BARR Advisory vs KirkpatrickPrice
How two SOC 2 audit firms compare on price, timeline, framework coverage, and fit — and how to decide between them.
| BARR Advisory | KirkpatrickPrice | |
|---|---|---|
| Typical price | $15K–$50K | $18K–$60K |
| Type 2 timeline | 8–18 weeks | 8–20 weeks |
| Firm tier | National firm | National firm |
| Frameworks | SOC 1, SOC 2 Type 1, SOC 2 Type 2, ISO 27001, HIPAA, PCI DSS, GDPR | SOC 1, SOC 2 Type 1, SOC 2 Type 2, ISO 27001, HIPAA, PCI DSS, GDPR |
| Industry focus | SaaS, Fintech, Healthcare, GovTech | SaaS, Fintech, Healthcare, GovTech |
| Regions | United States, Global | United States, Global |
| AICPA-licensed | Yes | Yes |
| Headquarters | Shawnee Mission, Kansas | Nashville, Tennessee |
How BARR Advisory and KirkpatrickPrice differ
On price, BARR Advisory typically comes in lower ($15K–$50K) than KirkpatrickPrice ($18K–$60K), though scope drives the final quote. Both cover a comparable set of 7 frameworks, so either can bundle SOC 2 with your other assurance needs.
BARR Advisory strengths
- ✓Specializes in cloud service providers and regulated industries
- ✓Combines attestation with advisory like virtual CISO
- ✓International reach across 20+ countries
KirkpatrickPrice strengths
- ✓Licensed CPA firm that is also a PCI QSA and HITRUST assessor
- ✓In-house penetration testing across cloud, network, web, API, mobile
- ✓Wide US office network supporting onsite work
Which should you choose?
Lean toward BARR Advisory if budget is the priority and its scope fits; lean toward BARR Advisory if you want the broadest framework coverage in a single engagement. Both are AICPA-licensed, so either can issue a report your customers will accept — the fastest way to decide is to get quotes from both on identical scope.
Frequently asked questions
Is BARR Advisory or KirkpatrickPrice cheaper for SOC 2?
BARR Advisory typically ranges $15K–$50K and KirkpatrickPrice $18K–$60K. On typical midpoints, BARR Advisory tends to be the lower-cost option, but neither publishes fixed pricing, so a scoped quote from each is the only reliable comparison.
Which covers more frameworks, BARR Advisory or KirkpatrickPrice?
BARR Advisory lists more frameworks (SOC 1, SOC 2 Type 1, SOC 2 Type 2, ISO 27001, HIPAA, PCI DSS, GDPR), which is an advantage if you plan to bundle SOC 2 with other assurance standards.
Are BARR Advisory and KirkpatrickPrice both AICPA-licensed CPA firms?
Yes. Both BARR Advisory and KirkpatrickPrice are AICPA-licensed CPA firms, which is required to issue a SOC 2 report. Either firm's report carries the same recognition with your customers.