Brad Caldwell

Chief Executive Officer and Founder SecurityMetrics

Last Reviewed: September 28, 2026

Executive Summary

Brad Caldwell is the founder and Chief Executive Officer of SecurityMetrics, the privately held data security and compliance company headquartered in Orem, Utah. He founded it in February 2000 and has run it ever since, taking it from what the company calls a one-room scanning business to a provider of penetration testing, vulnerability scanning, compliance assessment and managed security services for organisations ranging from local shops to large brands. SecurityMetrics is a PCI-certified Approved Scanning Vendor, Qualified Security Assessor and PCI Forensic Investigator, and Caldwell remains its public voice, quoted as CEO in the company’s announcements through September 2026.

Career Highlights

• Founded SecurityMetrics in February 2000 and has served as its CEO since.
• Built the company into a PCI Approved Scanning Vendor, Qualified Security Assessor, PCI Forensic Investigator and CMMC Registered Provider Organization, which reports testing more than 100 million systems.
• Under his leadership SecurityMetrics won Cybersecurity Audit Team of the Year in the Hacker News Award 2026.
• Before SecurityMetrics, co-founded Software Development Corporation, which developed WordPerfect for UNIX/Linux for Novell and Corel.
• Company biographies list his CISSP, QSA and PFI credentials.

Professional Journey

Caldwell graduated from Brigham Young University and began his career in software. Before founding SecurityMetrics he co-founded Software Development Corporation, which developed WordPerfect for UNIX/Linux for Novell and Corel.

In February 2000 he founded SecurityMetrics in Utah. By the company’s account it began as a one-room scanning company. SecurityMetrics now holds the main PCI Security Standards Council designations: Approved Scanning Vendor, Qualified Security Assessor and PCI Forensic Investigator. It has added HIPAA, GDPR, HITRUST and CMMC compliance work, penetration testing and managed security services, and it runs a security operations centre and round-the-clock multilingual support from its Orem headquarters.

Caldwell’s own credentials follow the company’s work. His SecurityMetrics biography describes him as a certified forensic investigator, onsite auditor and information systems security professional. He has represented the company at the PCI Security Standards Council’s community meetings, including a 2022 panel on malicious e-commerce trends, and in 2019 he spoke in Southern Utah University’s entrepreneurship speaker series.

SecurityMetrics has taken part in the PCI Council’s Global Executive Assessor Roundtable since it was created in 2018. In 2026 the company was named Cybersecurity Audit Team of the Year in the Hacker News Award, with Caldwell crediting the work of its QSAs. In September 2026 he presented the company’s Spectre AI product as part of its push into technology that goes beyond PCI compliance. SecurityMetrics remains privately held.

Education

Brigham Young University

Graduate; the degree and field are not stated in any source reviewed.