Menu
Auditors
Our picks by fit, each with a passed peer review
Every listed firm, filterable by price and timeline
Consultants
Readiness, pentest, vCISO, and ISO 27001 firms in one list
Software
Every platform we profile, with sourced prices and fit
Our picks by buyer fit, with the tradeoffs
Published prices, add-ons, and audit fees
Learn
Articles on cost, controls, timelines, and auditor choice
Free Tools
A few questions, then your best-fit auditors
Fit-ranked platforms with observed price bands
In the 2026-10-21 snapshot, we matched 149 US-based directory firms against the AICPA public peer-review file search. Enrollment and a published result are counted separately.
Peer-review enrollment and a disclosed result answer different questions. Enrollment is measured across the dated US directory snapshot. The result breakdown covers only firms whose AICPA record made that result public at the time of the check.
In this snapshot the disclosed public-file results are: Pass 106; Pass with Deficiencies 4. That finding applies only to the disclosed subset. We do not assign the same result to firms that do not disclose, and a public result is not a ranking score. A missing public result is not a Fail.
Browse the underlying market in the SOC 2 auditor directory, where firm profiles carry their own evidence and fit details.
91% of the 149 US-based directory firms covered by our 2026-10-21 AICPA snapshot were enrolled in the peer-review program.
Source: SOC2Auditors.org, https://soc2auditors.org/data/soc-2-audit-firms/#directory-firms-peer-review-enrolled (retrieved 2026-10-21). Among the 110 firms in the 2026-10-21 snapshot whose AICPA peer-review result was public (a member/opt-in subset, not the whole directory), the results break down as recorded; we do not extrapolate this to firms that did not disclose.
Download CSV · AICPA peer-review registry
Source: SOC2Auditors.org, https://soc2auditors.org/data/soc-2-audit-firms/#peer-review-rating-disclosed-subset (retrieved 2026-10-21). US-based firms in the directory snapshot were searched in the AICPA public peer-review interface using their names and reviewed aliases. A firm counts as enrolled only when the public record supports that status. If the public file does not show enrollment, we leave the firm unmatched. We do not infer enrollment from firm size, branding, or accreditation claims.
The source count is coverage of the last successful external check, not the current directory total. Firms added after 2026-10-21 remain outside this snapshot until the next clean check; they are neither inferred enrolled nor entered as zero. The enrollment percentage uses the full checked sample, while the rating chart uses the disclosed-result sample only. AICPA result visibility is member or firm controlled, so non-disclosure is not evidence of failure and must not be counted in the pass rate.
Peer review is one quality-control signal for a CPA practice. It is not a substitute for confirming the engagement team's SOC 2 experience, industry fit, report scope, timeline, and licensing details.
Maintained by Peter Korpak. Questions, corrections, or a stale number? Email hello@soc2auditors.org and we will reply within two business days.
Cite freely with attribution. This dataset is published under CC BY 4.0. Each figure above has a stable link, a CSV where a breakdown exists, and a citation you can copy.
See this topic on the SOC 2 statistics hub.
Filter by fit, pricing, location, and experience, or ask us to match your scope to a short list.