7Security

BACKGROUND

I am the Chief Product Officer of Payment Scope UK Limited

Orchestr is a card payment orchestration platform: one integration for merchants to reach multiple acquirers, with our own card vault and hosted checkout. We are a technology provider, not in the flow of funds. I am the CPO and owned the PCI programme.

OPPORTUNITY / CHALLENGE

• PCI DSS v4.0.1 Level 1 Service Provider assessment for a new card platform, from scoping to the signed AOC, with the penetration test and ASV scans arranged

SOLUTION

Referral

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Referred to me
• Company values aligned

2-5 Employees

A first PCI DSS v4.0.1 Level 1 Service Provider assessment of a newly built cardholder data environment on AWS, with a fixed date: we could not take live card traffic before the AOC.

RESULTS & FEEDBACK

Compliant on every applicable requirement, no compensating controls, one low finding from the penetration test which is being retested, and live card traffic from 6 October. The scope documents, diagrams and the report describe the same environment, which is the outcome that matters for next year.

Weekly thread updates, a shared evidence repository, and fast turnarounds on questions.

• Virtual Meeting
• Email or Messaging App

The lead QSA raised a scope point of his own accord the day before the report was final, and explained the reasoning rather than quoting the requirement. The engagement included retests of findings at no extra cost.

Two things to improve: the evidence repository was upload-only for us, and a corrected report was reissued without a change note.

BACKGROUND

Please describe your company and position.

I am the Project Coordinator of PayPipes

Describe what your company does in a single sentence.

PayPipes is a payment platform that provides secure payment processing and connectivity infrastructure for merchants and financial partners

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• PCI DSS Level 1

SOLUTION

How did you find 7Security?

Online Search

Why did you select 7Security over others?

• High ratings
• Good value for cost
• Company values aligned

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

7Security acted as our Qualified Security Assessor for the full PCI DSS engagement — guiding us through the requirements, reviewing our evidence and documentation, running the assessment, and supporting us step by step toward Level 1.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The clearest outcome was achieving PCI DSS Level 1 compliance for our PayPipes platform — the core goal of the project. We moved through the assessment without any major surprises or roadblocks, kept the project on schedule thanks to fast feedback loops with the auditor and their team, and closed out review cycles quickly. Just as importantly, the process measurably strengthened our platform's overall security posture, leaving us with more robust controls and processes than we started with.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was professional and well-structured, and they delivered on time. The auditor and project team were highly responsive — fast feedback and quick answers kept everything moving — and they stayed flexible and accommodating throughout, which made the whole process feel manageable.

What was your primary form of communication with 7Security?

Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most was how accommodating and flexible they were, combined with a thorough, rigorous approach to their reviews. They struck a great balance between being easy to work with and holding a high bar on the actual assessment.

Are there any areas for improvement or something 7Security could have done differently?

Nothing significant — it was a genuinely positive experience and we'd happily work with them again.

BACKGROUND

Please describe your company and position.

I am the GRC of an online casino 

Describe what your company does in a single sentence.

Online casino

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• PCI DSS certification

SOLUTION

How did you find 7Security?

Referral

Why did you select 7Security over others?

• Close to my geographic location
• Good value for cost
• Referred to me

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

7Security delivered a full PCI DSS assessment, including scope validation, control testing, evidence review, compliance guidance, remediation recommendations, and final compliance reporting. Their collaborative approach, technical expertise, and practical recommendations helped us efficiently achieve compliance while improving our overall security posture.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

PCI DSS certification report

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project was well organized, with clear communication and realistic timelines throughout the engagement. Deliverables were provided on time, and the team was always responsive, professional, and available to address questions or discuss implementation approaches. Their proactive and collaborative style made the assessment process efficient and straightforward.

What was your primary form of communication with 7Security?

Virtual Meeting

What did you find most impressive or unique about this company?

What stood out most was their pragmatic and collaborative approach. Rather than acting solely as auditors, they served as trusted advisors throughout the engagement, providing clear explanations, practical guidance, and recommendations tailored to our environment. Their expertise and willingness to work alongside our team made the assessment process much more efficient and valuable.

Are there any areas for improvement or something 7Security could have done differently?

Overall, we had a very positive experience and did not encounter any significant issues during the engagement.

BACKGROUND

Please describe your company and position.

I am the Information Security Manager of PAYSTRAX

Describe what your company does in a single sentence.

PAYSTRAX is a European fintech company that provides card payment processing and acquiring services (online, in-store, and mobile) for merchants, holding Principal Membership licenses with Mastercard and Visa and is an authorised Payment Institution in both the EU and the UK. 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• chieve PCI DSS certification through a structured, expert-guided process — including a smooth transition to PCI DSS v4.0.1
• Strengthen our security posture through hands-on penetration testing and ASV scanning support.
• Build a long-term, reliable security partnership beyond initial certification.

SOLUTION

How did you find 7Security?

Other

Why did you select 7Security over others?

• Pricing fit our budget
• Great culture fit
• Company values aligned

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of Work: 7Security was engaged to guide us through the full PCI DSS certification process, including the transition to the new PCI DSS v4.0.1 standard.The engagement combined project management, technical assessment, and ongoing security advisory support as a Qualified Security Assessor (QSA).

Key Deliverables:

PCI DSS v4.0.1 Certification — Successfully achieved certification within a condensed timeframe, despite the complexity of transitioning to the updated standard.

Structured Project Roadmap — Delivered a clear, well-defined roadmap that replaced our initial uncertainty with a manageable, milestone-driven process. 

Penetration Testing & ASV Scanning Support — Provided hands-on technical expertise, including penetration testing and Approved Scanning Vendor (ASV) support, to validate our security controls.

QSA Advisory Support — Reduced our administrative burden by providing expert guidance throughout the assessment, minimizing internal resource strain. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Certification achieved within a condensed timeframe — the project moved from an uncertain, unclear starting point to a completed PCI DSS v4.0.1 certification, demonstrating clear progress against the original goal.

Shift from uncertainty to a defined roadmap — before the engagement, the path to certification was unclear, after, we had a structured, milestone-based plan that we could track progress against.

Lower internal resource strain — the QSA's direct involvement reduced the administrative work our own team had to carry, freeing up internal capacity.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

7Security's project management was highly collaborative and structured, providing a clear roadmap that turned a complex process into a manageable, milestone-driven one. They delivered PCI DSS v4.0.1 certification within a condensed timeframe despite the added complexity of aligning with DORA compliance — reflecting strong adherence to timelines rather than delays. The team was also responsive to our specific needs, adapting to the DORA alignment challenge and providing hands-on technical support (penetration testing, ASV scanning) that gave us full confidence in both our security posture and the partnership.

What was your primary form of communication with 7Security?

In-Person Meeting

What did you find most impressive or unique about this company?

What stood out most was 7Security's ability to turn a complex, uncertain compliance process into a clear, structured, and achievable milestone. Their hands-on project management combined with deep technical expertise — spanning penetration testing, ASV scanning, and QSA advisory — meant we weren't just handed a checklist, but had a true partner guiding us through the toughest parts, including the tight alignment with DORA compliance. That level of support gave us full confidence in our security posture and made them feel less like a vendor and more like a reliable long-term partner.

Are there any areas for improvement or something 7Security could have done differently?

Honestly, we don't have significant criticism to offer. The engagement was well-managed and met our expectations from certification through to ongoing security planning.

BACKGROUND

Please describe your company and position.

I am the Information Security Specialist of an iGaming company.

Describe what your company does in a single sentence.

IGaming

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• PCI-DSS Compliance/Certification
• Elimination of Audit Uncertainty
• Streamlined Resource Management

SOLUTION

How did you find 7Security?

Online Search

Why did you select 7Security over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

7Security provided end-to-end guidance for our PCI DSS compliance lifecycle. Their role was to translate complex regulatory requirements into a structured project plan, ensuring our controls and documentation were fully aligned with the necessary standards for certification. Key Deliverables:

• Compliance Roadmap: A step-by-step project plan that simplified the audit process into manageable phases.
• Structured Templates: Professional worksheets and document templates that streamlined evidence collection.
• Expert Advisory: Responsive technical support to clarify requirements and resolve issues.
• Final Certification: Validation of controls and delivery of the official Attestation of Compliance (AoC). 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• On-Time Certification
• Significant Reduction in Administrative Burden
• Accelerated Issue Resolution
• Zero Audit Surprises
• Improved Resource Allocation 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

7Security uses a methodical, roadmap-driven approach that keeps the audit process transparent and organized. Their structured worksheets and templates eliminated the usual back-and-forth, ensuring we hit our certification deadlines without a last-minute rush.

What was your primary form of communication with 7Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their team is highly attentive and technically thorough. They truly excel in handling complex issues; when a technical misunderstanding occurred, their leadership responded immediately and decisively. They prioritized accuracy and professional integrity, quickly resolving the friction and ensuring our tech stack was correctly categorized. This level of accountability makes them a very reliable partner.

Are there any areas for improvement or something 7Security could have done differently?

Nothing specific comes to mind. They’ve been incredibly responsive and have helped us turn a complex requirement into a predictable, structured process. It’s hard to find fault with a team that is this thorough and easy to work with

BACKGROUND

Please describe your company and position.

I am the Technical Lead of Payyo, by TrekkSoft

Describe what your company does in a single sentence.

Payments platform and services for the travel industry

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• PCI-DSS Level 1 SP Assessment

SOLUTION

How did you find 7Security?

Referral

Why did you select 7Security over others?

• Pricing fit our budget
• Great culture fit
• Referred to me

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Annual PCI-DSS SP 1 assessment. This year with transition from PCI-DSS 3.2.1 to 4.0.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

This was the 3rd annual PCI-DSS assessment we did together with 7Security. This year it included the transition from PCI-DSS version 3.2.1 to 4.0. 7Security helped and guided us through this process. We updated all our policies and documentation to meet the new requirements and successfully passed the assessment.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We're a small and remote company, and 7Security has made the assessment process very accessible and manageable for us. We like the pragmatic approach and workflows and how we can work asynchronously without waiting for each other too much. They've been very responsive.

What was your primary form of communication with 7Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

7Security has created an environment that works very well with how we work as a company. Working on the assessment and communicating on it matches how we do work very well. This makes the whole process so much easier because communication was very, very good.

Are there any areas for improvement or something 7Security could have done differently?

We're very satisfied, and that's why we've renewed again for another three years. I do not have anything negative to say.

BACKGROUND

Please describe your company and position.

I am the Head of Software and Product Development of Marsoft Inc.

Describe what your company does in a single sentence.

Marsoft Inc is a privately held company founded in 1984, with offices in Boston, London and Oslo. Our sole focus is the maritime industry. ​We provide expert, objective and timely support for investment, chartering and financing decisions. ​Marsoft decision support systems integrate data and analysis to turbocharge our client's decision-making process.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• ISO 27001:2022 Recertification

SOLUTION

How did you find 7Security?

Referral

Why did you select 7Security over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our main goal was to achieve our annual recertification with ISO 27001. To help us, 7Security's expert worked closely with our team and assisted us in upgrading our policies to the most recent version of the standard. They also evaluated how our policies and procedures are implemented and followed by our team, and helped us improve our information security management system.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We are now successfully ISO 27001:2022 certified.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We were assigned a consultant who was exceptionally professional. She responded quickly, and all aspects of the project were handled on time. We could always expect swift and expert responses to each question.

What was your primary form of communication with 7Security?

Virtual Meeting

What did you find most impressive or unique about this company?

We were deeply impressed with the consultant assigned to us. She addressed not only the immediate need to transition to the new standard but also took time to educate the team on what was the spirit of the standard changes. Our practices benefited a lot from her involvement. 

Are there any areas for improvement or something 7Security could have done differently?

Nothing comes to mind.

BACKGROUND

Please describe your company and position.

I am the Audit and Regulations Manager of EGT Digital

Describe what your company does in a single sentence.

Developing gambling related software solutions.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• PCI DSS implementation and certification
• PCI DSS annual reviews
• Ongoing PCI DSS compliance

SOLUTION

How did you find 7Security?

Referral

Why did you select 7Security over others?

• High ratings
• Referred to me

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

PCI DSS implementation, certification, maintanance and annual reviews.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Sucessfully implementing PCI DSS and maintaining high level of cybersecurity 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

I have the privilege of working with 7Security's team of consultants who supported our organization in achieving PCI DSS certification and ongoing compliance, and I must say, the results exceeded our expectations. From the initial assessment to the implementation of all necessary controls, they demonstrated a high level of expertise and professionalism throughout the entire process, helped us on each step with detailed project plan, templates, guidance and constant feedback.

They helped us understand what is expected from us and which good practices will be suitable to implement. Not only did they help us meet the compliance standards, but they also provided valuable insights and recommendations to enhance our overall security posture. I'm trully gratefull for all I have learned and still learning from them! 

What was your primary form of communication with 7Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their in-depth knowledge of the requirements and best practices, coupled with their proactive approach to addressing challenges and personalized touch, set them apart from other consultants we have worked with in the past. A unique thing about 7Security is the people who work there; I have accepted them as part of my team. 

Are there any areas for improvement or something 7Security could have done differently?

They improve all the time so there is nothing I can think of that have not thought before me. 

BACKGROUND

Please describe your company and position.

I am the CTO of Payrexx AG

Describe what your company does in a single sentence.

Payrexx offers online payment services for SME business.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• Achievement of PCI DSS assessment

SOLUTION

How did you find 7Security?

LinkendIn

Why did you select 7Security over others?

• Close to my geographic location
• Pricing fits our budget
• Good value for cost
• Company values aligned

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

It was the annual re-assessment of the PCI DSS compliance. The key deliverables were:

• Attestation of Compliance (AoC)
• Report on Compliance (RoC)
• Penetration Testing Report

They provided us with guidance for the new PCI DSS version 4 requirements.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Achievement of the PCI DSS compliance.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project Management: 7Security’s project management was top-notch. They maintained a clear and organized schedule, ensuring all deliverables were met on time. Regular updates and proactive communication kept us in the loop at every stage.

Timely Delivery: Yes, they consistently delivered items on or ahead of schedule, demonstrating their commitment to deadlines and efficient workflow.

Responsiveness: 7Security was highly responsive to our needs. Any questions or concerns were addressed promptly, and they were flexible in accommodating our requests and changes. Their customer-centric approach made the entire process smooth and stress-free.

What was your primary form of communication with 7Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about 7Security was their deep expertise in PCI DSS compliance coupled with their personalized approach. They tailored their services to fit our specific needs and industry challenges, making the whole process feel customized and highly relevant. Their commitment to not just meeting standards but exceeding them was truly unique and set them apart from other providers.

Are there any areas for improvement or something 7Security could have done differently?

There is nothing 7Security could improve in their process for the assessment.

BACKGROUND

Please describe your company and position.

I am the IS and Network Performance Supervisor of DAMAMAX

Describe what your company does in a single sentence.

Damamax is a leading telecommunications provider specializing in high-speed internet, data connectivity, data center services, etc. in Jordan. we are known for our reliable infrastructure and commitment to delivering cutting-edge technology solutions to businesses and individuals.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire 7Security to accomplish?

• PCI DSS 4.0 Compliance

SOLUTION

How did you find 7Security?

Referral

Why did you select 7Security over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• leading experts in professional PCI DSS compliance services

How many teammates from 7Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

7Security's scope of work encompassed guiding us through the transition to the latest PCI DSS version, ensuring a smooth and compliant process. Key deliverables included thorough assessments and successful certification, all of which streamlined our compliance journey and fortified our security measures.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes from the project with 7Security include achieving PCI DSS certification, significantly reducing compliance-related risks, and improving our overall security posture. Additionally, we experienced a smooth transition to the new standard version, a smoother audit process, and enhanced staff understanding of compliance requirements.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

7Security demonstrated excellent project management throughout our engagement. They consistently delivered items on time and adhered to the project schedule. Their team was highly responsive to our needs, addressing any concerns promptly and effectively. Their proactive communication and detailed progress updates ensured that we were always informed and confident in the project's success.

What was your primary form of communication with 7Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us the most about 7Security was their deep expertise and professionalism in PCI DSS compliance. Their ability to simplify complex requirements and ensure a smooth transition to the new standards was unique. Additionally, their team's proactive approach and commitment to delivering high-quality results set them apart from other companies.

Are there any areas for improvement or something 7Security could have done differently?

none