Skip to main content
Mercer | Mettl logo

Mercer | Mettl Security Assessment

HR & Talent Management

MarketPricer is a self-service job pricing tool that provides instant access to global compensation data, including base pay, total cash, and the mix of base and bonus. With data sourced from Mercer's Total Remuneration Surveys , MarketPricer ensures consistency and reliability across 400,000 jobs in over 140 countries. This cost-effective solution, priced at $300 per job, enables organizations to make informed compensation decisions, ensuring their employees' salaries remain competitive in the market. Key Features and Functionality: - Comprehensive Compensation Data: Access detailed information on base pay, total cash, and base/bonus mix for a wide range of positions. - Extensive Job Coverage: Choose from 400,000 jobs across more than 140 countries, ensuring relevance to various industries and regions. - Consistent Data Sourcing: Utilizes Mercer's TRS, applying uniform survey methodologies globally for accurate and comparable data. - User-Friendly Process: Obtain salary benchmarking data in five simple steps: select the country, search for a job, review and filter positions, create an account or log in, and receive immediate data access. - Flexible Data Analysis: Analyze data in real-time within MarketPricer or export it as Excel or PDF documents for further review. Primary Value and Solutions Provided: MarketPricer addresses the challenge of maintaining competitive compensation structures by offering immediate access to reliable and up-to-date salary data. This empowers organizations to make data-driven decisions regarding employee compensation, aiding in talent retention and attraction. By streamlining the job pricing process, MarketPricer saves time and resources, allowing HR professionals to focus on strategic initiatives. Its global reach and extensive job database make it a versatile tool for companies operating in multiple countries and industries.

SECURITY VERIFIED • SAASPOSTURE • JAN 2026
B
Top 25%
Mercer | Mettl logoMercer | Mettl
SaaS Posture Assessment

9-Dimension Security Framework

Comprehensive security assessment across 9 critical dimensions including our AI Integration Security dimension. Each dimension is weighted based on security impact, with scores calculated from .
51
Overall Score
Weighted average across all dimensions
B
Security Grade
Top 25%
65% confidence

Identity & Access Management

A+
Score:0
Weight:33%
Grade:A+ (Top 5%)

Compliance & Certification

A+
Score:0
Weight:19%
Grade:A+ (Top 5%)

AI Integration Security

NEW
N/A
Score:0
Weight:12%
Grade:N/A

API Security

D
Score:0
Weight:14%
Grade:D (Below Avg)

Infrastructure Security

F
Score:0
Weight:14%
Grade:F (Critical)

Data Protection

F
Score:0
Weight:10%
Grade:F (Critical)

Vulnerability Management

A+
Score:0
Weight:3%
Grade:A+ (Top 5%)

Breach History

A+
Score:0
Weight:1%
Grade:A+ (Top 5%)

Incident Response

F
Score:0
Weight:1%
Grade:F (Critical)
🤖

AI Integration Security Assessment (9th Dimension)

Assess whether SaaS applications are safe for AI agent integration using Anthropic's Model Context Protocol (MCP) standards. Identify Shadow AI risks before they become breaches and make safer AI tool decisions than your competitors.

Last updated: January 9, 2026 at 12:33 PM

Comprehensive Security Analysis

In-depth assessment with detailed recommendations

Security Analysis

Executive Summary

MetricValueAssessment
Security GradeBNeeds Improvement
Risk LevelMedium-HighExecutive approval required
Enterprise Readiness50%Gaps Exist
Critical Gaps1Immediate attention

Security Assessment

CategoryScoreStatusAction Required
🟢 Breach History100/100excellentMaintain current controls
🟡 Vulnerability Management85/100goodMaintain current controls
🟡 Identity & Access Management75/100goodMonitor and improve gradually
🟡 Compliance & Certification70/100goodMonitor and improve gradually
🟠 API Security30/100needs_improvementAdd rate limiting and authentication
🟠 Infrastructure Security20/100needs_improvementReview and enhance controls
🟠 Data Protection20/100needs_improvementImplement encryption at rest, TLS/HTTPS, and 1 more
🟠 Incident Response0/100needs_improvementDocument incident response plan

Overall Grade: B (51/100)

Critical Security Gaps

GapSeverityBusiness ImpactRecommendation
🔴 Data Protection score: 20/100CRITICALHigh risk of data breach or unauthorized accessImplement data encryption audit before deployment
🟡 No public security documentation or audit reportsMEDIUM40-80 hours of security assessment overheadRequest security audit reports (SOC 2, pen tests) and security whitepaper

Total Gaps Identified: 2 | Critical/High Priority: 1

Compliance Status

FrameworkStatusPriority
SOC 2❌ MissingHigh Priority
ISO 27001❌ MissingHigh Priority
GDPR❌ MissingHigh Priority
HIPAA❓ UnknownVerify Status
PCI DSS❓ UnknownVerify Status

Warning: No compliance certifications verified. Extensive due diligence required.

Operational Excellence

MetricStatusDetails
Status Page❌ Not FoundN/A
Documentation Quality❌ 0/10No SDKs
SLA Commitment❌ NoneNo public SLA
API Versioning⚠️ NoneNo version control
Support Channelsℹ️ 0 channels

Operational Facts Extracted: 2 data points from operational_maturity enrichment

Infrastructure Security

Infrastructure MetricStatusDetails
VirusTotal Reputation✅ 100/10095 security engines scanned
SSL/TLS Certificate✅ ValidIssued by Unknown
Certificate Expiryℹ️ UnknownRegular renewal required
Domain Age✅ 14 yearsEstablished

Infrastructure Facts Extracted: 4 data points from virustotal_intelligence

Integration Requirements

AspectDetailsNotes
Setup Time3-5 days (manual setup required)Estimated deployment timeline
Known IssuesManual user provisioning may be required, Limited API automation capabilities, No automated user lifecycle management, Additional security controls neededImplementation considerations

⚠️ Inherent Risk Consideration

Data Sensitivity: This application stores sensitive data:

  • Employee personal information (SSN, address, contact details)
  • Compensation data (salaries, bonuses, equity grants)
  • Performance reviews and disciplinary records

Risk Level: CRITICAL - Contains personally identifiable information (PII) and financial data

Compliance Requirements:

  • GDPR - General Data Protection Regulation (EU)
  • CCPA - California Consumer Privacy Act (US)
  • SOX - Sarbanes-Oxley Act (financial reporting)
  • PCI DSS - Payment Card Industry Data Security Standard
  • SOC 2 Type II - Security, Availability, Processing Integrity

🛡️ Enterprise Security Controls to Implement

Even with strong vendor security, enterprises must implement:

1. Identity & Access Management

  • Enable SSO with your identity provider
  • Implement MFA for all user accounts
  • Regular access reviews (quarterly recommended)

2. Data Protection

  • Configure data residency controls for GDPR compliance
  • Enable audit logging for compliance requirements
  • Implement data classification policies
  • Request SOC 2 Type II audit reports

4. Vendor Management

  • Request SOC 2 Type II audit reports
  • Verify compliance documentation
  • Include security requirements in contract terms

Compliance & Certifications

0
Active
0
Pending
6
Not Certified

API Intelligence

Transparency indicators showing API availability and access requirements for Mercer | Mettl.

API Intelligence

No API Found

No public API documentation found. This vendor may not offer a public API.

No API Found

We didn't find public API documentation for this vendor. Many SaaS vendors, especially SMB-focused tools, don't offer public REST APIs. This is normal and not a data quality issue.

Note: Not all SaaS vendors offer public APIs. This is completely normal, especially for SMB-focused tools. It doesn't affect the security assessment.

AI-Powered Stakeholder Decision Analysis

LLM-generated security perspectives tailored to CISO, CFO, CTO, and Legal stakeholder needs. All analysis is grounded in verified API data with zero fabrication.

Security Posture & Operational Capabilities

Comprehensive assessment of Mercer | Mettl's security posture, operational maturity, authentication capabilities, security automation APIs, and breach intelligence.

🏢

Operational Data Not Yet Assessed

We haven't collected operational maturity data for Mercer | Mettl yet.

Frequently Asked Questions

Common questions about Mercer | Mettl

Critical data exchanged between test-takers and Mercer | Mettl over the network is encrypted at the column level in RDS. This mechanism provides added security to sensitive data such as question text,

Source: Search insights from Google, Bing

Capture Candidate Screen – This feature captures the candidate's screen & Camera feed snapshots at every 60 seconds.

Source: Search insights from Google, Bing

Compare with Alternatives

How does Mercer | Mettl stack up against similar applications in HR & Talent Management? Click column headers to sort by different criteria.

Application
Score
Grade
AI 🤖
Action
51🏆
BN/A
48
C+N/AView
44
CN/AView
39
D+N/AView
33
DN/AView
30
DN/AView
26
FN/AView
💡

Security Comparison Insight

1 alternative(s) have higher overall security scores. Review the comparison to understand security tradeoffs for your specific requirements.