VikingCloud and Fiserv Partner to Deliver AI-Driven Cyber Risk Defense to Millions of Merchants

VikingCloud and Fiserv have entered a multi-year agreement to integrate cybersecurity and PCI compliance tools directly into the merchant experience. Starting in 2027, the partnership aims to lower the barrier for small and mid-sized businesses to defend against phishing and ransomware, while simplifying the often-complex requirements of maintaining payment security standards.

What was announced

Fiserv will begin offering VikingCloud Cyber Risk Defense in early 2027. The solution is designed to provide continuous monitoring and actionable guidance for businesses trying to navigate the cybersecurity landscape. A key feature is the Security Score, which uses VikingCloud’s patented risk scoring alongside Mastercard’s cyber risk intelligence to provide an A-to-F grade. This allows merchants to understand their risk profile without needing technical expertise. The platform targets common threats such as phishing, ransomware, and business impersonation. It includes built-in cyber insurance from day one for enrolled merchants. While the primary focus is on small and mid-sized businesses, the modular architecture is intended to scale for larger commercial and mid-market organizations that require more advanced capabilities. The solution was recently recognized as the Best Security Compliance Solution at the 2026 teissAwards. Lia Cao, Chief Revenue Officer, Enterprise and Platforms at Fiserv, indicated that the partnership helps merchants adopt a proactive approach to security through solutions designed for continuous protection. By combining these services, the two companies aim to help merchants simplify PCI compliance while strengthening their overall defensive posture through a proactive, rather than reactive, approach to digital threats.

The companies involved

Fiserv is a global provider of payments and financial services technology, listed on the NASDAQ as FISV. The company occupies a central role in the merchant services ecosystem, providing the infrastructure for millions of businesses to process transactions. It has a significant presence in both the enterprise and small business sectors, particularly through its Clover point-of-sale platform and its global orchestration tools. VikingCloud is a cybersecurity and compliance specialist that currently serves more than four million businesses worldwide. The company focuses on transforming how organizations manage cyber risk and compliance, moving away from point-in-time assessments toward continuous monitoring. VikingCloud has established itself as a key player in the PCI compliance space, helping merchants navigate the rigorous security standards required by the major card networks. The partnership represents a significant expansion of the existing relationship between the two firms, as they look to embed security more deeply into the merchant acquisition and retention lifecycle.

What FF News has reported before

FF News has followed Fiserv’s recent efforts to scale its merchant and enterprise offerings. In October 2026, we reported that Klarna Expands Global Reach via Fiserv Commerce Hub and Clover Integration, highlighting the company's role in cross-border commerce. This followed the news that Fiserv Launches Commerce Hub to Orchestrate Global Enterprise Payments. On the hardware side, the company reached a significant milestone when Fiserv Surpasses 5 Million Clover Devices Shipped Globally in Major Milestone. Additionally, we covered how Hard Rock Stadium Taps Fiserv’s Clover Sport to Revolutionize Fan Commerce, demonstrating the breadth of Fiserv’s reach across different industry verticals.

What this means

This move reflects a broader industry shift toward "embedded security," where protection is no longer an add-on but a core feature of the payment stack. For SMBs, the traditional model of purchasing separate security software and insurance is becoming unsustainable due to cost and complexity. By bundling risk scoring, insurance, and compliance, Fiserv puts pressure on competitors who still treat security as a third-party problem. However, the 2027 rollout date raises questions about the speed of implementation in a rapidly evolving threat landscape. The success of this initiative will likely depend on whether the "A-to-F" grading system can truly translate into lower loss rates for the insurance components.