ControlScan
ControlScan, a wholly-owned subsidiary of VikingCloud, provides AI-powered cybersecurity and PCI compliance services through the Asgard Platform, serving enterprise multi-location operators and small business merchants across 70+ countries with 4+ million protected locations.
- Company typePrivate
- Founded2018
- HeadquartersAtlanta, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What ControlScan does
ControlScan, founded in 2005 and headquartered in Atlanta, originally operated as a provider of PCI compliance and security solutions for small- and medium-sized merchants. In 2021, ControlScan was acquired by VikingCloud (founded 2018) and now operates as a wholly-owned subsidiary brand, with VikingCloud, Inc. as the parent and SecureTrust retained as a sub-brand for small business PCI compliance. Following the acquisition, the combined entity has repositioned itself as an integrated cybersecurity and compliance company, serving both enterprise multi-location operators and the long-tail SMB segment.
The company's core technology is the AI-powered Asgard Platform, which unifies managed security services (network security, endpoint security, threat detection and response, vulnerability scanning, penetration testing, digital forensics) with compliance services (PCI DSS, HIPAA, risk management, data privacy) and merchant risk management offerings (CCS Advantage, Cyber Risk Defense, Web Risk Monitoring, Secure Payment Solution). The platform is supported by 22 granted patents and a proprietary telemetry base that stops 33+ billion client cybersecurity threat events each month. The company also retains 100+ Qualified Security Assessors (QSAs) across 16 countries, positioning it as a global leader in PCI compliance delivery. Scale signals include 4+ million business locations protected, 300+ corporate brands under management, 70+ countries served, and a 98% customer retention rate.
The business model is primarily subscription-based recurring revenue from managed security and compliance services, with annual billing cycles and quote-based pricing tied to organization size and number of business locations. The go-to-market combines enterprise direct sales with dedicated account teams, a self-serve SMB channel under the SecureTrust brand, and partnership/reseller programs. Customer segments span enterprise multi-location operators in verticals such as retail, hospitality, healthcare, fuel and convenience, travel and tourism, pharmacy, restaurants, and auto service, alongside small business merchants requiring affordable PCI DSS compliance.
ControlScan firmographics
Firmographics- Name
- ControlScan
- Legal name
- Viking Cloud, Inc.
- Website
- https://controlscan.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- ControlScan, a wholly-owned subsidiary of VikingCloud, provides AI-powered cybersecurity and PCI compliance services through the Asgard Platform, serving enterprise multi-location operators and small business merchants across 70+ countries with 4+ million protected locations.
- Ownership category
- akta.pro rank
ControlScan industry classification
Industry- Product category
- Cybersecurity & PCI Compliance Services
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)
- akta.pro secondary industries
- Controls & Continuous Compliance Monitoring (HDADAIAH), Data Privacy, Consent & Compliance Management (HDAEADAG)
Keywords
Where ControlScan is headquartered
LocationHeadquarters
- HQ city
- Atlanta
- HQ country
- United States
- HQ region
- North America
Markets served
ControlScan business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Services: Recurring managed security services including network security, endpoint security, threat detection and response, vulnerability scanning, penetration testing, and digital forensics.
- Compliance Solutions: PCI compliance services including QSA assessments, HIPAA compliance, risk management, and data privacy solutions for enterprise and merchant customers.
- Merchant Risk Management: Web risk monitoring, cyber risk defense, secure payment solutions, and partnership programs for merchant risk management.
- Small Business PCI Compliance: SecureTrust PCI Manager for small businesses - fast, affordable, simple PCI compliance solutions for merchants.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise cybersecurity and compliance solutions |
| Subscription | Annual | Small business PCI compliance |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels8 records
ControlScan product offering
Product offeringCore offering
ControlScan delivers managed cybersecurity and compliance services for merchants and multi-location enterprises, with a core focus on PCI DSS compliance assessments, network/endpoint security, threat detection and response, vulnerability scanning, penetration testing, digital forensics, and merchant risk management (including HIPAA compliance and data privacy). Its offerings are unified through the AI-powered Asgard Platform, and complemented by the SecureTrust PCI Manager self-serve product for small business merchants.
Product overview
VikingCloud offers a unified platform-plus-modules architecture centered on The Asgard Platform®, an AI-powered risk mitigation platform. The core portfolio includes cybersecurity services (Managed Security Services, Network Security, Endpoint Security, Threat Detection & Response) and compliance solutions (PCI Compliance, Risk Management, HIPAA Compliance, Data Privacy). Supporting modules include security testing (Penetration Testing, Vulnerability Scanning, Digital Forensics), merchant risk management (CCS Advantage, Cyber Risk Defense, Web Risk Monitoring, Secure Payment Solution, Partnership Programs), and the small business-focused SecureTrust PCI Manager. The Asgard Platform serves as the central hub providing unified access to all services, enabling 24x7 risk mitigation decisions across 4+ million business locations.
Differentiator
Problem solved
Functional benefit
Brands
- SecureTrust: PCI compliance and security solutions brand for small businesses, offering SecureTrust PCI Manager for Small Business
Products and services
- The Asgard Platform AI-powered risk mitigation platform that gives organizations unified 24x7 access to VikingCloud's cybersecurity and compliance services, enabling faster, informed, predictive and cost-effective risk mitigation decisions for enterprise and merchant customers.
- Managed Security Services Comprehensive managed cybersecurity service for enterprises and multi-location merchants, combining network security, endpoint security, threat detection and response, vulnerability scanning, penetration testing and digital forensics to keep business locations protected, connected, and audit-ready.
- PCI Compliance Global PCI DSS compliance service delivered through 100+ QSAs in 16 countries, helping enterprise and merchant customers achieve and maintain PCI DSS certification and audit readiness.
- Risk Management Enterprise risk assessment and risk management services that help organizations identify, evaluate, and mitigate cybersecurity and compliance risks across their environment.
- HIPAA Compliance HIPAA compliance service for healthcare providers and pharmacy merchants needing to protect protected health information (PHI) and meet healthcare regulatory requirements.
- SecureTrust PCI Manager for Small Business Fast, affordable, simple PCI compliance self-serve solution for small business merchants, sold via a 'Buy Now' e-commerce flow under the SecureTrust brand and trusted by millions of small merchants.
- Threat Detection and Response Continuous monitoring and response service for cybersecurity threats across the enterprise, delivered 24x7 by VikingCloud's security operations.
- Network Security Managed network security service that protects enterprise and multi-location network infrastructure and connectivity.
- Endpoint Security Endpoint security service for protecting endpoints (POS systems, workstations, devices) across distributed business locations.
- Penetration Testing Offensive security testing service that identifies exploitable vulnerabilities in enterprise and merchant systems, networks, and applications.
- Vulnerability Scanning Automated scanning service to identify security vulnerabilities across networks and systems for enterprise and merchant customers.
- Digital Forensics Services Forensic investigation and analysis service for security incidents, providing incident response support for enterprise and merchant customers.
- Data Privacy Data privacy compliance and protection services for organizations that need to meet data privacy regulatory obligations.
- Web Risk Monitoring Continuous monitoring service for web-based risks and threats targeting merchant and enterprise web properties.
- Cyber Risk Defense Proactive cyber risk defense services that protect merchants from targeted cyber threats.
- Secure Payment Solution Secure payment processing and protection solution for merchants handling card payments.
- CCS Advantage Merchant risk management and compliance advantage program designed to give merchants an integrated approach to payment security and compliance.
- Partnership Programs Partner enablement programs for resellers, ISVs, and merchant risk management partners that deliver ControlScan/VikingCloud cybersecurity and compliance offerings to their customers.
Quantifiable outcome
- 98% customer retention rate
- +3 more outcomes
Companies that use ControlScan
Customer profileNamed customers6 records
Segments9 records
Ideal customer profiles3 records
ControlScan technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature1 record
ControlScan partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered minor.
- Jula HoldingminorJula Holding, a Swedish retailer, partnered with VikingCloud for ongoing PCI DSS compliance, gaining the knowledge and structure required to ensure continuous compliance.
- Rely ITminorRely IT collaborated with VikingCloud for technical project support and compliance assistance, leveraging VikingCloud's expertise for PCI assessments.
Scale indicators7 records
Recent moves6 records
Expansion highlights5 records
ControlScan competitors and assessment
Company assessmentDirect peers
- Trustwave: Trustwave is a direct peer to VikingCloud/ControlScan — a major cybersecurity and PCI compliance services provider offering managed security, QSA-led PCI assessments, and merchant risk management to mid-market and enterprise merchants globally.
- Coalfire: Coalfire is a leading pure-play cybersecurity advisory and PCI compliance firm offering QSA-led assessments, penetration testing, and managed compliance services — directly overlapping VikingCloud/ControlScan's core compliance practice.
- SecurityMetrics: SecurityMetrics specializes in PCI compliance scanning, vulnerability assessment, and merchant cybersecurity with strong SMB focus — directly competing with the SecureTrust brand and VikingCloud's small-business compliance offering.
- Trustwave (SecureTrust confusion note): SecureTrust was historically a GoDaddy brand for SSL and compliance; VikingCloud now operates a SecureTrust brand for SMB PCI compliance. Note naming overlap: securetrust.com currently redirects between VikingCloud's SMB site and historical Trustwave/SecureTrust properties, making it a direct comparison point on SMB PCI compliance UX and pricing.
- Schellman & Co. Schellman is a large specialized compliance and cybersecurity advisory firm offering PCI DSS, SOC 2, HIPAA, ISO 27001 assessments — a direct QSA-driven peer competing for enterprise compliance mandates.
- A-LIGN: A-LIGN is a fast-growing compliance-focused cybersecurity firm specializing in PCI DSS, SOC 2, HITRUST and ISO assessments with a tech-enabled delivery model — directly comparable to VikingCloud's Asgard-enabled compliance practice.
Broad incumbents
- Optiv Security: Optiv is a broad cybersecurity solutions integrator offering managed security, GRC, and compliance advisory across enterprise clients; overlaps with VikingCloud's enterprise compliance and risk management practice but as part of a wider security portfolio.
- Verizon Cybersecurity Services: Verizon offers managed security and PCI compliance services built on its Threat Research Advisory Centre — a broad incumbent competing in the same enterprise compliance/cybersecurity tier as VikingCloud.
- Rapid7: Rapid7 provides managed detection and response, vulnerability management, and compliance automation via InsightConnect — a broader platform incumbent whose vulnerability management and compliance reporting competes with VikingCloud's stack.
Emerging players
- Hyperproof: Hyperproof is an emerging GRC/continuous compliance automation platform focused on SOC 2, ISO 27001, and PCI evidence collection — an emerging player intersecting VikingCloud's compliance practice as buyers shift to software-led compliance orchestration.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
ControlScan social profiles
Digital presenceControlScan financial estimates
Financial estimateRevenue estimate
Valuation estimate
ControlScan leadership team
Management profileNumber of profiles
ControlScan subsidiaries and ownership
Company hierarchySubsidiaries1 record
ControlScan funding detail
Funding detailFunding overview
Funding rounds9 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ControlScan M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ControlScan
What does ControlScan do?
ControlScan delivers managed cybersecurity and compliance services for merchants and multi-location enterprises, with a core focus on PCI DSS compliance assessments, network/endpoint security, threat detection and response, vulnerability scanning, penetration testing, digital forensics, and merchant risk management (including HIPAA compliance and data privacy). Its offerings are unified through the AI-powered Asgard Platform, and complemented by the SecureTrust PCI Manager self-serve product for small business merchants.
Is ControlScan a public or private company?
ControlScan is a private company. It is classified as corporate owned and is currently operating.
When was ControlScan founded?
ControlScan was founded in 2018. It employs 51 to 100 people.
Where is ControlScan based?
ControlScan is headquartered in Atlanta, United States, in the North America region.
How does ControlScan make money?
Four revenue lines are on record. Managed Security Services are the primary driver. The others are compliance Solutions, merchant Risk Management and small Business PCI Compliance.
Who are ControlScan's main competitors?
Direct peers on record are Trustwave, Coalfire, SecurityMetrics, Trustwave (SecureTrust confusion note), Schellman & Co. and A-LIGN. Broad incumbents are Optiv Security, Verizon Cybersecurity Services and Rapid7. Hyperproof is listed as an emerging player.
Does ControlScan have an API?
No public API is recorded for ControlScan.
What industry is ControlScan in?
ControlScan's product category is Cybersecurity & PCI Compliance Services. Its primary akta.pro industry code is BPAKADAC, Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX), with a secondary code of HDADAIAH, Controls & Continuous Compliance Monitoring. Its NAICS code is 561621 and its SIC code is 7373.