Coalfire

HQ: United States · 8 frameworks · 5 offices · Verified

Last checked · 10 sources · How we verify

Get your “Listed on Agent Index” badge Claim this firm profile

Cybersecurity advisory and assessment firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST assessor, ISO certification body and (via Coalfire Federal) CMMC C3PAO.

This listing is a set of checked facts. It is not an endorsement, ranking or score, and it is not legal or audit advice.

Offices

Frameworks

ISO 27001ISO 27701ISO 42001HITRUSTPCI DSSFedRAMPCMMCGovRAMP

A framework appears only when an official registry listed this firm at last check. Tags are not a certification of your organisation.

Accreditations and registry listings

Registry Record Checked
FedRAMP Marketplace - recognized assessors (3PAO) Listed as FedRAMP-recognized assessor: Coalfire Systems, Inc. (recognized Jul 17, 2015)
PCI SSC Qualified Security Assessor list Listed as QSA company: Coalfire Systems, Inc (not in remediation)
HITRUST Authorized External Assessor list Listed as External Assessor: Coalfire
ANAB Management Systems CB Directory Accredited: Coalfire Certification, Inc. - ISO 22301, ISO 9001, ISO/IEC 20000-1, 27001, 27701, 42001
Cyber AB Marketplace - C3PAO Listed as C3PAO: Veris Group, LLC dba Coalfire Federal (Chantilly, VA)
GovRAMP accredited 3PAO list Listed as GovRAMP A2LA-accredited 3PAO: Coalfire

Partner tools

Named in the vendor’s public audit-partner directory at last check. A directory listing is not an endorsement by Agent Index or by the vendor.

FAQ (from this dataset)

Is Coalfire accredited for ISO 27001?

Accredited: Coalfire Certification, Inc. - ISO 22301, ISO 9001, ISO/IEC 20000-1, 27001, 27701, 42001 (ANAB Management Systems CB Directory: https://anabdirectory.remoteauditor.com/). Confirm on the registry.

Is Coalfire accredited for ISO 27701?

Accredited: Coalfire Certification, Inc. - ISO 22301, ISO 9001, ISO/IEC 20000-1, 27001, 27701, 42001 (ANAB Management Systems CB Directory: https://anabdirectory.remoteauditor.com/). Confirm on the registry.

Is Coalfire accredited for ISO 42001?

Accredited: Coalfire Certification, Inc. - ISO 22301, ISO 9001, ISO/IEC 20000-1, 27001, 27701, 42001 (ANAB Management Systems CB Directory: https://anabdirectory.remoteauditor.com/). Confirm on the registry.

Is Coalfire accredited for HITRUST?

Listed as External Assessor: Coalfire (HITRUST Authorized External Assessor list: https://hitrustalliance.net/find-an-external-assessor). Confirm on the registry.

Is Coalfire accredited for PCI DSS?

Listed as QSA company: Coalfire Systems, Inc (not in remediation) (PCI SSC Qualified Security Assessor list: https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/). Confirm on the registry.

Is Coalfire accredited for FedRAMP?

Listed as FedRAMP-recognized assessor: Coalfire Systems, Inc. (recognized Jul 17, 2015) (FedRAMP Marketplace - recognized assessors (3PAO): https://www.fedramp.gov/marketplace/assessors/). Confirm on the registry.

Is Coalfire accredited for CMMC?

Listed as C3PAO: Veris Group, LLC dba Coalfire Federal (Chantilly, VA) (Cyber AB Marketplace - C3PAO: https://cyberab.org/Catalog). Confirm on the registry.

Is Coalfire accredited for GovRAMP?

Listed as GovRAMP A2LA-accredited 3PAO: Coalfire (GovRAMP accredited 3PAO list: https://govramp.org/third-party-assessors). Confirm on the registry.

Where is Coalfire located?

Coalfire publishes headquarters in United States and lists an office in Chicago, United States, plus 4 other offices.

Sources

  1. coalfire.com
  2. coalfire.com/about/contact-us
  3. fedramp.gov/marketplace/assessors/
  4. pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/
  5. hitrustalliance.net/find-an-external-assessor
  6. anabdirectory.remoteauditor.com/
  7. cyberab.org/Catalog
  8. vanta.com/partners/find-a-partner?filters=Audit+Partner
  9. drata.com/partners/audit-alliance/directory
  10. govramp.org/third-party-assessors

Last checked 20 Oct 2026. Spotted an error? Submit a correction or email [email protected].

Not legal or audit advice. Confirm current licences, scope and availability with the firm before engaging them.

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)