Thank you all for this conversation thread, it has been incredibly helpful!  It is important to be PCI compliant to protect our business, and the list that was given below ensures me that our company is already PCI compliant without having to purchase this product for which I receive weekly calls and emails.  I almost paid Security Metrics and would have had to allow them access to my secure system, that would have been a mistake.