For readiness, pentest, vCISO and consulting firms
Companies preparing for SOC 2 check costs and timelines here before they hire help.
SOC2Auditors.org is an independent SOC 2 market intelligence platform. Companies send us their audit scope, audit firms quote on it without knowing who the company is, and every request and quote adds to what we know about who needs SOC 2, what auditors charge and how to tell them apart.
Readiness, penetration testing, vCISO, ISO 27001 and compliance consulting firms are listed free, by service and apart from the audit firms that issue SOC 2 reports. Firms can also take a labeled Featured placement at the top of a category page where they're listed, and payment never changes the order of the list below it.
Talk to Peter Email for rates Correct your listing
Peter Korpak, Chief Analyst & Founder
Your listing is free.
Firms are listed by the service buyers ask for. Here is how each category compares.
Category pages: SOC 2 readiness consultants · vCISO firms · SOC 2 compliance consultants · ISO 27001 consultants · SOC 2 penetration testing firms
| Part of your listing | How it works |
|---|---|
| Your category | The services you offer: SOC 2 readiness, penetration testing, vCISO, ISO 27001 or compliance consulting. |
| Profile facts | Your public pages, dated, and compared on what you do, where you work and how you work. |
| Buyer requests | Sent from your profile or your category page and reviewed by hand. |
| Separate from auditors | Support firms and audit firms sit in separate lists, and we never cross-list a firm. |
| Corrections | Email the fix and a source. We check it and date the change on the page. |
What we publish.
We publish the ballpark quotes audit firms sent buyers through us, by company size and without naming a firm, and SOC 2 timelines by phase, from readiness to the report. Your clients read both when they plan the work you help with.
What Featured looks like.
Featured is a labeled block at the top of a category page your firm is already listed on.
- The block is labeled Featured in plain text, at the top of the category page.
- Every fact on your profile is checked and dated, like every listed firm's.
- The list below keeps its own order, and payment doesn't change it.
Ways to work with us.
A firm can take Featured only on category pages it already appears on. Everything else starts with a conversation.
Questions firms ask first.
What does Featured cost?
A flat fee, billed quarterly, for each category page. Email us for the rate card, or ask on a call. No call is needed to start.
What is the AICPA independence boundary?
Under the AICPA's independence rules (ET 1.297), a firm that designed, implemented or operated a company's controls generally can't also be its independent auditor. Advisory-only work can be permissible with safeguards (ET 1.295.040), but the cleanest arrangement keeps readiness and audit with separate firms. That's why we keep the two lists apart, and why a listing here implies no referral relationship with any auditor.
What is the commitment?
Each placement runs a quarter at a time, and you can stop at the end of any quarter. Your listing stays either way.
Do you take a cut of my engagements?
Never. The flat fee is the whole arrangement: no percentage, per-request fee or per-deal fee. What you bill your client is between you and your client.
Tell us what you have in mind.
Book a call, or email Peter directly if that's easier.
Peter Korpak, Chief Analyst & Founder