SecurityMetrics PIIscan
Reduce business risk by identifying unencrypted data in your organization.
Have an expert in your corner
Our 24/7 support specialists can help you locate and securely delete or encrypt unencrypted PII. Our award-winning support team reviews sensitive data discovery best practices and helps your organization stay secure.

Features
Sensitive data discovery
Storage of unencrypted Personally Identifiable Information (PII) creates liability to fines, penalties and fees associated with the Payment Card Industry (PCI), Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), as well as possible data compromise.
SecurityMetrics PIIscan is PII scanning software that searches computer systems, hard drives, and attached storage devices for unencrypted data to help you discover where and why sensitive data is leaking from your network.
Get on the path to compliance simply and quickly
Why waste time manually searching for PII on your computer systems? SecurityMetrics PIIscan takes the weight off your shoulders and simplifies sensitive data discovery. Once the scan is complete, you can use the results to work towards compliance with PCI, HIPAA, and GDPR requirements.
PIIscan was built with security in mind and never collects or stores SSN, SIN, NINO, TFN, ABN, or payment card data.
PCI program solutions for acquirers and ISOs
SecurityMetrics PCI programs are merchant-friendly, keeping them and you happy.
Feature
Basic
Plus
Pro
Advisor
Online Portal
Merchant PCI SAQ
SAQ Pre-Population
ASV scans (1/merch)
PCI Policy Template
24/7 Help Desk
24/7 Scan & SAQ Support
Partner+ Portal
Custom Email Campaigns
Assigned CSM
ASV scans (5/merch)
$100,000 Merchant Premium Service Warranty
Card Data Discovery
Mobile Device Scan
AI-Powered PCI Compliance (Spectre AI)
Anti-Malware Software
Get started on your PCI program, request a quote now.
Request a QuoteLite
Basic
Advanced
PCI for small businesses starting at
Price discounts available depending on merchant processor
- External Vulnerability Scan (1 IP)
- Online PCI Self Assessment Questionnaire (SAQ)
- Online compliance reporting portal
- Non-compliance notification
- Compliance reporting to merchant processor
- Compliance certificate
- PANscan® (Card discovery software for 1 machine)
- Service warranty (Up to $100,000 reimbursement in case of a breach)
- Security Awareness Training (1 seat)
*We discount our services for most merchants because of our relationship with their merchant processor.
Looking for Acquirer or PCI program pricing? Click here.
How it works
Find unencrypted PII
SecurityMetrics PIIscan is data discovery software that allows organizations to simply and efficiently discover unencrypted USA Social Security Numbers (SSN), UK National Insurance Numbers (NINO), Canada Social Insurance Numbers (SIN), Australian Tax File Numbers (TFN), Australian Business Numbers (ABN), and payment card data (including primary account numbers (PAN) and magnetic stripe track data).
It is important to proactively find and then delete or encrypt this sensitive data before criminals can steal it.
Advanced scan settings
SecurityMetrics leverages digital forensic investigation technology to fine tune PIIscan and find unprotected sensitive data at your organization.
The patented PII scanner technology in PIIscan allows you to configure your scan to search or not search for spaces and dashes, graphic files, and image and executable files.
You also have the option to run the PII scanner in forensics mode to maintain last access dates on files.
You can also choose to include or exclude SSN, SIN, NINO, ABN, TFN, or payment card data from any of the scans you run.
Basic
- Online Portal Access (Software to help you work towards HIPAA compliance)
- Security Fundamentals Checklist
- $100,000 Service Guarantee
- Monthly Perimeter Scans: 1 IPs
- Risk Analysis
- Risk Management Plan
- Monthly HIPAA Newsletter
- HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
- HIPAA Training: 3 seats
- 5 Hour Technical Support (inbound tech support only)
Plus
- Online Portal Access (Software to help you work towards HIPAA compliance)
- Security Fundamentals Checklist
- $100,000 Service Guarantee
- Monthly Perimeter Scans: 3 IPs
- Risk Analysis
- Risk Management Plan
- Monthly HIPAA Newsletter
- HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
- HIPAA Training: 15 seats
- Unlimited Support (specialized HIPAA support agents available for guidance on all HIPAA tools)
Pro
- Online Portal Access (Software to help you work towards HIPAA compliance)
- Security Fundamentals Checklist
- $100,000 Service Guarantee
- Monthly Perimeter Scans: 5 IPs
- Risk Analysis
- Risk Management Plan
- Monthly HIPAA Newsletter
- HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
- HIPAA Training: 25 seats
- Unlimited Support (specialized HIPAA support agents available for guidance on all HIPAA tools)
Basic
- Portal access
- 1 payment path supported
- User-initiated scanning process
- Fulfills req’s. 6.4.3 & 11.6.1
- Add-on consultation credits available
- Partner discounts available
Plus
- Portal access
- 1 payment path supported (option to add on)
- Automated scanning process
- Fulfills req's. 6.4.3 & 11.6.1
- Add-on consultation credits available
- Partner discounts available
Pro
- Portal access
- 3 payment paths supported (option to add on)
- Automated scanning process
- Fulfills req's. 6.4.3 & 11.6.1
- Forensic annual baseline assessment
- 12 annual consultation credits included
- Partner discounts available
Frequently Asked Questions
Resources
The following are related resources that we have prepared for you. Find more answers to your questions in our Learning Center.
Trusted by 300,000+ companies










































































































Get PCI DSS Compliant
Get ready for PCI DSS v4.0.1 with the right tools, training, and support.
Why choose SecurityMetrics?
Avoid false positives
Often PII scanning software is overloaded with false positives. PIIscan’s proprietary algorithms minimize false positives, ultimately saving you time.
Full service vendor
With expertise in PCI DSS assessments, HIPAA assessments, GDPR, forensic incident response, vulnerability scanning, penetration testing, card data discovery, security appliances, PA-DSS (SSF) security assessments, P2PE assessments, training, and consulting, we hold a myriad of credentials and can help secure your data.
Simple to use PII scanner
PIIscan is simple to use and configure, even for tech novices. PIIscan does the work to help you keep unencypted data out of your network and systems.
Unknown storage of PII
Sensitive data discovery is an important part of achieving security and complying with PCI DSS, HIPAA, and GDPR requirements.Locate unwanted data, then securely delete or encrypt it.
See how we've helped our clients succeed
When you succeed, we succeed. That's why we pay such close attention to detail and provide award-winning support. Let's work together!
Recognition for Outstanding Work
SecurityMetrics has worked hard over the years to provide outstanding products and services. Here are some of the awards the team has won.




Over 25 Years of Compliance Experience
QSA | PFI | ASV | P2PE | SSF | SLC | 3DS | QPA | PCIP | RPO

