Thoropass
Automation-led
Compliance automation platform with an in-house licensed CPA audit affiliate.
- Typical price
- $12K–$45K
- Timeline
- 6–16 weeks
SOC 2 directory
A SOC 2 Type 1 report attests that your controls are designed correctly at a single point in time. It is faster and cheaper than Type 2 and is often used to unblock a deal while the Type 2 observation window runs.
165 matching firms, ranked by fit for early-stage teams.
Automation-led
Compliance automation platform with an in-house licensed CPA audit affiliate.
Boutique
Denver-based boutique CPA firm specializing in IT audit and SOC examinations.
Boutique
Dutch IT audit and assurance specialists issuing SOC 2 reports for SaaS, cloud, and MSP providers.
Boutique
Austin's largest locally owned CPA firm performing SOC 2 readiness and examination services.
Boutique
An Oregon-registered CPA firm focused on IT and security attest engagements.
Boutique
Atlanta-based GRC and security firm issuing SOC reports via its registered CPA arm.
Boutique
Florida-licensed CPA firm offering SOC examinations alongside a broad multi-framework compliance stack.
Boutique
US-licensed CPA firm performing SOC 2 examinations under AICPA SSAE 18 with India-based delivery
Boutique
AICPA-licensed Pacific Northwest CPA firm issuing the full SOC reporting suite, from SOC 1 to SOC 3.
Boutique
Polish audit firm delivering CPA-certified SOC examinations and ISAE 3402 attestations.
Boutique
Pacific Northwest CPA firm offering SOC 2 audits alongside ISO 27001 internal audit support.
Boutique
Tech-forward boutique CPA firm focused almost exclusively on SOC examinations.
Boutique
Security and compliance firm issuing SOC 2 reports through its named licensed CPA affiliate, CompliancePoint Assurance.
Boutique
US licensed CPA firm conducting independent SOC 2 examinations for organizations in regulated industries.
Boutique
New Jersey CPA firm issuing SOC 1 and SOC 2 reports on service organization controls.
Boutique
AICPA-accredited SOC 2 examinations built exclusively for healthcare.
Boutique
CPA-led SOC examinations paired with hands-on cybersecurity expertise.
Ohio-based CPA firm providing SOC 1, SOC 2, and SOC 3 reports backed by CPAs and security-certified auditors.
Boutique
AICPA-registered CPA firm focused on multi-framework security and compliance audits.
Boutique
A Florida CPA firm pairing SOC 2 examinations with everyday accounting and tax services.
Boutique
A Dutch IT-audit specialist whose NOREA-registered IT auditors examine and report on SOC 2 Type 1 and Type 2.
Boutique
A licensed CPA firm bringing SOC and attestation rigor to crypto and digital assets.
Boutique
California CPA firm issuing the full SOC suite plus HIPAA, with offices across the Western US.
Boutique
PCAOB-registered CPA firm specializing in SOC and integrated compliance
Boutique
Colorado-licensed CPA firm focused on SOC examinations for SaaS and cloud companies.
Boutique
Veteran-owned, fully licensed CPA firm that issues SOC 1 and SOC 2 attestation reports in-house.
Boutique
Specialist CPA firm focused on SOC examinations for cloud-native and technology companies.
Boutique
A Montana CPA practice offering SOC 1 and SOC 2 attestation with a high-touch, single-relationship model.
Boutique
Texas-based CPA firm offering SOC 1 and SOC 2 readiness and examination services for middle-market service organizations.
Boutique
CPA-led SOC reporting specialist in the Atlanta area covering SOC 1/2, ISO 27001, and HIPAA.
Boutique
CPA firm focused on IT audit, SOC and security compliance
Boutique
U.S.-based CPA audit firm performing SOC 1 and SOC 2 attestation audits for clients across multiple continents.
Boutique
A licensed CPA firm issuing SOC 2 attestations alongside ISO and privacy framework audits for tech companies in India and beyond.
Boutique
Utah CPA firm conducting SOC 1, SOC 2, and SOC 3 audits under AICPA guidance.
Boutique
Fixed-fee SOC 2 audits from a specialist CPA practice
Boutique
SOC 2 specialist for high-growth cloud and SaaS companies, also delivering SOC 1 and ISO 27001 work.
Boutique
AICPA peer-reviewed CPA firm offering CPA-led SOC 2 attestation with a global footprint.
Boutique
Boutique Michigan CPA firm delivering fast SOC 1, SOC 2, and HIPAA attestations.
Boutique
Florida CPA and advisory firm providing SOC 1, SOC 2, and SOC 3 reporting through its risk advisory practice.
Boutique
Licensed CPA firm guiding organizations from readiness through SOC 2 Type 1 and Type 2 attestation.
Boutique
California CPA firm performing SOC 2 examinations for startups and SaaS companies.
Boutique
Montana boutique CPA practice focused on SOC 2 and ISO 27001 audit and attestation for technology, blockchain, and AI companies.
A German Wirtschaftsprüfungsgesellschaft performing SOC 2 and ISAE 3402 examinations for service organizations.
Boutique
A Cleveland CPA firm delivering tailored SOC 1 and SOC 2 attestations.
Boutique
Boutique SOC 2 and compliance attestation firm founded by former Deloitte CPAs serving startups and growing tech companies.
Boutique
A PCAOB-registered CPA firm focused solely on SOC audits and compliance.
Boutique
Utah CPA firm offering SOC 1, SOC 2, SOC 3, and SOC for Cybersecurity reporting.
Toronto CPA firm providing SOC 1, 2 and 3 attestation for cloud and SaaS service organizations.
Boutique
AICPA peer-reviewed US CPA firm issuing SOC 2 reports with international reach.
Boutique
Virginia CPA firm providing SOC 1/2/3 exams and readiness through a CPA-led risk advisory team.
Boutique
A Canadian CPA practice issuing SOC 1, 2 and 3 reports for technology and SaaS companies.
Boutique
Utah-based CPA and IT-assurance firm delivering SOC 2 examinations alongside SOC 1, ISO, and HITRUST audits.
Boutique
Scottish chartered accountancy delivering SOC and ISAE 3402 third-party assurance for UK and European tech firms
Connecticut CPA firm offering Service Organization Controls reporting across SOC 1 and SOC 2.
Boutique
US-based licensed CPA firm delivering AICPA SOC 2 audits.
National firm
Cloud-focused security and compliance CPA firm serving regulated, high-value-data organizations.
Boutique
ICAEW-registered West London chartered accountants issuing SOC 1 and SOC 2 reports under SSAE 18.
Boutique
PCAOB-registered CPA firm specializing in SOC examinations and IT compliance attestations.
Boutique
Licensed CPA firm delivering integrated SOC and federal-focused IT security audits.
Boutique
SOC 2 attestations for SaaS, AI, and fintech companies, delivered by a licensed CPA firm.
Houston-based CPA firm delivering SOC 1, SOC 2, and SOC 3 attestation for service organizations.
National firm
Top-tier independent assessor combining a licensed CPA firm with ISO, PCI, FedRAMP, and HITRUST accreditations.
Boutique
Minnesota CPA firm performing SOC 1, SOC 2, and SOC 3 examinations as an independent CPA firm.
Italian licensed-auditor practice issuing AICPA SOC 1, SOC 2 and SOC 3 reports for service organizations
Boutique
California-licensed CPA firm delivering SOC 2 Type I and Type II reports for B2B software companies.
National firm
Tampa-based licensed CPA firm founded by former Big Four auditors for SOC, ISO, PCI, and HIPAA.
Boutique
SOC 2 and SOC 1 attestation specialists backed by a national CPA firm affiliation.
Boutique
AICPA-accredited audit firm combining SOC 2 attestation with compliance automation and advisory.
National firm
Licensed CPA firm offering SOC, PCI, ISO, HIPAA, and penetration testing across US offices.
Boutique
Global security audit firm delivering SOC 2 Type I and Type II reports via licensed CPA auditors.
National firm
Global compliance and cybersecurity firm serving as a licensed SOC auditor and multi-framework assessor.
Boutique
Ohio CPA firm with a dedicated SOC audit team issuing SOC 1, SOC 2, and SOC 3 reports.
National firm
Information risk management division issuing SOC reports through Top 40 CPA firm The Bonadio Group.
National firm
SOC reporting and IT assurance against AICPA Trust Services Criteria.
National firm
PCAOB-registered CPA audit firm specializing in SOC and security attestations for B2B SaaS.
National firm
CPA and consulting firm specializing in SOC examinations for SaaS, FinTech and payroll providers.
National firm
New Zealand audit and assurance firm providing SOC 1, SOC 2 and SOC 3 reporting.
National firm
SOC 1, SOC 2, and SOC 2+ reporting from a century-old national CPA firm with AICPA SOC committee involvement.
National firm
Top-60 independent CPA firm delivering the full SOC report suite
National firm
Oklahoma and Arkansas CPA firm whose Risk Assurance team issues SOC reports alongside HITRUST and CMMC services.
National firm
Connecticut CPA and advisory firm delivering SOC 1 and SOC 2 attestation alongside IT risk services.
National firm
Cybersecurity and compliance firm issuing SOC reports through its licensed CPA affiliate, Coalfire Controls.
National firm
Top-100 national CPA firm offering SOC 2 Type 1 and Type 2 attestation, with deep healthcare roots.
National firm
Independent third-party assurance under SOC 1, SOC 2 and ISAE standards from a major UK accountancy firm.
National firm
Pennsylvania CPA firm delivering SOC 1, SOC 2, SOC for Cybersecurity, and SOC for Supply Chain examinations.
National firm
National CPA firm delivering the full range of SOC attestations from a licensed assurance practice.
National firm
Multi-office Southeastern CPA firm issuing the full SOC report suite for service organizations.
National firm
Chartered accountancy firm providing SOC 1, SOC 2, and tailored attestation reports for Irish service organisations.
National firm
Service auditor reports across SOC 1, SOC 2, SOC 3 and ISAE 3402 from a national UK audit and assurance firm.
National firm
Top-100 Massachusetts CPA firm issuing SOC 1, SOC 2, SOC 2+, and SOC for Cybersecurity reports.
National firm
Ohio CPA firm delivering independent SOC 1, SOC 2, and SOC 3 examination reports.
National firm
Licensed CPA firm providing SOC 1, SOC 2 and ISO 27001 attestation services nationwide.
National firm
A Dutch member of the Crowe Global network delivering SOC 2 / ISAE 3000 audits backed by a full audit and assurance practice.
National firm
Top-20 US CPA firm offering SOC 1/2/3 examinations plus rare in-house ISO 27001 certification capability.
National firm
CPA-firm SSAE 18 SOC 1 and SOC 2 reporting for service organizations
National firm
ICAEW-registered UK chartered accountancy firm providing independent SOC 1, SOC 2 and SOC 3 assurance reports.
National firm
Maryland-based CPA firm delivering the full range of SOC examinations under the AICPA Trust Services Criteria.
National firm
National Australian assurance firm delivering SOC 1, SOC 2 Type 1 and Type 2 audit and attestation.
National firm
Independent CPA-firm SOC 1 and SOC 2 examinations for service organizations
National firm
One of Tennessee's largest independent CPA firms, issuing SOC 1 and SOC 2 attestation reports.
National firm
Employee-owned Indiana CPA firm with a dedicated IT risk advisory team issuing the full SOC report suite.
National firm
Established Ohio-region CPA firm delivering SOC 1, SOC 2, and SOC 3 reports.
National firm
Licensed CPA firm delivering SOC 1, SOC 2, and SOC 3 examinations with a low-disruption approach.
National firm
Certified public accountants issuing the full SOC report suite for service organizations.
National firm
Full-service CPA firm delivering SOC 1 and SOC 2 examinations through its risk advisory practice.
National firm
Licensed CPA firm issuing SOC 1, SOC 2, SOC 2+, and SOC 3 reports, including mappings to ISO, GDPR, NIST, and COBIT.
National firm
Multi-office Southeastern CPA firm delivering SOC report examinations alongside readiness assessments.
National firm
Established CPA firm issuing SOC 1, SOC 2, and SOC 3 attestation reports under SSAE 18.
National firm
Regional CPA and advisory firm offering SOC reporting examinations for service organizations.
National firm
Licensed CPA firm delivering SOC 1/2/3 reports alongside HIPAA, PCI DSS, and SOX risk solutions.
National firm
Full-spectrum SOC reporting from a national CPA firm, including SOC 2+ mapped to additional security frameworks.
National firm
Danish Grant Thornton member firm delivering SOC 2 and ISAE assurance reports for IT and compliance controls.
National firm
Full-service New England CPA firm delivering the full SOC reporting suite through its Accounting & Assurance practice.
National firm
A Moore Global member firm whose RA/RE-credentialed IT auditors issue independent SOC 2 assurance reports.
National firm
Third-party attestation and SOC reporting from a national assurance practice.
National firm
Independent service auditor reports against ISAE, AICPA SOC and AAF standards from a major UK audit firm.
National firm
National Canadian public accounting firm preparing and issuing SOC reports under AICPA attestation standards.
National firm
SOC 1 and SOC 2 attestation from a licensed mid-sized CPA firm
National firm
Texas-based CPA firm delivering SOC 1 and SOC 2 reporting through its Risk Advisory practice under AT-C 205 / SSAE 18.
National firm
Full-service CPA and advisory firm delivering SOC 2 Type 1 and Type 2 examinations to organizations in the DC region and beyond.
National firm
Regional CPA and advisory firm performing SOC 1, SOC 2, and SOC 3 examinations across the Mid-Atlantic and beyond.
National firm
Licensed US public accounting firm providing independent SOC examinations and broader assurance.
National firm
An established multi-office CPA firm delivering SOC reporting and IT-control assurance.
National firm
Pennsylvania CPA firm providing SOC 1, SOC 2, and SOC for Cybersecurity examinations.
National firm
Carolinas-based regional CPA firm providing SOC 1, SOC 2, and SOC 3 reporting through its assurance practice.
National firm
CPA firm issuing SOC 1, SOC 2 and SOC 3 reports under AICPA SSAE 18 standards.
National firm
Long-established California CPA firm offering SOC 1, 2 & 3 examinations through its IT assurance practice.
National firm
National Canadian CPA firm delivering SOC 1 and SOC 2 third-party assurance under CSAE 3416 and AICPA Trust Services Criteria.
National firm
Full-service CPA and advisory firm with a dedicated SOC, ISO, and IT compliance practice.
National firm
Established California CPA firm issuing SOC 1 and SOC 2 reports across multiple sectors.
National firm
SOC Type I and Type II examinations from a PCAOB-registered national CPA firm's IT Assurance practice.
National firm
Swedish member firm of Grant Thornton issuing SOC 1, SOC 2, and SOC 3 attestation reports for service organizations.
National firm
Licensed CPA firm issuing SOC 2 reports plus SOC 1, SOC for Cybersecurity and SOC 2 + HITRUST.
National firm
SOC reporting addressing data security, availability, and privacy from a national CPA firm.
National firm
Multi-office CPA firm issuing SOC 1, 2, and 3 reports through its licensed CPA assurance practice.
National firm
National Canadian CPA firm delivering SOC 1 and SOC 2 examinations under CSAE attestation standards.
National firm
International audit and assurance firm delivering independent SOC 1 and SOC 2 reporting for UK service organisations.
National firm
CPA firm performing SOC 1 and SOC 2 Type 1 and Type 2 examinations under AICPA Trust Services Criteria.
National firm
Third-party assurance across SOC 1, SOC 2 and ISAE 3000/3402 from a UK accountancy firm in the Moore Global network.
National firm
Licensed CPA firm issuing SOC 1, SOC 2, SOC 3, and SOC for Cybersecurity reports with a mortgage and financial services focus.
National firm
SOC reporting and strategic assurance from a licensed independent CPA firm.
National firm
Buffalo-based full-service CPA firm with an information security attestation practice.
National firm
Silicon Valley CPA firm delivering SOC 1, SOC 2, and SOC 2+ examinations for technology-driven service organizations.
National firm
Multi-office New York CPA firm providing SOC reporting within a broad compliance and attestation practice.
National firm
Australian audit and advisory firm issuing SOC 2 reports without US firm oversight.
National firm
One of Canada's largest CPA firms guiding service organizations through SOC 2 and SOC 3 audits.
National firm
St. Louis CPA firm guiding service organizations from SOC 1 through SOC 2 Type II reporting.
National firm
Multi-office California CPA firm delivering SOC 1, SOC 2, and SOC 3 examinations under SSAE standards.
National firm
SOC examinations for service organizations, cybersecurity, and supply chain from a licensed independent CPA firm.
National firm
Top-20 US CPA firm issuing the full range of SOC reports through its risk advisory practice.
National firm
Established Florida-based CPA and advisory firm delivering SOC 1/2/3 and SOC 2 Plus examinations.
National firm
SOC 1, SOC 2, and SOC 3 audits from a licensed CPA firm, with ISO 27001 and PCI consulting support.
National firm
Century-old Boston CPA firm offering SOC reporting within its assurance practice.
National firm
Atlanta CPA firm delivering SOC 1, SOC 2, and SOC 3 examinations with optional ISO 27001 integration.
National firm
Australian audit and assurance firm issuing SOC 1, SOC 2 and SOC 3 reports under ASAE standards.
National firm
Top-tier national CPA network performing SOC 2 Type 1 and Type 2 examinations.
National firm
Established Canadian CPA firm providing end-to-end SOC 1, SOC 2 and SOC 3 examinations
National firm
SOC report preparation and issuance from a national assurance member firm.
National firm
Top-30 US professional services firm with a licensed CPA arm offering SOC attestation.
National firm
Large West Coast CPA firm with a multi-framework SOC and IT compliance practice.
National firm
Large US accounting and advisory firm offering SOC 1 and SOC 2 examinations.
Big Four
Big Four firm with a globally accredited IT attestation practice for SOC reporting.
Big Four
Big Four firm delivering SOC reporting and attestation through its Digital Assurance practice.
Big Four
Big Four firm offering integrated SOC reporting and ISO certification services.
Big Four
Big Four assurance practice issuing SOC 1, SOC 2, and SOC 3 reports under AICPA attestation standards.
Tell us your stage and timeline. We'll shortlist three firms from this list that fit — within 48 hours. SOC 2 Auditors is free for buyers.
Free for buyers · No spam · Independent of every firm listed