SecureTrust

What SecureTrust does

SecureTrust is a PCI DSS compliance provider serving 4+ million small business merchants across 70+ countries, operating as a subsidiary brand under Viking Cloud, Inc. (a Sysnet Global Solutions Group entity) since the October 2021 acquisition from Trustwave Holdings. Following the ownership change, all enterprise security services (vulnerability scanning, penetration testing, enterprise PCI compliance, risk management, data privacy, web risk monitoring, and processor/acquirer programs) were migrated to the VikingCloud brand, and SecureTrust was repositioned to serve exclusively the small business market with PCI compliance. The company maintains PCI ASV (Approved Scanning Vendor) and QSA (Qualified Security Assessor) credentials from the PCI Security Standards Council and operates across 70+ countries with 100+ security consultants.

The core product is PCI Manager, a self-serve subscription platform priced at $40/month that bundles a guided multi-language self-assessment questionnaire (SAQ), PCI ASV-certified external vulnerability scanning with monthly/quarterly/re-scan scheduling, and instant Attestation of Compliance (AoC) generation. The platform is delivered through a 100% online, product-led growth model: customers purchase and renew via direct website checkout with no paperwork and no IT expertise required, supported by 24-hour human customer support. Historically, SecureTrust also operated a digital certificate authority business (SSL/TLS, EV, OV, wildcard, private CA, MPKI, ACME, two-factor authentication), which has since been divested to SSL.com.

The revenue model is recurring subscription at a flat $40/month with annual renewal options, distributed entirely through self-serve online channels (purchase portal and dedicated renewal portal) and content marketing/SEO targeting PCI compliance keywords. The customer base is a long tail of non-technical micro and small merchants across restaurants, retail, auto repair, travel agencies, cafés, hospitality, pet services, and similar verticals. Leadership includes compliance-credentialed directors (QSA, PCIP, CDPSE, ISO 27001 Lead Auditor) covering North America, Asia Pacific, and EMEA delivery, and the company is headquartered in Chicago with global operations inherited from VikingCloud.

Name

SecureTrust

Legal name

SecureTrust, Inc.

Website

https://securetrust.com

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

101–250 employees

Short description

SecureTrust is a PCI DSS compliance provider serving 4+ million small business merchants globally through a self-serve subscription platform called PCI Manager priced at $40/month, operating as a subsidiary brand of VikingCloud.

Ownership category

akta.pro rank

Product category

PCI Compliance Software

NAICS

Security Systems Services (except Locksmiths) (561621)

akta.pro industry

PRIMARYFSAMADAK

POS Security, Encryption & Key Management (P2PE, HSM, Key Injection)

Financial & Insurance/Payments & Transaction Processing/Point-of-Sale (POS) Payments & Terminals

SECONDARYFSAMALAD

3D Secure, Authentication & Access Control

Financial & Insurance/Payments & Transaction Processing/Payment Fraud, Risk & Chargeback Management

SECONDARYHDADALAI

Marketplace & Platform Trust & Safety (Buyer/Seller Abuse)

Hardware, Technology & Telecom/Cybersecurity/Fraud, Bot & Abuse Prevention

Keywords

• PCI compliance software
• Vulnerability scanning
• Digital certificates
• Payment security
• PCI DSS validation

Headquarters

HQ city

Chicago

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. PCI Manager Subscription: Monthly subscription service for PCI compliance validation and vulnerability scanning. Sold directly to small businesses at $40/month with annual renewal option. Includes SAQ, vulnerability scanning, and Attestation of Compliance.
2. Digital Certificates: SSL/TLS certificates and related digital certificate products including Domain Server, Organization Server, Wildcard Server, and Extended Validation Server certificates. Note: VikingCloud's digital certificate business was acquired by SSL.com.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

SecureTrust sells PCI compliance software (the PCI Manager subscription at $40/month) and digital certificate products primarily to small businesses through a 100% online, self-serve model. The PCI Manager bundles a guided self-assessment questionnaire, PCI ASV-certified external vulnerability scanning, and instant Attestation of Compliance generation. SecureTrust also operates a digital certificate authority issuing SSL/TLS, wildcard, EV, and organization-validated certificates, while legacy enterprise security services (penetration testing, risk management, web risk monitoring) have migrated to parent brand VikingCloud.

Product overview

SecureTrust offers a dual-portfolio approach: a consumer-facing PCI compliance suite for small businesses under the PCI Manager brand (priced at $40/month), and an enterprise security and compliance platform under VikingCloud that includes vulnerability scanning, penetration testing, risk management, and data privacy services. The company also operates a Digital Certificate Authority business providing domain, organization, and extended validation server certificates, two-factor authentication, certificate lifecycle management, private CA services, and ACME protocol support. All enterprise services have migrated to VikingCloud, with SecureTrust now focused exclusively on small business PCI compliance.

Differentiator

Problem solved

Functional benefit

Brands

• PCI Manager: Comprehensive, affordable PCI compliance solution trusted by millions of small businesses, designed to protect customers and the bottom line.
• VikingCloud Digital CA

Products and services

• PCI Manager Comprehensive, affordable PCI compliance subscription for small business merchants, providing guided self-assessment questionnaires (SAQ) in multiple languages, integrated PCI ASV-certified external vulnerability scanning with monthly/quarterly/re-scan scheduling, and instant Attestation of Compliance (AoC) generation for PCI DSS compliance.
• Digital Certificates Control Center (MPKI) Web-based PKI solution for managing digital certificate issuance, renewal, and lifecycle management for server certificates and enterprise certificate deployments.
• Vulnerability Scanning PCI ASV-certified external vulnerability scanning with monthly, quarterly, and on-demand re-scan scheduling for enterprise organizations; designed to meet PCI DSS requirements.
• Penetration Testing Security testing service to identify vulnerabilities and assess the effectiveness of security controls, including testing of segmentation controls for PCI DSS compliance.
• PCI Compliance for Enterprise Enterprise-grade PCI DSS compliance program including Qualified Security Assessor (QSA) services, self-assessment consulting, and compliance validation.
• Web Risk Monitoring Continuous monitoring service to identify and assess web-based security risks and threats to enterprise environments.
• Risk Management Comprehensive risk management and regulatory compliance services to help organizations make informed, predictive risk mitigation decisions.
• Data Privacy Data privacy compliance services addressing regulations such as CCPA, helping organizations protect sensitive data and maintain regulatory compliance.
• Programs for Processors, Acquirers, and ISOs Specialized compliance programs tailored for payment processors, acquirers, and independent sales organizations (ISOs) in the payment ecosystem.
• Domain Server Certificates Domain-validated SSL/TLS certificates for securing websites with basic identity verification.
• Organization Server Certificates Organization-validated SSL/TLS certificates providing enhanced identity verification beyond domain validation.
• Wildcard Server Certificates SSL/TLS certificates that secure a domain and all its subdomains with a single certificate.
• Extended Validation (EV) Server Certificates Highest-assurance SSL/TLS certificates with extended validation providing green address bar indicator and maximum warranty.
• Two Factor Authentication Two-factor authentication solutions for VPN and enterprise access control using digital certificates.
• Certificate Lifecycle Management Automated certificate discovery, issuance, renewal, and revocation management to maintain PKI security at scale.
• Private Certificate Authority Enterprise private CA service for internal networks and IoT devices, built on audited public CA infrastructure with high availability and security.
• ACME Protocol Support Automated Certificate Management Environment (ACME) protocol support for automated certificate issuance and renewal.

Quantifiable outcome

• Trusted by millions of small business locations around the globe every day
• +2 more outcomes

Named customers7 records

Segments9 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• SSL.commajorStrategic or Co-development PartnerSSL.com acquired VikingCloud's digital certificate business. For more information about the SSL.com acquisition of VikingCloud Certificate Business, read the press release on VikingCloud's website.

Scale indicators5 records

Recent moves6 records

Expansion highlights4 records

Broad incumbents

• Qualys: Cloud-based vulnerability management and compliance scanning platform (QualysGuard / VMDR) with PCI ASV capabilities. Comparable to SecureTrust's ASV-certified scanning and PCI compliance workflow as a broader, more enterprise-skewed incumbent in the same scanning/compliance category.
• Trustwave: Former owner of the SecureTrust business (acquired by Sysnet in 2021) and a broad cybersecurity and PCI compliance provider with enterprise and SMB offerings. Comparable as a historical operator of the same franchise and as an incumbent providing overlapping PCI QSA/ASV and managed compliance services.
• DigiCert: Leading enterprise certificate authority offering TLS, PKI, and IoT/device identity. Comparable to SecureTrust's historical enterprise CA and PKI products (now at SSL.com), as a broader incumbent in the certificate and credential management market.
• Sysnet: Grandparent company of SecureTrust and a global provider of cybersecurity and compliance solutions for SMBs, enterprises, and acquirers. Comparable because Sysnet's SMB compliance and merchant security offerings overlap directly with SecureTrust's PCI Manager positioning and target customer.
• VikingCloud: Direct parent brand of SecureTrust and a broader cybersecurity and compliance provider serving enterprise merchants, acquirers, and processors. Highly comparable because it operates the enterprise tier of the same PCI/compliance product line that SecureTrust historically delivered, and now houses all enterprise solutions previously sold under SecureTrust.

Direct peers

• SecurityMetrics: Direct competitor in SMB-focused PCI DSS compliance, ASV scanning, and compliance self-assessment tools, serving merchants of similar size and vertical mix. Closely comparable product set, pricing model, and target buyer to SecureTrust's PCI Manager.
• A-LIGN: Cybersecurity and compliance assessor providing PCI DSS, SOC 2, ISO 27001, and HITRUST services to SMB and mid-market clients. Comparable target customer profile and audit-driven delivery model to SecureTrust's compliance services.
• Sectigo: Commercial certificate authority providing TLS/SSL, digital certificates, and PKI lifecycle management – the product category divested by SecureTrust/VikingCloud to SSL.com. Comparable as a peer in the same digital certificate and credential management space.
• Schellman & Co: Top-tier IT compliance assessor (PCI QSA, SOC, ISO, FedRAMP) serving technology and financial services clients. Comparable as a QSA-credentialed assessor competing for the same compliance engagements historically serviced by SecureTrust's enterprise team.
• Coalfire: PCI QSA-led cybersecurity advisory and compliance assessor serving enterprises and payment processors. Comparable to SecureTrust's QSA-driven enterprise heritage and to the compliance-assessment segment that has now moved to VikingCloud.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/securetrust

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SecureTrust