{"meta":{"total_agents":410,"total_auditors":527,"returned_agents":20,"returned_auditors":20,"license":"CC BY 4.0","citation":"Agent Index (https://theagentindex.io) — DOI: 10.5281/zenodo.23604511","query":{"q":"soc 2","type":"all","category":"","framework":"","country":"","region":"","accreditation":"","limit":20}},"results":{"agents":[{"type":"agent","slug":"6clicks-hailey-ai","name":"6clicks Hailey AI","vendor":"6clicks","summary":"Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform.","category":"compliance","categories":["compliance","risk"],"frameworks":["SOC 2","ISO 27001","HIPAA","NIST","PCI DSS","DORA","CMMC"],"hq_country":"Australia","pricing_model":"quote","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/6clicks-hailey-ai/"},{"type":"agent","slug":"7ai-agentic-security-platform","name":"7AI agentic security platform","vendor":"7AI","summary":"Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).","category":"security","categories":["security"],"frameworks":[],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-18","url":"https://theagentindex.io/agents/7ai-agentic-security-platform/"},{"type":"agent","slug":"aikido-attack-ai-pentest","name":"Aikido Attack AI Pentesting","vendor":"Aikido Security","summary":"Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.","category":"security","categories":["security","code-security"],"frameworks":[],"hq_country":"Belgium","pricing_model":"published-tiers","last_checked":"2026-10-18","url":"https://theagentindex.io/agents/aikido-attack-ai-pentest/"},{"type":"agent","slug":"aisle-autonomous-vulnerability-remediation","name":"AISLE (autonomous vulnerability discovery, triage and verified-fix agents)","vendor":"AISLE (Aisle s.r.o. / Aisle Inc.)","summary":"Prague-headquartered AI code-security platform in which thousands of agents analyse a codebase in parallel for exploitable vulnerabilities, fix agents write patches, and agentic verification builds the repo and runs tests before opening a pull request for human merge. October 2026 added agent-driven proof of exploitability against running web apps and APIs. Cohere signed a letter of intent to acquire AISLE on Oct 15, 2026.","category":"code-security","categories":["code-security","security"],"frameworks":["SOC 2","ISO 27001","ISO 42001 (vendor's own certification)"],"hq_country":"Czech Republic","pricing_model":"quote","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/aisle-autonomous-vulnerability-remediation/"},{"type":"agent","slug":"akitra-andromeda-ai-agents","name":"Akitra Andromeda AI compliance agents","vendor":"Akitra","summary":"AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer.","category":"compliance","categories":["compliance","risk"],"frameworks":["SOC 2","ISO 27001","HIPAA","PCI DSS","CMMC","DPDP","SOC 1","GDPR","NIST SP 800-53"],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-20","url":"https://theagentindex.io/agents/akitra-andromeda-ai-agents/"},{"type":"agent","slug":"andesite-human-ai-soc","name":"Andesite Human-AI SOC (Azimuth for Government)","vendor":"Andesite","summary":"Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.","category":"security","categories":["security","compliance"],"frameworks":["NIST SP 800-53","NIST CSF","ISO 42001","PCI DSS","HITRUST","CSA STAR"],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-18","url":"https://theagentindex.io/agents/andesite-human-ai-soc/"},{"type":"agent","slug":"anomali-agentic-ai-threatstream-next-gen","name":"Anomali Agentic AI in ThreatStream Next-Gen and the Anomali Data Lake (autonomous triage, scoring and investigation agents)","vendor":"Anomali (Anomali, Inc.)","summary":"Intelligence-native agentic SOC layer: ThreatStream Next-Gen and the Anomali Data Lake ship with autonomous triage, scoring and investigation steps, Tier 1/2 triage agents, a stack-ranked decision queue and automated Priority Intelligence Requirement monitoring, with analysts setting how much autonomy the agents get.","category":"security","categories":["security"],"frameworks":[],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/anomali-agentic-ai-threatstream-next-gen/"},{"type":"agent","slug":"appian-agent-studio","name":"Appian Agent Studio (AI agents)","vendor":"Appian","summary":"Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized.","category":"business-ops","categories":["business-ops","compliance"],"frameworks":["SOC 2","ISO 27001","HIPAA","PCI DSS","FedRAMP"],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-18","url":"https://theagentindex.io/agents/appian-agent-studio/"},{"type":"agent","slug":"appomni-marlin-ai","name":"AppOmni Marlin AI (autonomous SaaS and agentic-AI risk investigation)","vendor":"AppOmni","summary":"US SaaS-security product whose Marlin AI engine autonomously correlates posture, identity and threat signals across SaaS and AI apps, opens investigations without a prompt, and delivers expert-guided remediation steps so teams can cut investigation and resolution time.","category":"security","categories":["security"],"frameworks":["FedRAMP","SOC 2","HIPAA","GDPR"],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-20","url":"https://theagentindex.io/agents/appomni-marlin-ai/"},{"type":"agent","slug":"arctic-wolf-aurora-agentic-soc","name":"Arctic Wolf Aurora Agentic SOC (Swarm of Experts agents)","vendor":"Arctic Wolf (Arctic Wolf Networks)","summary":"Agent-led managed SOC on the Aurora Superintelligence Platform: a 'Swarm of Experts' of oversight, authoritative and process agents runs triage, investigation, response, threat hunting, threat intel and detection engineering, with Arctic Wolf's human experts in the loop for novel cases and critical decisions.","category":"security","categories":["security"],"frameworks":["TX-RAMP"],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-18","url":"https://theagentindex.io/agents/arctic-wolf-aurora-agentic-soc/"},{"type":"agent","slug":"ares-cyber-agentic-ai-security-testing","name":"Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest)","vendor":"Ares Cyber (Ares Cyber S.r.l.)","summary":"Rome security-testing platform that runs SAST, SCA, IaC/secrets, DAST, vulnerability assessment and penetration testing as one pipeline, in which AI agents autonomously chain vulnerabilities and safely run exploits to prove which findings are exploitable, available as SaaS, self-hosted or an air-gapped appliance.","category":"security","categories":["security","code-security"],"frameworks":["ISO 27001","SOC 2","PCI DSS","GDPR"],"hq_country":"Italy","pricing_model":"quote","last_checked":"2026-10-20","url":"https://theagentindex.io/agents/ares-cyber-agentic-ai-security-testing/"},{"type":"agent","slug":"barracuda-email-protection-agentic-remediation","name":"Barracuda Integrated Email Protection agentic threat investigation and clawback (BarracudaONE)","vendor":"Barracuda Networks (Barracuda Networks, Inc.)","summary":"API-based email security for Microsoft 365 and Google Workspace in which AI agents triage threat activity, correlate cross-domain BarracudaONE signals and run real-time, tenant-wide clawback of malicious messages after delivery without SOC intervention, with Bailey AI explaining every verdict and action.","category":"security","categories":["security"],"frameworks":[],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-20","url":"https://theagentindex.io/agents/barracuda-email-protection-agentic-remediation/"},{"type":"agent","slug":"beelzebub-arcangelo-agentic-pentesting","name":"Beelzebub Arcangelo (IASM/EASM with agentic penetration testing)","vendor":"Beelzebub (Beelzebub S.r.l.)","summary":"Italian AI-native offensive platform product: Arcangelo continuously maps internal and external attack surfaces, then runs adaptive multi-stage agentic penetration tests that plan and pivot like an attacker, with potentially intrusive exploitation kept human-approved and auditable.","category":"security","categories":["security"],"frameworks":["ISO 27001"],"hq_country":"Italy","pricing_model":"quote","last_checked":"2026-10-20","url":"https://theagentindex.io/agents/beelzebub-arcangelo-agentic-pentesting/"},{"type":"agent","slug":"behavox-digital-employees","name":"Behavox Digital Employees (AI agents for compliance surveillance alert review)","vendor":"Behavox (Behavox Limited)","summary":"AI agents that close routine Level 1 communications and trade-surveillance alerts on their own, using three-model consensus (any disagreement escalates to a human), with a regulator-ready Bundle Log of every decision.","category":"compliance","categories":["compliance","risk"],"frameworks":[],"hq_country":"United Kingdom","pricing_model":"quote","last_checked":"2026-10-23","url":"https://theagentindex.io/agents/behavox-digital-employees/"},{"type":"agent","slug":"bind-contract-agent","name":"Bind agentic contract workspace (drafting and negotiation agent with automated renewals and workflows)","vendor":"Bind (Aatos Legal Technology Oy)","summary":"Helsinki agentic contract workspace for in-house legal, sales and procurement teams: an agent drafts contracts from emails, call notes or deal terms using the team's templates, reads each counterparty redline against the playbook and past deals and writes the counter, remembers what was conceded in earlier rounds, and runs renewal reminders, assignments and post-signature filing on its own.","category":"business-ops","categories":["business-ops"],"frameworks":["SOC 2","ISO 27001"],"hq_country":"Finland","pricing_model":"published-tiers","last_checked":"2026-10-20","url":"https://theagentindex.io/agents/bind-contract-agent/"},{"type":"agent","slug":"blackpoint-ai-soc-agent-itdr","name":"Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)","vendor":"Blackpoint Cyber (Blackpoint Holdings, LLC)","summary":"AI SOC agent inside Blackpoint's managed ITDR service that autonomously contains high-confidence credential attacks on Microsoft 365 and Google Workspace accounts: it suspends the account, forces a password reset, ends active sessions and logs its reasoning, and escalates anything below its confidence threshold to a human SOC analyst. Generally available since July 8, 2026.","category":"security","categories":["security"],"frameworks":[],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/blackpoint-ai-soc-agent-itdr/"},{"type":"agent","slug":"censinet-risk-assessor-agent","name":"Censinet Risk Assessor Agent (Assessor Agent for Supply Chain and Vendor Risk, Censinet GRC AI)","vendor":"Censinet","summary":"Healthcare third-party risk agent in Censinet RiskOps that reviews vendor questionnaire responses and supporting documents (such as SOC 2 and penetration-test reports), captures integration details from requests, identifies findings and drafts assessment reports and corrective action plans for the risk assessor to validate.","category":"risk","categories":["risk"],"frameworks":[],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/censinet-risk-assessor-agent/"},{"type":"agent","slug":"cloudgeni-cloud-agents","name":"Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents)","vendor":"Cloudgeni (Cloudgeni AS)","summary":"Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy.","category":"security","categories":["security","compliance"],"frameworks":["CIS Benchmarks","SOC 2","ISO 27001","NIS2","DORA"],"hq_country":"Norway","pricing_model":"freemium","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/cloudgeni-cloud-agents/"},{"type":"agent","slug":"command-zero-agent-zero","name":"Command Zero Agent Zero (autonomous security analyst)","vendor":"Command Zero (Command Zero, Inc.)","summary":"Autonomous and AI-assisted SOC investigation platform from Austin, Texas. Its LLM agent, Agent Zero, investigates alerts end to end across identity, endpoint, cloud, email and SaaS, auto-closes routine cases with documented reasoning, and escalates the rest with a replayable chain of evidence for analysts to confirm or override.","category":"security","categories":["security"],"frameworks":[],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-19","url":"https://theagentindex.io/agents/command-zero-agent-zero/"},{"type":"agent","slug":"comp-ai","name":"Comp AI","vendor":"Comp AI","summary":"Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.","category":"compliance","categories":["compliance"],"frameworks":["SOC 2","ISO 27001","HIPAA","GDPR","FedRAMP"],"hq_country":"United States","pricing_model":"quote","last_checked":"2026-10-15","url":"https://theagentindex.io/agents/comp-ai/"}],"auditors":[{"type":"auditor","slug":"360-advanced","name":"360 Advanced","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","ISO 27001","ISO 27701","HITRUST","PCI DSS","FedRAMP","GovRAMP"],"accreditations":[{"body":"CPAverify (NASBA) - FL board of accountancy","status":"360 ADVANCED, INC - FL license AD67897, Current","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=74&firmName=360%20Advanced","verified_at":"2026-10-20"},{"body":"ANAB Management Systems CB Directory","status":"Accredited: 360 Advanced Compass Rose - ISO/IEC 27001, 27701","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-20"},{"body":"FedRAMP Marketplace - recognized assessors (3PAO)","status":"Listed as FedRAMP-recognized assessor: 360 Advanced Compass Rose (recognized Aug 21, 2024)","url":"https://www.fedramp.gov/marketplace/assessors/","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: 360 Advanced","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"PCI SSC Qualified Security Assessor list","status":"Listed as QSA company: 360 Advanced, Inc. (not in remediation)","url":"https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/","verified_at":"2026-10-20"},{"body":"GovRAMP accredited 3PAO list","status":"Listed as GovRAMP A2LA-accredited 3PAO: 360 Advanced","url":"https://govramp.org/third-party-assessors","verified_at":"2026-10-27"}],"verified":true,"listing_tier":"verified","registry_listings":[{"registry":"govramp-3pao","registry_label":"GovRAMP accredited 3PAO list","source_url":"https://govramp.org/third-party-assessors","as_of":"2026-10-27","status":"listed","legal_name":"360 Advanced"}],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/360-advanced/"},{"type":"auditor","slug":"aarc-360","name":"AARC-360","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","HITRUST","PCI DSS","FedRAMP","GovRAMP"],"accreditations":[{"body":"CPAverify (NASBA) - GA board of accountancy","status":"NEIL GONSALVES & ASSOCIATES, LLC (AARC-360 entity per PCI SSC listing) - GA firm license ACF006256, Active; no enforcement actions reported (only CPAverify record for the entity)","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Neil%20Gonsalves%20%26%20Associates","verified_at":"2026-10-23"},{"body":"PCI SSC Qualified Security Assessor list","status":"Listed as QSA company: Neil Gonsalves & Associates LLC, dba AARC-360 (not in remediation)","url":"https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: AARC-360","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"FedRAMP Marketplace - recognized assessors (3PAO)","status":"Listed as FedRAMP-recognized assessor: AARC-360 (recognized Feb 5, 2025)","url":"https://www.fedramp.gov/marketplace/assessors/","verified_at":"2026-10-20"},{"body":"GovRAMP accredited 3PAO list","status":"Listed as GovRAMP A2LA-accredited 3PAO: AARC-360","url":"https://govramp.org/third-party-assessors","verified_at":"2026-10-27"}],"verified":true,"listing_tier":"verified","registry_listings":[{"registry":"govramp-3pao","registry_label":"GovRAMP accredited 3PAO list","source_url":"https://govramp.org/third-party-assessors","as_of":"2026-10-27","status":"listed","legal_name":"AARC-360"}],"last_checked":"2026-10-23","government_body":false,"url":"https://theagentindex.io/auditors/aarc-360/"},{"type":"auditor","slug":"aprio","name":"Aprio","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 2","ISO 27001","ISO 27701","ISO 42001","HITRUST","PCI DSS","FedRAMP","CMMC","GovRAMP"],"accreditations":[{"body":"CPAverify (NASBA) - GA board of accountancy","status":"APRIO, LLP - GA license ACF000080, Active","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Aprio","verified_at":"2026-10-20"},{"body":"ANAB Management Systems CB Directory","status":"Accredited: Aprio, LLP - ISO 22301, ISO 9001, ISO/IEC 27001, 27701, 42001","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-20"},{"body":"FedRAMP Marketplace - recognized assessors (3PAO)","status":"Listed as FedRAMP-recognized assessor: Aprio, LLP. (recognized Apr 13, 2023)","url":"https://www.fedramp.gov/marketplace/assessors/","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Aprio, LLP","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"PCI SSC Qualified Security Assessor list","status":"Listed as QSA company: Aprio, LLP (not in remediation)","url":"https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/","verified_at":"2026-10-20"},{"body":"Cyber AB Marketplace - C3PAO","status":"Listed as C3PAO: Aprio, LLP (Atlanta, GA)","url":"https://cyberab.org/Catalog","verified_at":"2026-10-20"},{"body":"GovRAMP accredited 3PAO list","status":"Listed as GovRAMP A2LA-accredited 3PAO: Aprio","url":"https://govramp.org/third-party-assessors","verified_at":"2026-10-27"}],"verified":true,"listing_tier":"verified","registry_listings":[{"registry":"govramp-3pao","registry_label":"GovRAMP accredited 3PAO list","source_url":"https://govramp.org/third-party-assessors","as_of":"2026-10-27","status":"listed","legal_name":"Aprio"}],"last_checked":"2026-10-22","government_body":false,"url":"https://theagentindex.io/auditors/aprio/"},{"type":"auditor","slug":"asacb","name":"ASACB (Aviation Suppliers Association)","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["ISO 27001"],"accreditations":[{"body":"ANAB Management Systems CB Directory","status":"Accredited: ASA-MS-9669 - Aviation Suppliers Association dba ASACB (District of Columbia); accredited to include ISO/IEC 27001","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-22"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-22","government_body":false,"url":"https://theagentindex.io/auditors/asacb/"},{"type":"auditor","slug":"boulay","name":"Boulay","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","ISO 27001"],"accreditations":[{"body":"CPAverify (NASBA) - MN board of accountancy","status":"BOULAY PLLP - MN firm license 01091, Active; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=40&firmName=Boulay","verified_at":"2026-10-20"},{"body":"ANAB Management Systems CB Directory","status":"Accredited: Boulay Certifications, LLC (Minnesota) - ISO/IEC 27001","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/boulay/"},{"type":"auditor","slug":"bureau-veritas-brasil","name":"Bureau Veritas Brasil (BVQI do Brasil)","hq":"Brazil","hq_country":"Brazil","regions":["Brazil"],"frameworks":["ISO 27001"],"accreditations":[{"body":"Inmetro/Cgcre (Brazil) - accredited information security management system certification bodies (OTS)","status":"Listed as OTS 0010, BVQI do Brasil Sociedade Certificadora Ltda, Barueri/SP, Alphaville Centro Ind. e Empresarial, Situação: Ativo (accredited by Cgcre for ISO/IEC 27001 information security management system certification)","url":"http://www.inmetro.gov.br/organismos/resultado_consulta.asp?Ind_Ordenacao=C&Ind_Status=A&Seq_Tipo_Relacionamento=32&Sig_Pais=BRA","verified_at":"2026-10-22"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-22","government_body":false,"url":"https://theagentindex.io/auditors/bureau-veritas-brasil/"},{"type":"auditor","slug":"cherry-bekaert","name":"Cherry Bekaert","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","HITRUST","CMMC"],"accreditations":[{"body":"CPAverify (NASBA) - VA board of accountancy","status":"CHERRY BEKAERT LLP - VA firm license 132400, Active; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=Cherry%20Bekaert","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Cherry Bekaert","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"Cyber AB Marketplace - C3PAO","status":"Listed as C3PAO, active and in good standing: Cherry Bekaert (Tysons, VA)","url":"https://cyberab.org/Catalog","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/cherry-bekaert/"},{"type":"auditor","slug":"cybercrest-compliance","name":"CyberCrest Compliance","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 2","HITRUST","HIPAA"],"accreditations":[{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: CyberCrest Compliance","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-21"},{"body":"CPAverify (NASBA ALD)","status":"CYBERCREST CONTROLS RLLP, CA PAR 8215, Clear; none reported to this site by the board (only record)","url":"https://ald.nasba.org/search/firm","verified_at":"2026-10-21"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-21","government_body":false,"url":"https://theagentindex.io/auditors/cybercrest-compliance/"},{"type":"auditor","slug":"decrypt-compliance","name":"Decrypt Compliance","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","HITRUST","HIPAA"],"accreditations":[{"body":"CPAverify (NASBA) - CA board of accountancy","status":"DECRYPT COMPLIANCE PC - CA firm license COR 9491, Clear; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?firmName=Decrypt&size=500","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Decrypt Compliance","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-21","government_body":false,"url":"https://theagentindex.io/auditors/decrypt-compliance/"},{"type":"auditor","slug":"elliott-davis","name":"Elliott Davis","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2"],"accreditations":[{"body":"CPAverify (NASBA) - SC board of accountancy","status":"ELLIOTT DAVIS LLC - SC AFI.1273 Active; ELLIOTT DAVIS, PLLC NC 31051 and 32910 Active; no actions reported","url":"https://ald.nasba.org/search/firm/results?firmName=Elliott%20Davis","verified_at":"2026-10-22"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-22","government_body":false,"url":"https://theagentindex.io/auditors/elliott-davis/"},{"type":"auditor","slug":"frank-rimerman","name":"Frank, Rimerman + Co.","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","ISO 27001","ISO 27701"],"accreditations":[{"body":"CPAverify (NASBA) - CA board of accountancy","status":"FRANK RIMERMAN & CO LLP - CA PAR 1246, Clear; UT 13049969-2603 and 13796257-2603 Active; no actions reported on participating boards","url":"https://ald.nasba.org/search/firm/results?firmName=Frank%20Rimerman","verified_at":"2026-10-22"},{"body":"ANAB Management Systems CB Directory","status":"Accredited: FRIS-MS-2829 - Frank, Rimerman Information Security, LLC (California); accredited to include ISO/IEC 27001 and ISO/IEC 27701","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-22"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-22","government_body":false,"url":"https://theagentindex.io/auditors/frank-rimerman/"},{"type":"auditor","slug":"frazier-and-deeter","name":"Frazier & Deeter","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 2","HITRUST","PCI DSS","HIPAA"],"accreditations":[{"body":"CPAverify (NASBA) - GA board of accountancy","status":"FRAZIER & DEETER LLC - GA firm license ACF000776, Active; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=110&firmName=Frazier%20%26%20Deeter","verified_at":"2026-10-20"},{"body":"PCI SSC Qualified Security Assessor list","status":"Listed as QSA company: Frazier & Deeter, LLC (not in remediation)","url":"https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Frazier & Deeter","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/frazier-and-deeter/"},{"type":"auditor","slug":"geels-norton","name":"Geels Norton","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2"],"accreditations":[{"body":"CPAverify (NASBA) - NC board of accountancy","status":"GEELS NORTON PLLC - NC firm license 35060, Active; no enforcement actions reported. Also Active with no actions reported: GEELS NORTON LLC WA 50685 and CT CPAP.0005709.","url":"https://ald.nasba.org/search/firm/results?firmName=Geels%20Norton&size=500","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/geels-norton/"},{"type":"auditor","slug":"jasro","name":"Japan Security Rating Organization (JaSRO)","hq":"Japan","hq_country":"Japan","regions":["Japan"],"frameworks":["ISMAP"],"accreditations":[{"body":"ISMAP (Information system Security Management and Assessment Program, Japan) - audit institution list","status":"Registered ISMAP audit institution 一般社団法人日本セキュリティ格付機構, registration no. A26-0008, registered 2026-06-26, registration valid until 2028-06-25","url":"https://www.ismap.go.jp/csm?id=audit_institution_list","verified_at":"2026-10-27"}],"verified":true,"listing_tier":"verified","registry_listings":[{"registry":"ismap","registry_label":"ISMAP audit institution list","source_url":"https://www.ismap.go.jp/csm?id=audit_institution_list","as_of":"2026-10-27","status":"listed","registry_id":"A26-0008","legal_name":"一般社団法人日本セキュリティ格付機構","valid_until":"2028-06-25"}],"last_checked":"2026-10-27","government_body":false,"url":"https://theagentindex.io/auditors/jasro/"},{"type":"auditor","slug":"kirkpatrickprice","name":"KirkpatrickPrice","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","HITRUST","PCI DSS"],"accreditations":[{"body":"CPAverify (NASBA) - TN board of accountancy","status":"KIRKPATRICK PRICE INC - TN license 4592, Active - Fully Licensed","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=16&firmName=Kirkpatrick","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: KirkpatrickPrice","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"PCI SSC Qualified Security Assessor list","status":"Listed as QSA company: KirkpatrickPrice, Inc. dba Raven Eye (not in remediation)","url":"https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/kirkpatrickprice/"},{"type":"auditor","slug":"kompleye","name":"Kompleye","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","ISO 27001","ISO 27701","HITRUST","FedRAMP","CMMC","GovRAMP"],"accreditations":[{"body":"CPAverify (NASBA) - VA board of accountancy","status":"KOMPLEYE ATTESTATION LLC - VA license 134553, Active","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=38&firmName=Kompleye","verified_at":"2026-10-20"},{"body":"ANAB Management Systems CB Directory","status":"Accredited: Kompleye Attestation, LLC - ISO 9001, ISO/IEC 27001, 27701","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-20"},{"body":"FedRAMP Marketplace - recognized assessors (3PAO)","status":"Listed as FedRAMP-recognized assessor: Kompleye (recognized Aug 3, 2022)","url":"https://www.fedramp.gov/marketplace/assessors/","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Kompleye Attestation LLC","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"Cyber AB Marketplace - C3PAO","status":"Listed as C3PAO: Kompleye Attestation LLC (Reston, VA)","url":"https://cyberab.org/Catalog","verified_at":"2026-10-20"},{"body":"GovRAMP accredited 3PAO list","status":"Listed as GovRAMP A2LA-accredited 3PAO: Kompleye","url":"https://govramp.org/third-party-assessors","verified_at":"2026-10-27"}],"verified":true,"listing_tier":"verified","registry_listings":[{"registry":"govramp-3pao","registry_label":"GovRAMP accredited 3PAO list","source_url":"https://govramp.org/third-party-assessors","as_of":"2026-10-27","status":"listed","legal_name":"Kompleye"}],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/kompleye/"},{"type":"auditor","slug":"linford-and-company","name":"Linford & Company","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","ISO 27001","ISO 27701","HITRUST","PCI DSS","FedRAMP","CMMC","HIPAA","GovRAMP"],"accreditations":[{"body":"CPAverify (NASBA) - CO board of accountancy","status":"LINFORD & COMPANY LLP - CO license FRM.0013034, Active","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=112&firmName=Linford","verified_at":"2026-10-20"},{"body":"ANAB Management Systems CB Directory","status":"Accredited: Linford & Company LLP - ISO/IEC 27001, 27701","url":"https://anabdirectory.remoteauditor.com/","verified_at":"2026-10-20"},{"body":"FedRAMP Marketplace - recognized assessors (3PAO)","status":"Listed as FedRAMP-recognized assessor: Linford & Company (recognized Mar 31, 2017)","url":"https://www.fedramp.gov/marketplace/assessors/","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Linford & Company","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"PCI SSC Qualified Security Assessor list","status":"Listed as QSA company: Linford & Company LLP (not in remediation)","url":"https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/","verified_at":"2026-10-20"},{"body":"Cyber AB Marketplace - C3PAO","status":"Listed as C3PAO: Linford & Company LLP (Denver, CO)","url":"https://cyberab.org/Catalog","verified_at":"2026-10-20"},{"body":"GovRAMP accredited 3PAO list","status":"Listed as GovRAMP A2LA-accredited 3PAO: Linford & Company LLP","url":"https://govramp.org/third-party-assessors","verified_at":"2026-10-27"}],"verified":true,"listing_tier":"verified","registry_listings":[{"registry":"govramp-3pao","registry_label":"GovRAMP accredited 3PAO list","source_url":"https://govramp.org/third-party-assessors","as_of":"2026-10-27","status":"listed","legal_name":"Linford & Company LLP"}],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/linford-and-company/"},{"type":"auditor","slug":"maloney-novotny","name":"Maloney + Novotny","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","HITRUST"],"accreditations":[{"body":"CPAverify (NASBA) - OH board of accountancy","status":"MALONEY + NOVOTNY LLC - OH firm license 44114034.PR, Active; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?firmName=Maloney&size=500","verified_at":"2026-10-20"},{"body":"CPAverify (NASBA) - FL board of accountancy","status":"MALONEY + NOVOTNY LLC - FL firm license AD66978, Current; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?firmName=Maloney&size=500","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: Maloney + Novotny LLC","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/maloney-novotny/"},{"type":"auditor","slug":"mckonly-and-asbury","name":"McKonly & Asbury","hq":"United States","hq_country":"US","regions":["United States"],"frameworks":["SOC 1","SOC 2","HITRUST","CMMC"],"accreditations":[{"body":"CPAverify (NASBA) - MD board of accountancy","status":"MCKONLY & ASBURY LLP - MD firm license 0037905, Active; no enforcement actions reported","url":"https://ald.nasba.org/search/firm/results?jurisdictionId=35&firmName=McKonly","verified_at":"2026-10-20"},{"body":"HITRUST Authorized External Assessor list","status":"Listed as External Assessor: McKonly & Asbury","url":"https://hitrustalliance.net/find-an-external-assessor","verified_at":"2026-10-20"},{"body":"Cyber AB Marketplace - C3PAO","status":"Listed as C3PAO, active and in good standing: McKonly & Asbury, LLP (Camp Hill, PA)","url":"https://cyberab.org/Catalog","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-20","government_body":false,"url":"https://theagentindex.io/auditors/mckonly-and-asbury/"},{"type":"auditor","slug":"mhm-cpa","name":"MHM CPA","hq":"Canada","hq_country":"Canada","regions":["Canada"],"frameworks":["SOC 1","SOC 2","ISO 27001","ISO 27701","ISO 42001"],"accreditations":[{"body":"Standards Council of Canada (SCC) directory of accredited organizations","status":"Accredited: MHM Advisory Ltd. (SCC file 08074), Management Systems - ISMS (ISO/IEC 27001:2022), PIMS (ISO/IEC 27701:2019), AIMS (ISO/IEC 42001:2023); valid to 2027-11-28","url":"https://scc-ccn.ca/accreditation/management-systems/mhm-advisory-ltd","verified_at":"2026-10-20"},{"body":"CPA Alberta - Verify a Professional Accounting Firm","status":"MHM Professional Corporation, Chartered Professional Accountant (Calgary): Good Standing; registered service areas Audit, Review, Accounting Services; no conditions/restrictions","url":"https://services.cpaalberta.ca/VerifyEntity/Firms/","verified_at":"2026-10-20"}],"verified":true,"listing_tier":"verified","registry_listings":[],"last_checked":"2026-10-22","government_body":false,"url":"https://theagentindex.io/auditors/mhm-cpa/"}]}}