ArCybr
HQ: United StatesVerified
Aberdeen, Maryland CMMC assessment firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Audit firms in Maryland
21 Verified firms with an office in Maryland · Verified first · All auditors
These firms have a published office in Maryland. A firm may also have offices elsewhere. Listings are checked facts, not endorsements or rankings.
August Schell
HQ: United StatesVerified
Rockville, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Cherry Bekaert
HQ: United StatesVerified
CPA and advisory firm with offices across the US; performs SOC 1 and SOC 2 examinations and is listed as a HITRUST External Assessor and CMMC C3PAO.
Raleigh, North Carolina · Carlsbad, California · Torrance, California · +51 more
COACT
HQ: United StatesVerified
Columbia, Maryland cybersecurity firm listed as a FedRAMP 3PAO, offering FISMA, FedRAMP and NIST SP 800-171 compliance services.
CyberQRT
HQ: United StatesVerified
Service-disabled veteran-owned security and IT firm based in Severna Park, Maryland; listed on the FedRAMP Marketplace as a recognized third-party assessment organization (3PAO) since February 2026.
CyberRx
HQ: United StatesVerified
Silver Spring, Maryland cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Edwards Performance Solutions
HQ: United StatesVerified
Columbia, Maryland firm listed as a HITRUST External Assessor and CMMC C3PAO.
Emagine IT
HQ: United StatesVerified
North Bethesda, Maryland technology and cybersecurity firm listed as a FedRAMP 3PAO and CMMC C3PAO.
Frazier & Deeter
HQ: United StatesVerified
Atlanta-based CPA and advisory firm whose cybersecurity practice covers SOC 2, HITRUST, HIPAA and PCI DSS; listed as a PCI QSA and HITRUST External Assessor.
Atlanta, Georgia · Alpharetta, Georgia · Auburn, Alabama · +12 more
IBSS Corp
HQ: United StatesVerified
Silver Spring, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Kieri Solutions
HQ: United StatesVerified
Woodbine, Maryland cybersecurity firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
KirkpatrickPrice
HQ: United StatesVerified
Licensed CPA firm with a Nashville corporate office performing SOC, HITRUST and PCI DSS assessments, with locations listed in ten US cities.
Nashville, Tennessee · Atlanta, Georgia · Bethesda, Maryland · +7 more
KTL Solutions
HQ: United StatesVerified
Frederick, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
MNS Group
HQ: United StatesVerified
Belcamp, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Penacity
HQ: United StatesVerified
Hanover, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
SC&H Group
HQ: United StatesVerified
Maryland audit and advisory firm headquartered in Hunt Valley offering SOC examinations and ISO 27001 certification.
Securesoft Technologies
HQ: United StatesVerified
Greenbelt, Maryland firm listed as an authorized CMMC Third-Party Assessment Organization (C3PAO).
Securisea
HQ: United StatesVerified
Security assessment firm with an Annapolis, Maryland address listed as a FedRAMP 3PAO, PCI QSA and HITRUST External Assessor, with an ANAB-accredited affiliate for ISO 27001 and ISO 42001.
Sentar
HQ: United StatesVerified
Huntsville, Alabama cybersecurity firm listed as a FedRAMP 3PAO and CMMC C3PAO.
Huntsville, Alabama · North Charleston, South Carolina · Columbia, Maryland · +2 more
Sikich
HQ: United StatesVerified
Accounting, technology and advisory firm with US offices in the Midwest, Mid-Atlantic and New England and offices in India; its services include SOC reporting and PCI DSS assessments.
Chicago, Illinois · Alexandria, Virginia · Marlborough, Massachusetts · +13 more
SteelToad
HQ: United StatesVerified
Baltimore, Maryland-based cybersecurity assessment firm; listed on the FedRAMP Marketplace as a recognized third-party assessment organization (3PAO) since June 2025.
Framework pages for this location
Related locations: United States · Columbia, Maryland · Rockville, Maryland
FAQ
How many audit firms are listed in Maryland?
21 Verified firms have a published office in Maryland. Pages exist only where at least 3 Verified firms match. This is not a ranking.
Which registry listings do you check?
Firms on this page appear because an official registry listed them for at least one published framework (SOC 1, SOC 2, HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP). Each firm page names the registry row and the date checked.
Which cities in Maryland have the most listed firms?
Columbia (4), Atlanta (3), Chicago (3), Nashville (3), Rockville (3), Tampa (3).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement, and we do not email firms automatically. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms have an office.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Request received
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.