Browse SOC 2 Auditors
Search and filter SOC 2 audit firms by the criteria that matter most for your engagement. Each listing links to a full profile with audit types, industry focus, platform support, pricing, and timeline information where available.
67 firms found. Clear filters
Keiter
Glen Allen, VAKeiter is a Virginia-based CPA firm offering SOC 1 and SOC 2 examinations through their Risk Advisory Services team. Their practice lead, Scott McAuliffe (CISA, CFE), has 25+ years in public accounting, including Sarbanes-Oxley, internal audit, and CMMC work. They also offer IT audit via Keiter Technologies.
KirkpatrickPrice
Nashville, TNKirkpatrickPrice is a licensed CPA firm and PCAOB-registered auditor that has issued over 20,000 security compliance reports to more than 2,000 clients worldwide since its founding. They specialize exclusively in cybersecurity audits including SOC 1, SOC 2, PCI DSS, HITRUST CSF, and ISO 27001.
KPMG
New York, NYKPMG is a Big Four accounting firm with a strong IT attestation practice, offering SOC 2 audits as part of their broader assurance services with a global focus on risk management and compliance.
Lazarus Alliance
Scottsdale, AZLazarus Alliance is a licensed CPA firm and cybersecurity audit specialist providing SOC 1, SOC 2, and SOC 3 examinations, along with FedRAMP, CMMC, and HIPAA compliance services.
LBMC
Nashville, TNLBMC is Tennessee's #1 professional services firm with 1,000+ team members serving 11,000+ clients nationwide. Their SOC audit practice is led by professionals who have issued thousands of SOC reports, including a national AICPA SOC training leader. They offer SOC 1, SOC 2, SOC 3, and SOC for Cybersecurity.
Linford & Company
Denver, COLinford & Company is a Denver-based CPA firm comprised of former Big Four auditors specializing in SOC 2, HIPAA, FedRAMP, and HITRUST assessments. 90% of their work consists of SOC 2 audits.
Marcum
New York, NYMarcum LLP is a top-15 national CPA and advisory firm serving private and public companies. Their Risk Advisory practice specializes in SOC reporting, PCI DSS, HIPAA/HITRUST, FISMA, NIST, and ISO 27001, with staff holding CISA, CISSP, QSA, GPEN, and GWAPT certifications.
Mauldin & Jenkins
Atlanta, GAMauldin & Jenkins is a regional CPA and advisory firm offering SOC examinations, IT audit, and cybersecurity compliance services across the Southeast.
MBE CPAs
Fort Atkinson, WIMBE CPAs is a CPA and advisory firm providing SOC reporting, audit, and compliance services in the Midwest.
Moss Adams
Seattle, WAMoss Adams, founded in 1913, is one of the 15 largest accounting and consulting firms in the United States. Following its 2025 combination with Baker Tilly, the firm operates as the nation's sixth largest CPA advisory firm with 11,000+ professionals across 100+ locations, offering SOC 2 and SOC 3 audit services.
NDB
Houston, TXNDB is a CPA firm specializing in SOC 2 Type I and Type II audits for startup healthcare and technology companies, leveraging Vanta for automated compliance and offering a Virtual Compliance Officer program.
NDNB Accountants
Clearwater, FLNDNB Accountants & Consultants has been a national provider of SOC compliance and assessment services since 2006. The firm specialises in SOC 1, SOC 2, HIPAA, GLBA, and PCI DSS audits, efficiently combining overlapping operational and security controls across frameworks.