What security partner do you use?

Hi!
While choosing partners for our upcoming Technology Partnership we, at nopCommerce team, are looking at the market of security solutions. That's why I am asking the following: do you use the services of third-party security companies? Like Riskified, Signifyed, etc? What are your experiences? If you have some security and NDA concerns you can e-mail me at [email protected] or PM here.

We use TrustWave for scheduled PCI compliance scans and file integrity monitoring. They are very reliable and affordable.
https://www.trustwave.com/Services/Compliance-and-Risk/PCI-Services/