A small security shop for people who handle money
We started Safepay because most pentest reports we’d read for payment companies were either copy-paste scanner output or sales material in a PDF jacket. We thought there was room for something better.
Based in Ballwin, Missouri. Small team. Specific about what we do.



Who we are
A small security shop for people who handle money.
Safepay started because most pentest reports we’d read for payment companies were either copy-paste scanner output or sales material in a PDF jacket. We thought there was room for a small team that actually digs in, writes the finding the way the engineer needs to read it, and sticks around long enough to verify the fix.
We’re honest about what we’re not, too: we’re not a QSA and we’re not your lawyer. When that’s what you need, we’ll say so and point you somewhere good.
What you get with us
Three things we don’t cut corners on.
People who’ve worked in payments
Card flows, ACH, Check 21, gateway integrations, BIN sponsors — we’ve poked around in most of it. You won’t spend the kickoff explaining what an issuer is.
Reports your team will actually read
Reproduction steps, screenshots, the request that breaks the thing, and a suggested fix. One section for engineering, one for whoever’s briefing the board.
Straight talk on compliance
We’ll tell you where you stand against the standard, what’s likely to come up with your QSA, and what we don’t have the authority to sign off on.
Company information
Safepay, Inc.
335 Wilhelmine Ct, Ballwin, MO 63021, United States