Cybersecurity audits that are worth it.
KirkpatrickPrice is a licensed CPA firm specializing in cybersecurity and compliance audits such as SOC 1, SOC 2, PCI DSS, HIPAA, HITRUST, and ISO 27001. They have completed audits for over 2,000 clients worldwide using their Online Audit Manager platform. The firm offers services from readiness assessments to final reports with experienced auditors.
Firm tier: Boutique firm.
Services: SOC 1, SOC 2 Type I, SOC 2 Type II, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR.
Offices: Atlanta GA; Bethesda MD; Chicago IL; Dallas TX; Los Angeles CA; Nashville TN; New York NY; San Francisco CA.
Industries served: SaaS, Fintech, HealthTech, Payments, Cloud infrastructure.
KirkpatrickPrice audits SOC 1, SOC 2 (Type 1 and Type 2), ISO 27001, HIPAA, PCI DSS, HITRUST, and GDPR. The firm has completed audits for over 2,000 clients worldwide using its proprietary Online Audit Manager platform.
KirkpatrickPrice does not publish SOC 2 pricing; quotes are scoped. Across the market, Thoropass's cost guide puts SOC 2 Type II audits at $15,000 to $100,000+. Checked 2026-11-04.
Yes. KirkpatrickPrice is an AICPA-accredited CPA firm. The firm also holds PCI QSA and HITRUST CSF Assessor accreditations. Its peer review status is listed as unknown in publicly available records.
KirkpatrickPrice's typical SOC 2 engagement is approximately 12 weeks for the audit and reporting phase, per the auditor record. The full engagement including an observation period (the AICPA sets no fixed minimum; 3 months or more is common) typically runs 6–8 months end-to-end.
We found no public partnership between KirkpatrickPrice and Vanta, Drata, Secureframe or the other platforms in our directory. The firm uses its own Online Audit Manager platform for evidence collection and audit workflow. Checked 2026-11-04.
KirkpatrickPrice's most frequently compared alternatives are Schellman, A-LIGN, and BDO USA. KirkpatrickPrice differentiates with its proprietary audit platform, multi-city office presence, and 2,000+ completed client audits.