Making Better Businesses through cybersecurity and compliance
360 Advanced is a relationship-focused cybersecurity and compliance firm offering customized security, privacy, and compliance solutions, including SOC attestations through its licensed CPA firm. The firm serves a global client base from high-tech startups to Fortune 500 companies across various industries. It provides comprehensive services such as readiness assessments, SOC 1, SOC 2 Type 1 and Type 2, and integrated compliance audits.
Firm tier: Boutique firm.
Services: SOC 1, SOC 2 Type I, SOC 2 Type II, ISO 27001, HIPAA, PCI DSS, HITRUST, FedRAMP, CMMC, GDPR.
Offices: St. Petersburg FL.
Industries served: SaaS, Fintech, Healthcare, IT services, Managed services.
360 Advanced provides SOC 1, SOC 2 (Type 1 and Type 2), SOC 2+ (with HIPAA, HITRUST, CSA STAR, and FFIEC add-ons), ISO 27001, PCI DSS, HITRUST, FedRAMP, CMMC, and GDPR. The firm is accredited as a PCI QSA, FedRAMP 3PAO, HITRUST CSF Assessor, and ISO 27001 Body.
360 Advanced does not publish pricing publicly. Fixed-fee pricing is not available; all engagements are custom-quoted. Ranges are not publicly disclosed; RFPs typically take 3–7 days for a quote.
Yes. 360 Advanced operates through a licensed CPA firm for issuing SOC reports, and holds AICPA accreditation alongside PCI QSA, FedRAMP 3PAO, HITRUST CSF Assessor, and ISO 27001 Body designations. Its peer review status is listed as unknown in publicly available records.
360 Advanced's SOC 2 Type 2 covers a 12-month period and is renewed annually, per the 360 Advanced website. The fieldwork and reporting phase typically runs 8–14 weeks once the observation period is complete; the full engagement runs 5–8 months for most clients.
360 Advanced has verified working relationships with Vanta, Drata, and Secureframe. Clients on these platforms can share evidence packages with the 360 Advanced audit team to streamline fieldwork.
360 Advanced's most frequently compared alternatives are Schellman, A-LIGN, and BDO USA. 360 Advanced differentiates on its multi-accreditation breadth (FedRAMP 3PAO, PCI QSA, HITRUST) and its SOC 2+ hybrid approach.