Very Good Security (VGS)

Brief Overview

Very Good Security (VGS) is a data security and enablement company. WIth VGS, startups and enterprise companies can
operate on sensitive data without the cost and liability of securing the data themselves. VGS provides specialized infrastructure that intercepts sensitive data and replaces it with an aliased version, removing them from data security scope requirements, while improving their security posture and accelerating business growth.


207 Powell Street, Suite 200, San Francisco, CA 94104


CEO/Co-Founder - Mahmoud Abdelkader
CTO/Co-Founder - Marshall Jones
VP Business Development and Strategy - Peter Berg


After VGS’ co-founders (Mahmoud and Marshall) exited their prior company (Balanced Payments, one of the first-ever payment facilitators) to Stripe in 2015, several companies approached them for help to building out PCI-compliant infrastructure for payments.

Their very first customer in 2016, LendUp, was able to get certified to issue payment cards in under a month when every other vendor was proposing 9-12 months of expensive effort. Even the independent auditor who certified LendUp’s compliance was shocked at how much more efficient the VGS approach was than alternatives.

Today Very Good Security powers some of the most innovative companies in the world, including Brex, Deserve, DoNotPay, Petal, Travel Bank, Fivestars, and Fortune 500 banks. Under Mahmoud and Marshall’s leadership, VGS has also attracted
funding from Visa, Goldman Sachs, and Andreessen Horowitz, as it builds a world-class coalition to revolutionize the data security and privacy landscape.

Products and Services

Common use cases VGS solves for clients include:

Card Issuing -- issuing cards without ever seeing a card number to remove the business form PCI scope
and get to market months faster.

Payments Optionality + Multiplexing -- providing the security and PCI infrastructure for Merchants, Services
Providers, and Payment Facilitators to securely process payments without burden or liability of securing the card data, all done at a fraction of the cost and time to market. Further, VGS enables rules-based routing decisioning to optimize costs and acceptances.

Compliances and Regulations -- with the Zero data approach and platform, business inherent compliance
with many requirements, and are able to fastrack PCI DSS, SOC 2, CCPA, GDPR, and HIPAA.

Data Security and Privacy (PII & PHI) -- security storing PII data for ID Verification, storing credentials,
and KYC without having to handle the sensitive data.