Penetration testing features
PCI program solutions for acquirers and ISOs
SecurityMetrics PCI programs are merchant-friendly, keeping them and you happy.
Feature
Basic
Plus
Pro
Advisor
Online Portal
Merchant PCI SAQ
SAQ Pre-Population
ASV scans (1/merch)
PCI Policy Template
24/7 Help Desk
24/7 Scan & SAQ Support
Partner+ Portal
Custom Email Campaigns
Assigned CSM
ASV scans (5/merch)
$100,000 Merchant Premium Service Warranty
Card Data Discovery
Mobile Device Scan
AI-Powered PCI Compliance (Spectre AI)
Anti-Malware Software
Get started on your PCI program, request a quote now.
Request a QuoteLite
Basic
Advanced
PCI for small businesses starting at
Price discounts available depending on merchant processor
- External Vulnerability Scan (1 IP)
- Online PCI Self Assessment Questionnaire (SAQ)
- Online compliance reporting portal
- Non-compliance notification
- Compliance reporting to merchant processor
- Compliance certificate
- PANscan® (Card discovery software for 1 machine)
- Service warranty (Up to $100,000 reimbursement in case of a breach)
- Security Awareness Training (1 seat)
*We discount our services for most merchants because of our relationship with their merchant processor.
Looking for Acquirer or PCI program pricing? Click here.
Penetration testing steps
Basic
- Online Portal Access (Software to help you work towards HIPAA compliance)
- Security Fundamentals Checklist
- $100,000 Service Guarantee
- Monthly Perimeter Scans: 1 IPs
- Risk Analysis
- Risk Management Plan
- Monthly HIPAA Newsletter
- HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
- HIPAA Training: 3 seats
- 5 Hour Technical Support (inbound tech support only)
Plus
- Online Portal Access (Software to help you work towards HIPAA compliance)
- Security Fundamentals Checklist
- $100,000 Service Guarantee
- Monthly Perimeter Scans: 3 IPs
- Risk Analysis
- Risk Management Plan
- Monthly HIPAA Newsletter
- HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
- HIPAA Training: 15 seats
- Unlimited Support (specialized HIPAA support agents available for guidance on all HIPAA tools)
Pro
- Online Portal Access (Software to help you work towards HIPAA compliance)
- Security Fundamentals Checklist
- $100,000 Service Guarantee
- Monthly Perimeter Scans: 5 IPs
- Risk Analysis
- Risk Management Plan
- Monthly HIPAA Newsletter
- HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
- HIPAA Training: 25 seats
- Unlimited Support (specialized HIPAA support agents available for guidance on all HIPAA tools)
Basic
- Portal access
- 1 payment path supported
- User-initiated scanning process
- Fulfills req’s. 6.4.3 & 11.6.1
- Add-on consultation credits available
- Partner discounts available
Plus
- Portal access
- 1 payment path supported (option to add on)
- Automated scanning process
- Fulfills req's. 6.4.3 & 11.6.1
- Add-on consultation credits available
- Partner discounts available
Pro
- Portal access
- 3 payment paths supported (option to add on)
- Automated scanning process
- Fulfills req's. 6.4.3 & 11.6.1
- Forensic annual baseline assessment
- 12 annual consultation credits included
- Partner discounts available
Frequently Asked Questions
How much does a penetration test cost?
Penetration tests range in price, depending on the size of your network and specific needs. Tests usually range from $15,000 to $30,000. As a general rule, any "pentest" that is listed for less than $4,000 is likely not a real penetration test.
How long does a penetration test take?
At SecurityMetrics, we have customers who take weeks and some who take less time. It really depends on the complexity of your environment and what your objectives are.
Check out the Penetration Testing Timeline Checklist for more details.
What compliance standards require a penetration test?
There are many industry standards that require a penetration test, including PCI, SOC, HIPAA, GDPR, and more. For organizations that don't need to adhere to specific compliance standards elective pentests can be performed to gauge your security posture. Remember, if you make significant changes to your environment, you will need to perform a penetration test again.
What is the difference between a penetration test and a vulnerability scan?
Sometimes customers call asking about penetration testing and realize they actually just need a vulnerability scan. Vulnerability scans must be performed by someone who is a certified vendor. They are more affordable than a penetration test and completely automated. They focus on finding potential vulnerabilities and identifying them for you so you can go through the vulnerabilities and make the needed changes to test again. For PCI requirements, you must perform vulnerability scans once every 90 days.
Penetration testing tries to exploit the found vulnerabilities. Also known as ethical hacking, SecurityMetrics penetration testers start with your vulnerability scan and see if they can hack into your network. Penetration testing is much more hands-on and time-consuming, making it much more expensive than vulnerability scanning
What qualifications do SecurityMetrics pentesters have?
You should look for certain certifications when choosing a pentester. SecurityMetrics pentesters have CISSP, OSCP, BSCP, and more. SecurityMetrics pentesters want you to be safeguarded against threat actors, so they take their training and your pentest seriously.
SecurityMetrics also holds its own testing program once a year where pentesters go up against their own servers to determine any vulnerabilities and the effective rate of exploiting them. Sometimes pentest firms are doing as little as possible to sign you off. SecurityMetrics penetration testers want you to be safeguarded against threat actors, so they take your pentest seriously.
Resources
The following are related resources that we have prepared for you. Find more answers to your questions in our Learning Center.
.svg)