366 Security and Compliance
366 Security and Compliance provides cybersecurity and compliance consulting (PCI DSS, ISO 27001, GDPR), penetration testing, and security training to European enterprises. It also sells Sherlock, a proprietary card data discovery tool, and acts as a registered PCI Security Standards Council certifier.
- Company typePrivate
- Founded-
- HeadquartersRome, Italy
- Headcount1–10
- GTM typeB2B
- OfferingServices
What 366 Security and Compliance does
366 Security and Compliance S.r.l. is a privately held Italian cybersecurity and compliance consultancy headquartered in Rome, with branch offices in Stockholm, Sweden and Istanbul, Turkey, serving enterprise clients across Europe. The firm delivers professional services spanning PCI DSS advisory and certification, ASV scanning, ISO 27001 ISMS consulting, GDPR compliance, penetration testing, vulnerability assessments, secure code review, and structured security training (secure coding, security awareness, security design). It operates as a registered certifier for the PCI Security Standards Council and an Approved Scanning Vendor, with PCI QSA and PCI PA-QSA certified consultants on staff.
366 Security and Compliance firmographics
Firmographics- Name
- 366 Security and Compliance
- Legal name
- 366 Security and Compliance S.r.l.
- Website
- https://www.366secom.com
- Company type
- Private
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- 366 Security and Compliance provides cybersecurity and compliance consulting (PCI DSS, ISO 27001, GDPR), penetration testing, and security training to European enterprises. It also sells Sherlock, a proprietary card data discovery tool, and acts as a registered PCI Security Standards Council certifier.
- Ownership category
- akta.pro rank
366 Security and Compliance industry classification
Industry- Product category
- Cybersecurity & Compliance Consulting
- NAICS
- Investigation and Security Services (5616), Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)
- akta.pro secondary industries
- Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), POS Certification, Testing & Compliance (EMVCo, PCI PTS/PCI DSS) (FSAMADAL), Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)
Keywords
Where 366 Security and Compliance is headquartered
LocationHeadquarters
- HQ city
- Rome
- HQ country
- Italy
- HQ region
- Europe
Offices3 records
Markets served
366 Security and Compliance business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Cybersecurity Services: Professional services including penetration testing, vulnerability assessments, secure code review, and security consultancy. Delivered by expert consultants with 15+ years of ICT experience.
- Compliance Services: Compliance advisory and certification support for PCI DSS, ASV scanning, ISO 27001, and GDPR. Includes registered certifier services for PCI standards.
- Training Services: Security awareness training, secure coding training, and security design training programs for organizations to achieve long-term cultural and behavioral change.
- Sherlock Card Data Discovery Tool: Product licensing with modular and scalable licensing model. Provides unlimited use with no limits on files scanned, cards found, or servers scanned.
Go-to-market motion1 record
Distribution channels1 record
Marketing channels2 records
366 Security and Compliance product offering
Product offeringCore offering
366 Security and Compliance provides cybersecurity and compliance advisory, audit, testing, and training services to enterprises, including PCI DSS certification, ASV scanning, ISO 27001 consulting, and GDPR advisory. The company also develops and licenses Sherlock, a proprietary card data discovery tool focused on PAN detection across databases, filesystems, and documents for PCI DSS v.4 compliance. Services are delivered by an international team of certified QSAs and PA-QSAs with 15-20+ years of experience.
Product overview
366 Security and Compliance offers a portfolio of cybersecurity and compliance services alongside its core product, the Sherlock Card Data Discovery Tool. Sherlock is a standalone data discovery tool designed for PAN detection and PCI DSS v.4 compliance. The company also provides professional services including penetration testing, vulnerability assessment, secure code review, security consultancy, and training (secure coding, security awareness, security design). The company operates as a registered PCI DSS certifier and offers compliance services for PCI DSS, ASV Scanning, ISO 27001, and GDPR.
Differentiator
Problem solved
Functional benefit
Brands
- Sherlock: Sherlock Card Discovery Tool - a data discovery tool focused on PAN (Primary Account Number) detection that helps organizations achieve PCI DSS v.4 Compliance. It supports multiple databases, filesystems, and documents across Windows, Linux, and Mac OS.
Products and services
- Sherlock Card Data Discovery Tool Proprietary software tool that scans databases, filesystems, compressed archives, Office documents, and PDFs across Windows, Linux, and Mac OS to detect unprotected Primary Account Numbers (PANs). Uses the Luhn check algorithm to reduce false positives and supports PCI DSS v.4 compliance initiatives. Licensed modularly to organizations for unlimited file, card, and server scanning.
- Compliance Advisory & Certification Services Compliance advisory and registered certifier services covering PCI DSS, ASV scanning, ISO 27001, and GDPR for merchants, service providers, and other organizations handling cardholder or personal data.
- Cybersecurity Services
- Security Training Programs
Companies that use 366 Security and Compliance
Customer profileNamed customers4 records
Segments3 records
Ideal customer profiles3 records
366 Security and Compliance technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature6 records
366 Security and Compliance partnerships and signals
Strategic signalScale indicators1 record
Recent moves5 records
Expansion highlights5 records
366 Security and Compliance competitors and assessment
Company assessmentDirect peers
- Coalfire: Coalfire is a US-headquartered cybersecurity advisory that is one of the largest PCI QSA firms globally, offering PCI DSS assessments, ASV scanning, ISO 27001 advisory and penetration testing — directly comparable to 366's full PCI/ISO/GDPR advisory stack.
- Trustwave: Trustwave is a global cybersecurity company that provides PCI DSS QSA/ASV services, penetration testing, vulnerability assessment and managed security, overlapping almost exactly with 366's cybersecurity and compliance services portfolio.
- SecurityMetrics: SecurityMetrics is a PCI-focused QSA/ASV provider offering PCI DSS audits, ASV scanning, and card-data discovery tooling, directly competing with 366's PCI certification practice and Sherlock-style card discovery capability.
- ControlCase: ControlCase provides PCI DSS, ISO 27001 and GDPR compliance services along with a proprietary GRC/compliance platform, mirroring 366's combination of compliance advisory plus a recurring software product.
- SecureTrust (Trustwave spinoff): SecureTrust is a PCI-focused QSA/ASV division offering PCI DSS compliance, ASV scanning and card-data discovery products, directly competing with 366's PCI compliance and Sherlock card discovery offerings.
Broad incumbents
- Verizon Cyber Security Consulting: Verizon's cyber security consulting practice delivers PCI DSS QSA/ASV services, penetration testing and ISO advisory as part of a much broader telecom-scale portfolio, competing with 366 for enterprise PCI work but with vastly larger resources.
- NCC Group: NCC Group is a UK-based cyber security and compliance firm offering PCI DSS QSA, ISO 27001, GDPR advisory, and penetration testing across Europe — a comparable European-headquartered incumbent against which 366 competes regionally.
- TÜV SÜD Management Service: TÜV SÜD is a global certification body that issues ISO 27001 certificates and provides PCI-related advisory through affiliates, competing with 366 for ISO 27001 and adjacent compliance work in European enterprises.
- SGS Digital Trust Services: SGS is a global testing, inspection and certification body that issues ISO 27001 and related information security certifications across Europe, competing with 366 for ISO 27001 certification mandates.
Emerging players
- Bishop Fox: Bishop Fox is a US-based offensive-security firm specializing in penetration testing, red teaming and security assessments, overlapping with 366's cybersecurity services but without the same QSA/ISO certification scope.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
366 Security and Compliance social profiles
Digital presence366 Security and Compliance compliance and trust
Trust signalCompliance3 records
366 Security and Compliance financial estimates
Financial estimateRevenue estimate
Valuation estimate
366 Security and Compliance leadership team
Management profileNumber of profiles
Profiles2 records
366 Security and Compliance funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
366 Security and Compliance M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about 366 Security and Compliance
What does 366 Security and Compliance do?
366 Security and Compliance provides cybersecurity and compliance advisory, audit, testing, and training services to enterprises, including PCI DSS certification, ASV scanning, ISO 27001 consulting, and GDPR advisory. The company also develops and licenses Sherlock, a proprietary card data discovery tool focused on PAN detection across databases, filesystems, and documents for PCI DSS v.4 compliance. Services are delivered by an international team of certified QSAs and PA-QSAs with 15-20+ years of experience.
Is 366 Security and Compliance a public or private company?
366 Security and Compliance is a private company. It is classified as unknown and is currently operating.
When was 366 Security and Compliance founded?
366 Security and Compliance was founded in -1. It employs 1 to 10 people.
Where is 366 Security and Compliance based?
366 Security and Compliance is headquartered in Rome, Italy, in the Europe region.
How does 366 Security and Compliance make money?
Four revenue lines are on record. Cybersecurity Services are the primary driver. The others are compliance Services, training Services and sherlock Card Data Discovery Tool.
Who are 366 Security and Compliance's main competitors?
Direct peers on record are Coalfire, Trustwave, SecurityMetrics, ControlCase and SecureTrust (Trustwave spinoff). Broad incumbents are Verizon Cyber Security Consulting, NCC Group, TÜV SÜD Management Service and SGS Digital Trust Services. Bishop Fox is listed as an emerging player.
Does 366 Security and Compliance have an API?
No public API is recorded for 366 Security and Compliance.
What industry is 366 Security and Compliance in?
366 Security and Compliance's product category is Cybersecurity & Compliance Consulting. Its primary akta.pro industry code is BPAKADAC, Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX), with a secondary code of BPAKAHAG, Vulnerability Assessment, Security Audits & Compliance Testing. Its NAICS code is 5616 and its SIC code is 7370.