A-LIGN
A-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.
- Categories
- Compliance audits (SOC 2, ISO 27001), Penetration testing, GRC and compliance automation, Security consulting and vCISO
- Based in
- Tampa, United States
- Founded
- 2009
- Size
- 500+ staff
- Ownership
- Owned by Hg since 2025
- Certifications
- SOC 2 Type 2, ISO/IEC 27001, ISO/IEC 42001, FedRAMP Moderate Equivalent, FedRAMP 20x, CMMC Certified, EU-US DPF
About A-LIGN
A-LIGN is a cybersecurity compliance firm that provides audit and assessment services. It helps organisations meet standards such as SOC 2, ISO 27001, HITRUST, FedRAMP, CMMC and PCI DSS. It also offers cybersecurity services including penetration testing, red teaming, ransomware preparedness, social engineering and vulnerability assessment. Its clients include over 6,400 organisations worldwide, from small businesses to large enterprises, across sectors such as government, healthcare, technology and financial services. What sets A-LIGN apart is its combination of experienced auditors and its proprietary audit management platform, A-SCEND. The platform centralises evidence, maps controls across frameworks and uses AI to match evidence, reducing duplication and saving time. A-LIGN has completed over 36,000 audits and holds accreditations as a SOC 2 auditor, ISO certification body, HITRUST assessor, FedRAMP 3PAO and CMMC C3PAO. It also provides privacy services for GDPR and CCPA/CPRA.
Products
- A-SCENDA proprietary audit management platform that centralises evidence, maps controls across frameworks and uses AI to streamline audit preparation and execution.
Ownership and deals
- A-LIGN acquired AssurePointReport on A-LIGN buying AssurePoint (opens in a new tab)
- A-LIGN acquired PathfynderReport on A-LIGN buying Pathfynder (opens in a new tab)
- Hg acquired A-LIGNReport on Hg buying A-LIGN (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.