Browse SOC 2 Auditors
Search and filter SOC 2 audit firms by the criteria that matter most for your engagement. Each listing links to a full profile with audit types, industry focus, platform support, pricing, and timeline information where available.
67 firms found. Clear filters
A-LIGN
Tampa, FLA-LIGN is a technology-enabled cybersecurity compliance firm and the number one global issuer of SOC 2 reports, having completed over 16,000 audits since its founding in 2009.
Anders CPAs + Advisors
St. Louis, MOAnders CPAs + Advisors is a St. Louis-based CPA firm founded in 1965, providing SOC 1, SOC 2, SOC 2+, and SOC for Cybersecurity audit and advisory services. Their team determines the ideal SOC report type for clients' contractual and regulatory needs. Anders Technology also offers managed IT and vCISO services.
Aprio
Atlanta, GAAprio, founded in 1952, is a Top 25 U.S. public accounting firm with 1,900+ team members serving clients in 50+ countries. Aprio is one of the few firms offering ISO, SOC reporting, HITRUST, PCI DSS, CMMC, FedRAMP, and WebTrust from a single provider.
Assurance Dimensions
Tampa, FLAssurance Dimensions is a Florida-based CPA audit firm founded in 2008 with leadership from former Arthur Andersen, Grant Thornton, BDO, and Schellman professionals. Their team includes a former Schellman Florida SOC practice leader. They specialize in SOC examinations for technology and financial services companies.
ATA (Alexander Thompson Arnold)
Memphis, TNAlexander Thompson Arnold (ATA) is a regional CPA and advisory firm offering SOC examination, IT audit, and risk advisory services across the Mid-South.
Audit Peak
New York, NYAudit Peak is a minority-owned CPA firm specializing in IT audits, cybersecurity, and risk advisory services. Founded by former PwC, EY, and KPMG professionals, the firm delivers Big 4-level audit expertise with boutique agility. AICPA Peer Review rated 'Pass' (highest rating).
Auditwerx
Tampa, FLAuditwerx is a CRI (Carr, Riggs & Ingram) division dedicated exclusively to SOC reporting and compliance attestation. Founded in 2009, they have produced over 3,500 security compliance reports and 200+ reports annually. They specialize in SOC 1, SOC 2, SOC 2+, PCI DSS, and CMMC assessments.
Baker Tilly
Chicago, ILBaker Tilly is a Global CPA and advisory firm with dedicated AICPA SOC specialists performing hundreds of SOC 2 engagements annually across a wide variety of industries.
BARR Advisory
Kansas City, KSBARR Advisory is a cloud-based cybersecurity and compliance firm specializing in SOC 2, ISO 27001, and FedRAMP for fast-growing SaaS and cloud-based organizations, with a net promoter score of 89.
BDO USA
Chicago, ILBDO is a large accounting and consulting firm that provides SOC 2 audits and other assurance services, offering a strong alternative to the Big Four with a growing technology audit practice.
BerryDunn
Portland, MEBerryDunn is the largest assurance, tax, and consulting firm headquartered in New England with nearly 1,000 employees across 7 states and Puerto Rico. Their attest services are provided by BDMP Assurance, LLP, a licensed CPA firm. They have successfully guided MSPs and technology firms through SOC 2 examinations to meet enterprise vendor requirements.
BSI Group
London, EnglandBSI (British Standards Institution) is an international standards and certification body headquartered in London, offering SOC 2 compliance services alongside ISO 27001, ISO 27017, and other information security certifications globally.