All companies

A-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.

Sets standards, audits and insures frontier AI systems and agents for security, safety and reliability.

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

BARR Advisory helps organisations establish, manage, and audit cybersecurity and compliance programmes.

Provides penetration testing, PCI ASV scanning, and managed security services for compliance and threat detection.

Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.

Cyberneza provides cybersecurity and compliance consulting for defense contractors and regulated organizations.

CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services.

Integris provides managed IT, cybersecurity, AI and cloud services to small and midsize businesses.

IntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness.

Johanson Group is a CPA firm providing security and compliance audits.

KirkpatrickPrice is a licensed CPA firm that performs cybersecurity audits and compliance assessments.

US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

Provides managed IT support, cybersecurity services and custom software to small businesses.

NSS Labs provides independent testing and validation of cybersecurity controls and AI systems.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Prescient Assurance provides SOC 2 audits and security compliance certifications for SaaS companies.

Miami-based cybersecurity firm with 300+ employees and deep healthcare/HIPAA expertise. Delivering pen testing since 2000.

The largest CPA-firm-based cybersecurity assessor in the US. Unique in holding FedRAMP 3PAO, PCI QSA, HITRUST, ISO 27001, and SOC attestation authority simultaneously.

TestPros is an independent IT compliance firm that has been testing since 1988.

CREST-accredited California consultancy blending compliance expertise with penetration testing. First to earn ISO 17020 for MITRE ATT&CK and PTES frameworks.

Global testing and certification firm, recognised by the PCI SSC for PTS POI and HSM evaluation, with labs in the UK and China.

Vanta provides a platform for automating security compliance and risk management.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.

YSecurity provides an on-demand cybersecurity team for startups, handling compliance and security reviews.