SecurityMetrics PIIscan

Reduce business risk by identifying unencrypted data in your organization.

Buy now
I could not have completed my PCI Compliance SAQ Questionnaire without the help of Security Metrics. SecurityMetrics walked me through each question, explained the meaning, clarified everything for me in a way that I could understand in order to answer each question.
Kacey Gilpin
We recently worked with SecurityMetrics for a PCI compliance scan of our website. Their team was very helpful and guided us through the necessary operating system patches. Great support and clear communication throughout the process.
Vitalie Colosov
When I first interacted with SecurityMetrics regarding my concerns about becoming PCI DSS compliant I had massive reservations. They were professional and helpful. I'm now PCI DSS compliant because of their guidance.
William Beesley
SecurityMetrics made this process much more pleasant than we imagined it would be. They assisted my company with our PCI compliance process and I am grateful that they were the company I spoke with. Great attitude. Their ability to be patient and understanding is unmatched. Thank you SecurityMetrics.
Opie H.
People and security first, that's what we love most about SecurityMetrics' approach to navigating regulatory compliance, including PCI DSS 4.0.1. They've transformed security from an annual audit event into an ongoing commitment, we maintain regular monthly communication with their team, ensuring we stay audit-ready while keeping a genuinely secure and protected environment for our cardholders and merchants year-round.
Rolian R.
You guys made our PCI audit as easy as pie for us and anytime we had any sort of issue or problem... My team and I had an amazing learning experience with this whole process and Dustin with the rest of the SecurityMetrics team made a potentially very stressful situation into a smoothly executed project. My most sincere thanks.
GlobalPayNet
SecurityMetrics has provided our clients with a high level of expertise, professionalism and service for PCI compliance...SecurityMetrics takes the complexity of PCI compliance and then rolls it into a simplified process.
Craig L.
CEO
Card/Pay
Quick, easy, effective. This is a great app that helps make safety precautions quick and easy for those who handle sensitive data on their cell phones, would recommend it to anyone using their devices this way. Security is a necessity in these days.
Richard D.
Quick and useful. I couldn't believe that Mobile found a few errors. I now need to fix them! Very glad to have this!
Anonymous
Quick and easy to use. The app downloaded and installed very quickly. The scan only took about twenty seconds to complete and came back with easy to review results. I fixed two of the six found vulnerabilities before running a second scan which now shows four vulnerabilities remain. Solid app.
Jeff M.
Maintaining PCI compliance is extremely important with large scale ecommerce applications. SecurityMetrics makes the process of getting compliant extremely easy. I'd highly recommend them to anyone looking to build and maintain a secure environment.
Thomas W.
President
eVitamins
Great app. The app let's me rest assure that my sensitive information is safe on my phone.
Bobby K.

Have an expert in your corner

Our 24/7 support specialists can help you locate and securely delete or encrypt unencrypted PII. Our award-winning support team reviews sensitive data discovery best practices and helps your organization stay secure.

Two men reviewing something on a laptop on a rolling table in a work environment.

Features

Sensitive data discovery

Storage of unencrypted Personally Identifiable Information (PII) creates liability to fines, penalties and fees associated with the Payment Card Industry (PCI), Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), as well as possible data compromise.

SecurityMetrics PIIscan is PII scanning software that searches computer systems, hard drives, and attached storage devices for unencrypted data to help you discover where and why sensitive data is leaking from your network.

Get on the path to compliance simply and quickly

Why waste time manually searching for PII on your computer systems? SecurityMetrics PIIscan takes the weight off your shoulders and simplifies sensitive data discovery. Once the scan is complete, you can use the results to work towards compliance with PCI, HIPAA, and GDPR requirements.

PIIscan was built with security in mind and never collects or stores SSN, SIN, NINO, TFN, ABN, or payment card data.

PCI program solutions for acquirers and ISOs

SecurityMetrics PCI programs are merchant-friendly, keeping them and you happy.

Feature
Basic
Plus
Pro
Advisor
Online Portal
checkcheckcheckcheck
Merchant PCI SAQ
checkcheckcheckcheck
SAQ Pre-Population
checkcheckcheckcheck
ASV scans (1/merch)
checkcheckcheckcheck
PCI Policy Template
checkcheckcheckcheck
24/7 Help Desk
checkcheckcheckcheck
24/7 Scan & SAQ Support
checkcheckcheckcheck
Partner+ Portal
checkcheckcheckcheck
Custom Email Campaigns
checkcheckcheckcheck
Assigned CSM
checkcheckcheckcheck
ASV scans (5/merch)
checkcheck
$100,000 Merchant Premium Service Warranty
checkcheck
Card Data Discovery
checkcheck
Mobile Device Scan
checkcheck
AI-Powered PCI Compliance (Spectre AI)
checkcheck
Anti-Malware Software
check
Get started on your PCI program, request a quote now.
Request a Quote
PANscan
Lite
PANscan
Basic
PANscan
Advanced
Total number of card data found
checkcheckcheck
Files containing card data
checkcheckcheck
Light on system resources
checkcheckcheck
Immediate summary results
checkcheckcheck
Fast Scans (1-3 GB/min)
checkcheckcheck
Tuned to reduce false positives
checkcheckcheck
Unlimited scanning (per machine)
checkcheckcheck
Technical support
checkcheckcheck
View card type
checkcheck
View track data
checkcheck
View file path to payment card data
checkcheck
Navigation to cardholder data
checkcheck
Mark files as false positives
checkcheck
Specify which drives to scan
checkcheck
Save current results
checkcheck
Clear current results
checkcheck
Exclude image files
checkcheck
Exclude executable files
checkcheck
Online scanning
checkcheck
Offline scanning (optional)
check
Exclude specific file types
check
Exclude specific file directories
check
Scan for specific file types
check
Scan specific directories
check
Preserve last access dates
check
Export text report
check
Check for spaces/dashes in card numbers
check
Linux support
check
Mac support
check

PCI for small businesses starting at

$399/year*

Price discounts available depending on merchant processor

  • External Vulnerability Scan (1 IP)
  • Online PCI Self Assessment Questionnaire (SAQ)
  • Online compliance reporting portal
  • Non-compliance notification
  • Compliance reporting to merchant processor
  • Compliance certificate
  • PANscan® (Card discovery software for 1 machine)
  • Service warranty (Up to $100,000 reimbursement in case of a breach)
  • Security Awareness Training (1 seat)
Get Started

*We discount our services for most merchants because of our relationship with their merchant processor.
Looking for Acquirer or PCI program pricing? Click here.

How it works

Find unencrypted PII

SecurityMetrics PIIscan is data discovery software that allows organizations to simply and efficiently discover unencrypted USA Social Security Numbers (SSN), UK National Insurance Numbers (NINO), Canada Social Insurance Numbers (SIN), Australian Tax File Numbers (TFN), Australian Business Numbers (ABN), and payment card data (including primary account numbers (PAN) and magnetic stripe track data).

It is important to proactively find and then delete or encrypt this sensitive data before criminals can steal it.                        

Advanced scan settings

SecurityMetrics leverages digital forensic investigation technology to fine tune PIIscan and find unprotected sensitive data at your organization.

The patented PII scanner technology in PIIscan allows you to configure your scan to search or not search for spaces and dashes, graphic files, and image and executable files.

You also have the option to run the PII scanner in forensics mode to maintain last access dates on files.

You can also choose to include or exclude SSN, SIN, NINO, ABN, TFN, or payment card data from any of the scans you run.

Basic

Starting at
$1,499
USD/year
The Basics
For small practices
Request Quote
Compliance Management
  • Online Portal Access (Software to help you work towards HIPAA compliance)
Services
  • Security Fundamentals Checklist
  • $100,000 Service Guarantee
  • Monthly Perimeter Scans: 1 IPs
  • Risk Analysis
  • Risk Management Plan
  • Monthly HIPAA Newsletter
Compliance Management
  • HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
  • HIPAA Training: 3 seats
  • 5 Hour Technical Support (inbound tech support only)

Pro

Starting at
$4,999
USD/year
Tools, Training & Unlimited Support
For medium-sized practices
Request Quote
Compliance Management
  • Online Portal Access (Software to help you work towards HIPAA compliance)
Services
  • Security Fundamentals Checklist
  • $100,000 Service Guarantee
  • Monthly Perimeter Scans: 5 IPs
  • Risk Analysis
  • Risk Management Plan
  • Monthly HIPAA Newsletter
Compliance Management
  • HIPAA Policies & Procedures (including Breach Notification Policy and Business Associate Agreement Template
  • HIPAA Training: 25 seats
  • Unlimited Support (specialized HIPAA support agents available for guidance on all HIPAA tools)

Basic

For SMB’s looking to achieve compliance in the most cost effective way
Request A Quote
Features
  • Portal access
  • 1 payment path supported
  • User-initiated scanning process
  • Fulfills req’s. 6.4.3 & 11.6.1
  • Add-on consultation credits available
  • Partner discounts available

Pro

For businesses invested in having complete awareness and understanding of the threats to their ecommerce site
Request A Quote
Features
  • Portal access
  • 3 payment paths supported (option to add on)
  • Automated scanning process
  • Fulfills req's. 6.4.3 & 11.6.1
  • Forensic annual baseline assessment
  • 12 annual consultation credits included
  • Partner discounts available

Frequently Asked Questions

No items found.
SecurityMetrics has helped secure 1,000,000+ payment systems

Get PCI DSS Compliant

Get ready for PCI DSS v4.0.1 with the right tools, training, and support.

Why choose SecurityMetrics?

Avoid false positives

Often PII scanning software is overloaded with false positives. PIIscan’s proprietary algorithms minimize false positives, ultimately saving you time.

Full service vendor

With expertise in PCI DSS assessments, HIPAA assessments, GDPR, forensic incident response, vulnerability scanning, penetration testing, card data discovery, security appliances, PA-DSS (SSF) security assessments, P2PE assessments, training, and consulting, we hold a myriad of credentials and can help secure your data.

Simple to use PII scanner

PIIscan is simple to use and configure, even for tech novices. PIIscan does the work to help you keep unencypted data out of your network and systems.

Unknown storage of PII

Sensitive data discovery is an important part of achieving security and complying with PCI DSS, HIPAA, and GDPR requirements.Locate unwanted data, then securely delete or encrypt it.

See how we've helped our clients succeed

When you succeed, we succeed. That's why we pay such close attention to detail and provide award-winning support. Let's work together!

TESTIMONIALS

The relevance of ensuring proper ecommerce website security and protecting card holder data continues to be paramount for our organization, and we could not manage this process better without the reporting tools and excellent technical expertise provided by SecurityMetrics.

Jason Drake
Premiere Sports Travel

SecurityMetrics is an integral part of the team in our PCI program. We depend on the assessors to make sure that we stay on the compliance track. They do it with developing relationships across campus, discussing upcoming projects or application changes, and being available to us for consulting. They are knowledgeable, helpful and help us keep the campus engaged by their friendly demeanors.

Robbyn Lennon
University of Arizona

We have been customers of SecurityMetrics for about eight years. We are so impressed with the patient and professional way that their staff treats customers. They do not hurry, seem tired, act annoyed or too busy to work with their customers. Every person I spoke to was great!

Naomi Christman
The ProImmune Co, LLC

SecurityMetrics is the most retail friendly solution. At the small business level, frequently the person that has to interface with the tool is an owner or someone who has financial responsibility, but they may not necessary be technically savvy with using online tools. We believe SecurityMetrics meets that need better than anyone else we've seen.

Steve Methvin
Bozzutos

SecurityMetrics' Pen Testing has definitely helped us improve our network security in ways I could have never imagined. You just don't know what you don't know. I am absolutely confident in their team's abilities and my experience has led me trust them implicitly as a security partner. Their depth of understanding is impressive, and their professionalism is unmatched.

Morgan Leppink
Internet Ticketing Systems

We’ve been using SecurityMetrics for our onsite PCI audits for more than 10 years now. We have continued to come back and return to SecurityMetrics due to the value that has been supplied by them. SecurityMetrics has been around long enough now and they’ve been one of the top providers when it comes to PCI compliance, that I know they’re in it for the long haul.

Dawn Martinez
SVP, NewTek Merchant Solutions
Arrow Left Long Dark
Arrow right long dark
We work hard to provide amazing support
Average wait times
Phone
11 sec
Chat
3 sec
Ticket
2 hrs

Recognition for Outstanding Work

SecurityMetrics has worked hard over the years to provide outstanding products and services. Here are some of the awards the team has won.

2021 Fortress Award
The Golden Bridge Award 2020 Gold logo
Global InfoSec Awards Winner for 2026 white
Cybersecurity Excellence Award Winner 2023 Logo

Over 25 Years of Compliance Experience

QSA | PFI | ASV | P2PE | SSF | SLC | 3DS | QPA | PCIP | RPO

PCI Qualified Security Assessor logo
HITRUST Authorized CSF Assessor logo
CISSP logo
HCISPP logo
CISA logo
CMMC Cert