ControlScan

What ControlScan does

ControlScan, founded in 2005 and headquartered in Atlanta, originally operated as a provider of PCI compliance and security solutions for small- and medium-sized merchants. In 2021, ControlScan was acquired by VikingCloud (founded 2018) and now operates as a wholly-owned subsidiary brand, with VikingCloud, Inc. as the parent and SecureTrust retained as a sub-brand for small business PCI compliance. Following the acquisition, the combined entity has repositioned itself as an integrated cybersecurity and compliance company, serving both enterprise multi-location operators and the long-tail SMB segment.

The company's core technology is the AI-powered Asgard Platform, which unifies managed security services (network security, endpoint security, threat detection and response, vulnerability scanning, penetration testing, digital forensics) with compliance services (PCI DSS, HIPAA, risk management, data privacy) and merchant risk management offerings (CCS Advantage, Cyber Risk Defense, Web Risk Monitoring, Secure Payment Solution). The platform is supported by 22 granted patents and a proprietary telemetry base that stops 33+ billion client cybersecurity threat events each month. The company also retains 100+ Qualified Security Assessors (QSAs) across 16 countries, positioning it as a global leader in PCI compliance delivery. Scale signals include 4+ million business locations protected, 300+ corporate brands under management, 70+ countries served, and a 98% customer retention rate.

The business model is primarily subscription-based recurring revenue from managed security and compliance services, with annual billing cycles and quote-based pricing tied to organization size and number of business locations. The go-to-market combines enterprise direct sales with dedicated account teams, a self-serve SMB channel under the SecureTrust brand, and partnership/reseller programs. Customer segments span enterprise multi-location operators in verticals such as retail, hospitality, healthcare, fuel and convenience, travel and tourism, pharmacy, restaurants, and auto service, alongside small business merchants requiring affordable PCI DSS compliance.

Name

ControlScan

Legal name

Viking Cloud, Inc.

Website

https://controlscan.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

51–100 employees

Short description

ControlScan, a wholly-owned subsidiary of VikingCloud, provides AI-powered cybersecurity and PCI compliance services through the Asgard Platform, serving enterprise multi-location operators and small business merchants across 70+ countries with 4+ million protected locations.

Ownership category

akta.pro rank

Product category

Cybersecurity & PCI Compliance Services

NAICS

Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)

akta.pro secondary industries

Controls & Continuous Compliance Monitoring (HDADAIAH), Data Privacy, Consent & Compliance Management (HDAEADAG)

Keywords

• PCI compliance services
• Managed security services
• Cybersecurity compliance
• Payment card security
• Merchant risk management

Headquarters

HQ city

Atlanta

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed security services including network security, endpoint security, threat detection and response, vulnerability scanning, penetration testing, and digital forensics.
2. Compliance Solutions: PCI compliance services including QSA assessments, HIPAA compliance, risk management, and data privacy solutions for enterprise and merchant customers.
3. Merchant Risk Management: Web risk monitoring, cyber risk defense, secure payment solutions, and partnership programs for merchant risk management.
4. Small Business PCI Compliance: SecureTrust PCI Manager for small businesses - fast, affordable, simple PCI compliance solutions for merchants.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

ControlScan delivers managed cybersecurity and compliance services for merchants and multi-location enterprises, with a core focus on PCI DSS compliance assessments, network/endpoint security, threat detection and response, vulnerability scanning, penetration testing, digital forensics, and merchant risk management (including HIPAA compliance and data privacy). Its offerings are unified through the AI-powered Asgard Platform, and complemented by the SecureTrust PCI Manager self-serve product for small business merchants.

Product overview

VikingCloud offers a unified platform-plus-modules architecture centered on The Asgard Platform®, an AI-powered risk mitigation platform. The core portfolio includes cybersecurity services (Managed Security Services, Network Security, Endpoint Security, Threat Detection & Response) and compliance solutions (PCI Compliance, Risk Management, HIPAA Compliance, Data Privacy). Supporting modules include security testing (Penetration Testing, Vulnerability Scanning, Digital Forensics), merchant risk management (CCS Advantage, Cyber Risk Defense, Web Risk Monitoring, Secure Payment Solution, Partnership Programs), and the small business-focused SecureTrust PCI Manager. The Asgard Platform serves as the central hub providing unified access to all services, enabling 24x7 risk mitigation decisions across 4+ million business locations.

Differentiator

Problem solved

Functional benefit

Brands

• SecureTrust: PCI compliance and security solutions brand for small businesses, offering SecureTrust PCI Manager for Small Business

Products and services

• The Asgard Platform AI-powered risk mitigation platform that gives organizations unified 24x7 access to VikingCloud's cybersecurity and compliance services, enabling faster, informed, predictive and cost-effective risk mitigation decisions for enterprise and merchant customers.
• Managed Security Services Comprehensive managed cybersecurity service for enterprises and multi-location merchants, combining network security, endpoint security, threat detection and response, vulnerability scanning, penetration testing and digital forensics to keep business locations protected, connected, and audit-ready.
• PCI Compliance Global PCI DSS compliance service delivered through 100+ QSAs in 16 countries, helping enterprise and merchant customers achieve and maintain PCI DSS certification and audit readiness.
• Risk Management Enterprise risk assessment and risk management services that help organizations identify, evaluate, and mitigate cybersecurity and compliance risks across their environment.
• HIPAA Compliance HIPAA compliance service for healthcare providers and pharmacy merchants needing to protect protected health information (PHI) and meet healthcare regulatory requirements.
• SecureTrust PCI Manager for Small Business Fast, affordable, simple PCI compliance self-serve solution for small business merchants, sold via a 'Buy Now' e-commerce flow under the SecureTrust brand and trusted by millions of small merchants.
• Threat Detection and Response Continuous monitoring and response service for cybersecurity threats across the enterprise, delivered 24x7 by VikingCloud's security operations.
• Network Security Managed network security service that protects enterprise and multi-location network infrastructure and connectivity.
• Endpoint Security Endpoint security service for protecting endpoints (POS systems, workstations, devices) across distributed business locations.
• Penetration Testing Offensive security testing service that identifies exploitable vulnerabilities in enterprise and merchant systems, networks, and applications.
• Vulnerability Scanning Automated scanning service to identify security vulnerabilities across networks and systems for enterprise and merchant customers.
• Digital Forensics Services Forensic investigation and analysis service for security incidents, providing incident response support for enterprise and merchant customers.
• Data Privacy Data privacy compliance and protection services for organizations that need to meet data privacy regulatory obligations.
• Web Risk Monitoring Continuous monitoring service for web-based risks and threats targeting merchant and enterprise web properties.
• Cyber Risk Defense Proactive cyber risk defense services that protect merchants from targeted cyber threats.
• Secure Payment Solution Secure payment processing and protection solution for merchants handling card payments.
• CCS Advantage Merchant risk management and compliance advantage program designed to give merchants an integrated approach to payment security and compliance.
• Partnership Programs Partner enablement programs for resellers, ISVs, and merchant risk management partners that deliver ControlScan/VikingCloud cybersecurity and compliance offerings to their customers.

Quantifiable outcome

• 98% customer retention rate
• +3 more outcomes

Named customers6 records

Segments9 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Two partnerships are on record, tiered minor.

• Jula HoldingminorOthersJula Holding, a Swedish retailer, partnered with VikingCloud for ongoing PCI DSS compliance, gaining the knowledge and structure required to ensure continuous compliance.
• Rely ITminorImplementation/ SI/ Consulting PartnerRely IT collaborated with VikingCloud for technical project support and compliance assistance, leveraging VikingCloud's expertise for PCI assessments.

Scale indicators7 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Trustwave: Trustwave is a direct peer to VikingCloud/ControlScan — a major cybersecurity and PCI compliance services provider offering managed security, QSA-led PCI assessments, and merchant risk management to mid-market and enterprise merchants globally.
• Coalfire: Coalfire is a leading pure-play cybersecurity advisory and PCI compliance firm offering QSA-led assessments, penetration testing, and managed compliance services — directly overlapping VikingCloud/ControlScan's core compliance practice.
• SecurityMetrics: SecurityMetrics specializes in PCI compliance scanning, vulnerability assessment, and merchant cybersecurity with strong SMB focus — directly competing with the SecureTrust brand and VikingCloud's small-business compliance offering.
• Trustwave (SecureTrust confusion note): SecureTrust was historically a GoDaddy brand for SSL and compliance; VikingCloud now operates a SecureTrust brand for SMB PCI compliance. Note naming overlap: securetrust.com currently redirects between VikingCloud's SMB site and historical Trustwave/SecureTrust properties, making it a direct comparison point on SMB PCI compliance UX and pricing.
• Schellman & Co. Schellman is a large specialized compliance and cybersecurity advisory firm offering PCI DSS, SOC 2, HIPAA, ISO 27001 assessments — a direct QSA-driven peer competing for enterprise compliance mandates.
• A-LIGN: A-LIGN is a fast-growing compliance-focused cybersecurity firm specializing in PCI DSS, SOC 2, HITRUST and ISO assessments with a tech-enabled delivery model — directly comparable to VikingCloud's Asgard-enabled compliance practice.

Broad incumbents

• Optiv Security: Optiv is a broad cybersecurity solutions integrator offering managed security, GRC, and compliance advisory across enterprise clients; overlaps with VikingCloud's enterprise compliance and risk management practice but as part of a wider security portfolio.
• Verizon Cybersecurity Services: Verizon offers managed security and PCI compliance services built on its Threat Research Advisory Centre — a broad incumbent competing in the same enterprise compliance/cybersecurity tier as VikingCloud.
• Rapid7: Rapid7 provides managed detection and response, vulnerability management, and compliance automation via InsightConnect — a broader platform incumbent whose vulnerability management and compliance reporting competes with VikingCloud's stack.

Emerging players

• Hyperproof: Hyperproof is an emerging GRC/continuous compliance automation platform focused on SOC 2, ISO 27001, and PCI evidence collection — an emerging player intersecting VikingCloud's compliance practice as buyers shift to software-led compliance orchestration.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/ControlScan
• Facebookfacebook.com/group.php
• LinkedInlinkedin.com/company/controlscan

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries1 record

Funding overview

Funding rounds9 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A2 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ControlScan