This document discusses Bracket Computing's solution for achieving PCI compliance on Pivotal Cloud Foundry (PCF). Bracket has developed a security layer called METAVISOR that sits above the hypervisor/cloud infrastructure and below the operating system to provide network, storage and server security controls. METAVISOR can segment a PCF deployment into different security groups (PCI, non-PCI, management) to enforce policies and isolate workloads. When combined with Bracket's management tools, it allows a PCF platform to meet PCI requirements through an added exoskeleton of security controls provided by the METAVISOR layer.