Auditor Directory
FedRAMP Auditors
Federal Risk and Authorization Management Program
Browse accredited firms offering FedRAMP audits. Filter by location, size, and budget.
43 firms — interactive filtering loads below.
A-LIGN
Tampa, FL
A-LIGN is one of the largest and most recognized compliance audit firms in the United States. Profile includes pricing, framework coverage, reviews, and engagement process.
CliftonLarsonAllen
Minneapolis, MN
CliftonLarsonAllen is a Top 10 CPA firm offering SOC, SOX, HIPAA, FedRAMP, and ISO 27001 audits.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
CohnReznick Advisory
New York, NY
CohnReznick Advisory is a Top 25 CPA firm offering SOC, SOX, and FedRAMP compliance audits.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
GuidePoint Security
Herndon, VA
GuidePoint Security offers SOC 2, ISO 27001, FedRAMP, and CMMC compliance assessments.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
NCC Group (US)
New York, NY
NCC Group is a global cybersecurity consultancy offering SOC 2, ISO 27001, PCI DSS, and FedRAMP assessments.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
Stroz Friedberg (Aon)
New York, NY
Stroz Friedberg (Aon Cyber Solutions) offers SOC 2, ISO 27001, and cyber risk compliance services.
ACI Federal
Alexandria, VA
ACI Federal is a FedRAMP 3PAO and CMMC C3PAO serving federal agencies and government contractors.
ANAB Accredited Certification Bodies
Milwaukee, WI
ANAB is the US national accreditation body under ANSI, accrediting ISO certification bodies to deliver ISO 27001, ISO 27701, and management system certifications.
Aronson LLC
Rockville, MD
Aronson LLC is a Maryland CPA firm offering SOC, SOX, and FedRAMP compliance audits for government contractors.
ASGN Cybersecurity
Glen Allen, VA
ASGN Cybersecurity is a boutique US cybersecurity and compliance firm specializing in SOC 2, FedRAMP, CMMC, and HITRUST assessments for government contractors and technology companies.
ASM Research
Fairfax, VA
ASM Research is a FedRAMP 3PAO and CMMC assessor for federal government contractors.
ATX Defense
Austin, TX
ATX Defense is the first Google Partner to become a CMMC C3PAO, specializing in FedRAMP and CMMC assessments for defense contractors in Austin, TX.
BARR Advisory
Fairway, KS
BARR Advisory is a Kansas-based cybersecurity and compliance firm specializing in SOC 2, HITRUST, FedRAMP, and ISO 27001 audits for cloud-first companies.
CompliancePoint
Duluth, GA
CompliancePoint is a HITRUST-authorized assessor in Georgia offering SOC 2, HITRUST, HIPAA, and ISO 27001 audits for healthcare and technology companies.
CRI Advantage
Virginia Beach, VA
CRI Advantage specializes in FedRAMP, CMMC, and NIST compliance assessments for government contractors.
CSP & Associates
Reston, VA
CSP & Associates is a FedRAMP 3PAO and CMMC assessment firm serving government contractors.
Exiger
New York, NY
Exiger provides AI-powered compliance and risk management assessment services.
Kratos Defense
San Diego, CA
Kratos Defense is one of the largest FedRAMP 3PAOs and among the first authorized CMMC C3PAOs, assessing cloud providers and defense contractors.
Lazarus Alliance
Scottsdale, AZ
Lazarus Alliance is a FedRAMP 3PAO and StateRAMP assessor in Scottsdale, AZ offering fast-track FedRAMP, SOC 2, PCI DSS, and CMMC assessments for government contractors.
Linford & Company
Denver, CO
Linford & Company is a Denver-based CPA firm specializing in SOC, ISO 27001, and FedRAMP audits. Profile includes pricing and framework coverage.
MindPoint Group
Alexandria, VA
MindPoint Group, a Tyto Athene company, is an Alexandria, VA FedRAMP 3PAO providing FedRAMP, FISMA, SOC 2, and ISO 27001 assessment services.
Norse Shield
Washington, DC
Norse Shield specializes in CMMC, FedRAMP, and NIST compliance for defense contractors.
Plurilock
Toronto, ON, Canada
Plurilock is a Canadian cybersecurity and compliance firm offering SOC 2, ISO 27001, HITRUST, and FedRAMP assessments for technology and government organizations.
Prescient Security
Nashville, TN
Prescient Security is a global compliance auditor with 3,600+ SOC 2 audits and 5,000+ customers, offering SOC 2, ISO 27001, HITRUST, FedRAMP, and CMMC assessments.
RISCPoint
Richmond, VA
RISCPoint is a security and compliance advisory firm and FedRAMP/StateRAMP 3PAO covering SOC 2, ISO 27001, CMMC, HITRUST, and federal frameworks.
ScaleSec
San Diego, CA
ScaleSec is a San Diego cloud security consultancy guiding companies through SOC 2, ISO 27001, HIPAA, and FedRAMP readiness on AWS and Google Cloud.
SecureIT
Reston, VA
SecureIT is a Reston, VA cybersecurity compliance firm and FedRAMP 3PAO performing FedRAMP, FISMA, SOC, and ISO 27001 assessments.
Securisea
Atlanta, GA
Securisea is an Atlanta-based PCI QSA company and FedRAMP 3PAO offering PCI DSS, SOC 1/2, HITRUST, and ISO 27001 assessment services.
Sera-Brynn
Chesapeake, VA
Sera-Brynn is a veteran-owned Virginia firm operating as an authorized CMMC C3PAO and FedRAMP 3PAO for defense and government cloud assessments.
StackArmor
Tysons, VA
StackArmor specializes in FedRAMP and CMMC compliance for government cloud deployments.
Telos Compliance
Ashburn, VA
Telos provides FedRAMP, CMMC, and NIST compliance assessment services for government contractors.
Wolf & Company
Boston, MA
Wolf & Company is a century-old Boston-based CPA firm with deep expertise in IT audit, SOC reporting, HITRUST, and financial services compliance.