Let it be known that security metrics and first data run a under-handed scheme. let me explain... first data (a credit card processor) requires you be pci compliant otherwise they charge you a $25 a month fee. first data relys on securitymetrics.com to inform them when you are not complaint and then the fee hits your account. so in our case one of security metrics methods to make sure you are pci compliant is to scan your ip address monthly and in our case we have an dynamic ip address through at&t so it changes quite often. security metrics scans the ip we had several weeks ago that no longer applies to us and returns a negative result, reports it to first data and they in turn charge us the $25 month fee. we call first data and ask them to remove the fee (only after spotting it on monthly statement) and they say we will put in a request to have it credited but we can only credit one fee per 12 months. by the time you get your statement from first data you are already into the next billing cycle so sure enough you get hit with the fee again by them.
the process goes on and on and they continue to charge. securitymetrics has an option to let email you when you are not pci compliant which by the time you receive it and fix it (or in our case call them and tell them our ip address to the dsl at our office is dynamic please update it to....) it's too late and they already have reported to first data you are non complaint. the whole thing is a under-handed way to charge you $25 per month. we urge you to STAY AWAY FROM securitymetrics and first data! they will bilk you with fees such as this and many others.