SecureTrust
SecureTrust is a PCI DSS compliance provider serving 4+ million small business merchants globally through a self-serve subscription platform called PCI Manager priced at $40/month, operating as a subsidiary brand of VikingCloud.
- Company typePrivate
- Founded2001
- HeadquartersChicago, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What SecureTrust does
SecureTrust is a PCI DSS compliance provider serving 4+ million small business merchants across 70+ countries, operating as a subsidiary brand under Viking Cloud, Inc. (a Sysnet Global Solutions Group entity) since the October 2021 acquisition from Trustwave Holdings. Following the ownership change, all enterprise security services (vulnerability scanning, penetration testing, enterprise PCI compliance, risk management, data privacy, web risk monitoring, and processor/acquirer programs) were migrated to the VikingCloud brand, and SecureTrust was repositioned to serve exclusively the small business market with PCI compliance. The company maintains PCI ASV (Approved Scanning Vendor) and QSA (Qualified Security Assessor) credentials from the PCI Security Standards Council and operates across 70+ countries with 100+ security consultants.
The core product is PCI Manager, a self-serve subscription platform priced at $40/month that bundles a guided multi-language self-assessment questionnaire (SAQ), PCI ASV-certified external vulnerability scanning with monthly/quarterly/re-scan scheduling, and instant Attestation of Compliance (AoC) generation. The platform is delivered through a 100% online, product-led growth model: customers purchase and renew via direct website checkout with no paperwork and no IT expertise required, supported by 24-hour human customer support. Historically, SecureTrust also operated a digital certificate authority business (SSL/TLS, EV, OV, wildcard, private CA, MPKI, ACME, two-factor authentication), which has since been divested to SSL.com.
The revenue model is recurring subscription at a flat $40/month with annual renewal options, distributed entirely through self-serve online channels (purchase portal and dedicated renewal portal) and content marketing/SEO targeting PCI compliance keywords. The customer base is a long tail of non-technical micro and small merchants across restaurants, retail, auto repair, travel agencies, cafés, hospitality, pet services, and similar verticals. Leadership includes compliance-credentialed directors (QSA, PCIP, CDPSE, ISO 27001 Lead Auditor) covering North America, Asia Pacific, and EMEA delivery, and the company is headquartered in Chicago with global operations inherited from VikingCloud.
SecureTrust firmographics
Firmographics- Name
- SecureTrust
- Legal name
- SecureTrust, Inc.
- Website
- https://securetrust.com
- Company type
- Private
- Founded year
- 2001
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- SecureTrust is a PCI DSS compliance provider serving 4+ million small business merchants globally through a self-serve subscription platform called PCI Manager priced at $40/month, operating as a subsidiary brand of VikingCloud.
- Ownership category
- akta.pro rank
SecureTrust industry classification
Industry- Product category
- PCI Compliance Software
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- akta.pro primary industry
- POS Security, Encryption & Key Management (P2PE, HSM, Key Injection) (FSAMADAK)
- akta.pro secondary industries
- 3D Secure, Authentication & Access Control (FSAMALAD), Marketplace & Platform Trust & Safety (Buyer/Seller Abuse) (HDADALAI)
Keywords
Where SecureTrust is headquartered
LocationHeadquarters
- HQ city
- Chicago
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
SecureTrust business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- PCI Manager Subscription: Monthly subscription service for PCI compliance validation and vulnerability scanning. Sold directly to small businesses at $40/month with annual renewal option. Includes SAQ, vulnerability scanning, and Attestation of Compliance.
- Digital Certificates: SSL/TLS certificates and related digital certificate products including Domain Server, Organization Server, Wildcard Server, and Extended Validation Server certificates. Note: VikingCloud's digital certificate business was acquired by SSL.com.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | PCI Manager for Small Businesses - $40/month |
Go-to-market motion1 record
Distribution channels2 records
Marketing channels3 records
SecureTrust product offering
Product offeringCore offering
SecureTrust sells PCI compliance software (the PCI Manager subscription at $40/month) and digital certificate products primarily to small businesses through a 100% online, self-serve model. The PCI Manager bundles a guided self-assessment questionnaire, PCI ASV-certified external vulnerability scanning, and instant Attestation of Compliance generation. SecureTrust also operates a digital certificate authority issuing SSL/TLS, wildcard, EV, and organization-validated certificates, while legacy enterprise security services (penetration testing, risk management, web risk monitoring) have migrated to parent brand VikingCloud.
Product overview
SecureTrust offers a dual-portfolio approach: a consumer-facing PCI compliance suite for small businesses under the PCI Manager brand (priced at $40/month), and an enterprise security and compliance platform under VikingCloud that includes vulnerability scanning, penetration testing, risk management, and data privacy services. The company also operates a Digital Certificate Authority business providing domain, organization, and extended validation server certificates, two-factor authentication, certificate lifecycle management, private CA services, and ACME protocol support. All enterprise services have migrated to VikingCloud, with SecureTrust now focused exclusively on small business PCI compliance.
Differentiator
Problem solved
Functional benefit
Brands
- PCI Manager: Comprehensive, affordable PCI compliance solution trusted by millions of small businesses, designed to protect customers and the bottom line.
- VikingCloud Digital CA
Products and services
- PCI Manager Comprehensive, affordable PCI compliance subscription for small business merchants, providing guided self-assessment questionnaires (SAQ) in multiple languages, integrated PCI ASV-certified external vulnerability scanning with monthly/quarterly/re-scan scheduling, and instant Attestation of Compliance (AoC) generation for PCI DSS compliance.
- Digital Certificates Control Center (MPKI) Web-based PKI solution for managing digital certificate issuance, renewal, and lifecycle management for server certificates and enterprise certificate deployments.
- Vulnerability Scanning PCI ASV-certified external vulnerability scanning with monthly, quarterly, and on-demand re-scan scheduling for enterprise organizations; designed to meet PCI DSS requirements.
- Penetration Testing Security testing service to identify vulnerabilities and assess the effectiveness of security controls, including testing of segmentation controls for PCI DSS compliance.
- PCI Compliance for Enterprise Enterprise-grade PCI DSS compliance program including Qualified Security Assessor (QSA) services, self-assessment consulting, and compliance validation.
- Web Risk Monitoring Continuous monitoring service to identify and assess web-based security risks and threats to enterprise environments.
- Risk Management Comprehensive risk management and regulatory compliance services to help organizations make informed, predictive risk mitigation decisions.
- Data Privacy Data privacy compliance services addressing regulations such as CCPA, helping organizations protect sensitive data and maintain regulatory compliance.
- Programs for Processors, Acquirers, and ISOs Specialized compliance programs tailored for payment processors, acquirers, and independent sales organizations (ISOs) in the payment ecosystem.
- Domain Server Certificates Domain-validated SSL/TLS certificates for securing websites with basic identity verification.
- Organization Server Certificates Organization-validated SSL/TLS certificates providing enhanced identity verification beyond domain validation.
- Wildcard Server Certificates SSL/TLS certificates that secure a domain and all its subdomains with a single certificate.
- Extended Validation (EV) Server Certificates Highest-assurance SSL/TLS certificates with extended validation providing green address bar indicator and maximum warranty.
- Two Factor Authentication Two-factor authentication solutions for VPN and enterprise access control using digital certificates.
- Certificate Lifecycle Management Automated certificate discovery, issuance, renewal, and revocation management to maintain PKI security at scale.
- Private Certificate Authority Enterprise private CA service for internal networks and IoT devices, built on audited public CA infrastructure with high availability and security.
- ACME Protocol Support Automated Certificate Management Environment (ACME) protocol support for automated certificate issuance and renewal.
Quantifiable outcome
- Trusted by millions of small business locations around the globe every day
- +2 more outcomes
Companies that use SecureTrust
Customer profileNamed customers7 records
Segments9 records
Ideal customer profiles2 records
SecureTrust technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
SecureTrust partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- SSL.commajorSSL.com acquired VikingCloud's digital certificate business. For more information about the SSL.com acquisition of VikingCloud Certificate Business, read the press release on VikingCloud's website.
Scale indicators5 records
Recent moves6 records
Expansion highlights4 records
SecureTrust competitors and assessment
Company assessmentBroad incumbents
- Qualys: Cloud-based vulnerability management and compliance scanning platform (QualysGuard / VMDR) with PCI ASV capabilities. Comparable to SecureTrust's ASV-certified scanning and PCI compliance workflow as a broader, more enterprise-skewed incumbent in the same scanning/compliance category.
- Trustwave: Former owner of the SecureTrust business (acquired by Sysnet in 2021) and a broad cybersecurity and PCI compliance provider with enterprise and SMB offerings. Comparable as a historical operator of the same franchise and as an incumbent providing overlapping PCI QSA/ASV and managed compliance services.
- DigiCert: Leading enterprise certificate authority offering TLS, PKI, and IoT/device identity. Comparable to SecureTrust's historical enterprise CA and PKI products (now at SSL.com), as a broader incumbent in the certificate and credential management market.
- Sysnet: Grandparent company of SecureTrust and a global provider of cybersecurity and compliance solutions for SMBs, enterprises, and acquirers. Comparable because Sysnet's SMB compliance and merchant security offerings overlap directly with SecureTrust's PCI Manager positioning and target customer.
- VikingCloud: Direct parent brand of SecureTrust and a broader cybersecurity and compliance provider serving enterprise merchants, acquirers, and processors. Highly comparable because it operates the enterprise tier of the same PCI/compliance product line that SecureTrust historically delivered, and now houses all enterprise solutions previously sold under SecureTrust.
Direct peers
- SecurityMetrics: Direct competitor in SMB-focused PCI DSS compliance, ASV scanning, and compliance self-assessment tools, serving merchants of similar size and vertical mix. Closely comparable product set, pricing model, and target buyer to SecureTrust's PCI Manager.
- A-LIGN: Cybersecurity and compliance assessor providing PCI DSS, SOC 2, ISO 27001, and HITRUST services to SMB and mid-market clients. Comparable target customer profile and audit-driven delivery model to SecureTrust's compliance services.
- Sectigo: Commercial certificate authority providing TLS/SSL, digital certificates, and PKI lifecycle management – the product category divested by SecureTrust/VikingCloud to SSL.com. Comparable as a peer in the same digital certificate and credential management space.
- Schellman & Co: Top-tier IT compliance assessor (PCI QSA, SOC, ISO, FedRAMP) serving technology and financial services clients. Comparable as a QSA-credentialed assessor competing for the same compliance engagements historically serviced by SecureTrust's enterprise team.
- Coalfire: PCI QSA-led cybersecurity advisory and compliance assessor serving enterprises and payment processors. Comparable to SecureTrust's QSA-driven enterprise heritage and to the compliance-assessment segment that has now moved to VikingCloud.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
SecureTrust social profiles
Digital presenceSecureTrust financial estimates
Financial estimateRevenue estimate
Valuation estimate
SecureTrust leadership team
Management profileNumber of profiles
Profiles3 records
SecureTrust funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SecureTrust M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SecureTrust
What does SecureTrust do?
SecureTrust sells PCI compliance software (the PCI Manager subscription at $40/month) and digital certificate products primarily to small businesses through a 100% online, self-serve model. The PCI Manager bundles a guided self-assessment questionnaire, PCI ASV-certified external vulnerability scanning, and instant Attestation of Compliance generation. SecureTrust also operates a digital certificate authority issuing SSL/TLS, wildcard, EV, and organization-validated certificates, while legacy enterprise security services (penetration testing, risk management, web risk monitoring) have migrated to parent brand VikingCloud.
Is SecureTrust a public or private company?
SecureTrust is a private company. It is classified as corporate owned and is currently operating.
When was SecureTrust founded?
SecureTrust was founded in 2001. It employs 101 to 250 people.
Where is SecureTrust based?
SecureTrust is headquartered in Chicago, United States, in the North America region.
How does SecureTrust make money?
Two revenue lines are on record. PCI Manager Subscription is the primary driver. The others are digital Certificates.
Who are SecureTrust's main competitors?
Broad incumbents on record are Qualys, Trustwave, DigiCert, Sysnet and VikingCloud. Direct peers are SecurityMetrics, A-LIGN, Sectigo, Schellman & Co and Coalfire.
Does SecureTrust have an API?
No public API is recorded for SecureTrust.
What industry is SecureTrust in?
SecureTrust's product category is PCI Compliance Software. Its primary akta.pro industry code is FSAMADAK, POS Security, Encryption & Key Management (P2PE, HSM, Key Injection), with a secondary code of FSAMALAD, 3D Secure, Authentication & Access Control. Its NAICS code is 561621.