Auditor Directory
HITRUST Auditors
HITRUST Common Security Framework
Browse accredited firms offering HITRUST audits. Filter by location, size, and budget.
64 firms — interactive filtering loads below.
A-LIGN
Tampa, FL
A-LIGN is one of the largest and most recognized compliance audit firms in the United States. Profile includes pricing, framework coverage, reviews, and engagement process.
CliftonLarsonAllen LLP
Minneapolis, MN
CliftonLarsonAllen (CLA) is a top-eight US CPA firm headquartered in Minneapolis, offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, and CMMC audit services nationally.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
360 Advanced
Nashville, TN
360 Advanced is a US-based compliance audit firm offering SOC 2, PCI DSS, HITRUST, ISO 27001, and HIPAA audits with a focus on technology and healthcare companies.
AARC-360
Atlanta, GA
AARC-360 is a PCAOB-registered Atlanta CPA firm delivering SOC 1, SOC 2, ISO 27001, HIPAA, and PCI DSS assurance and compliance services.
ANAB Accredited Certification Bodies
Milwaukee, WI
ANAB is the US national accreditation body under ANSI, accrediting ISO certification bodies to deliver ISO 27001, ISO 27701, and management system certifications.
Aprio
Atlanta, Georgia
Aprio is a top-25 US CPA and advisory firm offering SOC 2, ISO 27001, HITRUST, and cybersecurity assessments with strong technology sector expertise.
Arete Advisors
Nashville, TN
Arete Advisors is a healthcare compliance specialist based in Nashville, focusing on HIPAA, HITRUST, and health-tech security assessments.
Armanino
San Ramon, California
Armanino is a top-25 US CPA firm based in California with strong technology sector focus, offering SOC 2, ISO 27001, and cybersecurity assessments.
ASGN Cybersecurity
Glen Allen, VA
ASGN Cybersecurity is a boutique US cybersecurity and compliance firm specializing in SOC 2, FedRAMP, CMMC, and HITRUST assessments for government contractors and technology companies.
Assure Professional
Charlotte, NC
Assure Professional, acquired by A-LIGN in 2023, is an audit provider delivering SOC 1, SOC 2, SOC 3, HIPAA, HITRUST, and ISO 27001 assessments.
BARR Advisory
Fairway, KS
BARR Advisory is a Kansas-based cybersecurity and compliance firm specializing in SOC 2, HITRUST, FedRAMP, and ISO 27001 audits for cloud-first companies.
BerryDunn
Portland, ME
BerryDunn is a Portland, Maine-based assurance and consulting firm delivering SOC 1/2, HIPAA, HITRUST, and NIST-based assessments nationwide.
Biovell Compliance
San Diego, CA
Biovell Compliance specializes in healthcare compliance with HIPAA, HITRUST, and ISO 27001 assessments.
Blue & Co.
Carmel, IN
Blue & Co. is a Carmel, IN CPA and consulting firm offering SOC 1, SOC 2, HIPAA, and HITRUST compliance services with deep healthcare expertise.
Bonadio Group
Pittsford, NY
The Bonadio Group is a top-50 CPA firm in Pittsford, NY whose information risk practice delivers SOC 1, SOC 2, HIPAA, HITRUST, and PCI DSS audits.
Caliber Security Partners
Austin, TX
Caliber Security Partners is an Austin-based compliance firm specializing in SOC 2, HITRUST, and PCI DSS assessments.
ClearDATA
Austin, TX
ClearDATA specializes in healthcare cloud compliance with HIPAA, HITRUST, and SOC 2 assessments.
Clearwater Compliance
Nashville, TN
Clearwater is a Nashville-based healthcare cybersecurity and compliance firm specializing in HIPAA risk analysis, HITRUST, and SOC 2 services.
Compass IT Compliance
Providence, RI
Compass IT Compliance is a Providence-based QSA and HITRUST assessor offering PCI DSS, SOC 2, HIPAA, and penetration testing for financial and healthcare organizations.
Compass IT Compliance
Tampa, FL
Compass IT Compliance is a PCI DSS specialist firm serving retail, healthcare, and hospitality organizations. Profile includes pricing and framework coverage.
CompliancePoint
Duluth, GA
CompliancePoint is a HITRUST-authorized assessor in Georgia offering SOC 2, HITRUST, HIPAA, and ISO 27001 audits for healthcare and technology companies.
ControlCase
Fairfax, Virginia
ControlCase is a compliance and cybersecurity firm specializing in PCI DSS, SOC 2, ISO 27001, and HITRUST audits with a unified compliance approach.
ControlCase India
Mumbai, India
ControlCase India offers PCI DSS, ISO 27001, SOC 2, and HITRUST assessments at competitive pricing.
CyberGuard Compliance
Las Vegas, NV
CyberGuard Compliance is a Las Vegas-based, PCAOB-registered CPA firm focused exclusively on SOC, PCI DSS, HITRUST, and HIPAA compliance audits.
CyberSapiens
Melbourne, Australia
CyberSapiens is an Australian cybersecurity firm offering SOC 2, ISO 27001, PCI DSS, and HIPAA compliance services for ANZ technology companies.
CyberSecOp
New York, NY
CyberSecOp is a New York-based security consultancy and CMMC RPO delivering SOC 2, ISO 27001, HIPAA, and PCI compliance readiness and advisory services.
Focal Point Data Risk
Tampa, FL
Focal Point Data Risk offers SOC 2, ISO 27001, HITRUST, and PCI DSS compliance assessments.
HALOCK Security Labs
Schaumburg, IL
HALOCK Security Labs offers SOC 2, ISO 27001, HITRUST, and PCI DSS compliance assessments.
HoganTaylor
Tulsa, OK
HoganTaylor is a Tulsa-based CPA and advisory firm whose risk assurance team delivers SOC reports, HITRUST validated assessments, and CMMC services.
I.S. Partners LLC
Horsham, PA
I.S. Partners LLC is a Horsham, PA CPA and IT audit firm delivering SOC 1/2, HITRUST, HIPAA, PCI DSS, and ISO 27001 compliance assessments.
Insight Assurance
Miami, Florida
Insight Assurance is a Florida-based CPA firm specializing in SOC 2, ISO 27001, and HITRUST audits for startups and growing technology companies.
KirkpatrickPrice
Bethesda, MD
KirkpatrickPrice is a licensed CPA firm with 20,000+ reports issued, specializing in SOC 2, HITRUST, ISO 27001, and PCI DSS audits for technology and healthcare companies.
Lazarus Alliance
Scottsdale, AZ
Lazarus Alliance is a FedRAMP 3PAO and StateRAMP assessor in Scottsdale, AZ offering fast-track FedRAMP, SOC 2, PCI DSS, and CMMC assessments for government contractors.
LBMC Information Security
Brentwood, TN
LBMC Information Security is a Tennessee-based firm offering SOC 2, HITRUST, and PCI DSS assessments.
Linford & Company
Denver, CO
Linford & Company is a Denver-based CPA firm specializing in SOC, ISO 27001, and FedRAMP audits. Profile includes pricing and framework coverage.
Pivot Point Security
Hamilton, NJ
Pivot Point Security is a New Jersey firm specializing in ISO 27001 certification, SOC 2, and PCI DSS assessments.
Plurilock
Toronto, ON, Canada
Plurilock is a Canadian cybersecurity and compliance firm offering SOC 2, ISO 27001, HITRUST, and FedRAMP assessments for technology and government organizations.
Prescient Assurance
Toronto, Canada
Prescient Assurance is a startup-friendly CPA firm offering affordable SOC 2, ISO 27001, and HIPAA audits with fast turnaround for growing companies.
Prescient Security
Nashville, TN
Prescient Security is a global compliance auditor with 3,600+ SOC 2 audits and 5,000+ customers, offering SOC 2, ISO 27001, HITRUST, FedRAMP, and CMMC assessments.
PYA
Knoxville, TN
PYA is a Top-100 national CPA firm specializing in healthcare compliance, SOC 2, HITRUST, and HIPAA audits for SaaS and cloud-based companies.
Redspin
Duluth, GA
Redspin is the first authorized CMMC C3PAO in the US, conducting ~25% of all CMMC Level 2 assessments with former DoD cybersecurity professionals.
RISCPoint
Richmond, VA
RISCPoint is a security and compliance advisory firm and FedRAMP/StateRAMP 3PAO covering SOC 2, ISO 27001, CMMC, HITRUST, and federal frameworks.
Risk3Sixty
Roswell, GA
Risk3Sixty is a Roswell, GA security and compliance firm delivering SOC 2, ISO 27001, PCI DSS, HITRUST, and CMMC assessments plus vCISO services.
Riverpoint Technology
Nashville, TN
Riverpoint Technology specializes in healthcare compliance with HITRUST, HIPAA, and SOC 2 assessments.
RL Datix Compliance
Chicago, IL
RL Datix Compliance specializes in healthcare compliance with HITRUST, HIPAA, and SOC 2 assessments.
RSI Security
San Diego, CA
RSI Security is a San Diego compliance and cybersecurity firm — PCI QSA, CMMC C3PAO, and HITRUST External Assessor — covering SOC 2, HIPAA, and NIST.
Securisea
Atlanta, GA
Securisea is an Atlanta-based PCI QSA company and FedRAMP 3PAO offering PCI DSS, SOC 1/2, HITRUST, and ISO 27001 assessment services.
SecurityMetrics
Orem, UT
SecurityMetrics is a US-based compliance and cybersecurity firm specializing in PCI DSS, HIPAA, and HITRUST assessments with forensic investigation capabilities.
Tevora
Irvine, CA
Tevora is a boutique cybersecurity and compliance firm based in Southern California specializing in SOC 2, PCI DSS, HITRUST, and ISO 27001 assessments for startups and mid-market companies.
Thoropass
New York, NY
Thoropass is a New York compliance company pairing an automation platform with in-house auditors for SOC 2, ISO 27001, HITRUST, PCI DSS, and HIPAA.
UHY LLP
Farmington Hills, MI
UHY LLP is a national CPA firm and UHY International member offering SOC examinations, ISO 27001, PCI DSS, HITRUST, and IT risk advisory services.
Weaver
Houston, TX
Weaver is a top-50 Texas-founded national CPA firm offering SOC reporting, PCI DSS, HITRUST, and IT advisory alongside assurance and tax services.
Wolf & Company
Boston, MA
Wolf & Company is a century-old Boston-based CPA firm with deep expertise in IT audit, SOC reporting, HITRUST, and financial services compliance.