or advanced technologies.
Russell Stay
Russell Stay is Senior Vice President of Business Operations at SecurityMetrics, and is responsible for defining, implementing, and executing formalized productivity and product processes for SecurityMetrics’ strategy.
Stay has over 30 years experience in software product development, planning, and marketing at companies such as FamilySearch, Intl., Symantec Corporation, Franklin Covey Company, and Structural Dynamics Research Corporation. Stay studied for a master's degree in business administration at Pepperdine University and received a bachelor's degree in computer science and mechanical engineering from Brigham Young University.
Father of three and grandfather of six, Stay enjoys racquetball, mountain bikes, rock climbing, backpacking, skiing, and his family.
Gary Glover
Gary Glover is the Vice President of Assessments at SecurityMetrics and holds QSA (Qualified Security Assessor), CISSP (Certified Information Systems Security Professional), and CISA (Certified Information Systems Auditor) certifications. Glover has completed over 100 PCI-DSS, PABP, and PA-DSS security assessments and is a regular contributor to the SecurityMetrics blog.
Glover began his career at McDonnell Douglas Aerospace developing artificial intelligence and expert systems for rocket and propulsion systems. Additionally, Glover spent nearly 10 years in software development with companies such as Novell and Corda, is the author of two US patents, and received a Masters of Science degree in mechanical engineering from Brigham Young University.
Glover's hobbies include skiing, RC airplanes, and sailing.
Ian Taylor
Ian Taylor is the Senior Vice President of Sales and has been an employee of SecurityMetrics for 16 years. With over twenty years of experience in sales management and operations, Ian has overseen the company’s call center growth from tens to hundreds, and revenue rose from thousands to millions.
Previously, he led sales groups in organizations such as Golden West Financial, World Savings, and Wachovia Bank. Ian has a Bachelor’s Degree of Science in Business Management with an emphasis in Psychology.
He currently lives in Utah and enjoys skiing, golfing, and spending time with his wife and four children.
Recognition for Outstanding Work
SecurityMetrics has worked hard over the years to provide outstanding products and services. Here are some of the awards the team has won.
