Ampcus Cyber
HQ: United StatesVerified
Chantilly, Virginia cybersecurity firm listed as a PCI QSA (places of business include USA, UK and India) and HITRUST External Assessor.
PCI DSS auditors (QSA companies) in Virginia
13 Verified · PCI DSS · office in Virginia · Verified first · All PCI DSS firms · All firms in Virginia
These firms have a current official-registry listing for PCI DSS (PCI SSC Qualified Security Assessor list) and a published office in Virginia. Listings are checked facts, not endorsements or rankings.
Anthony Timbers
HQ: United StatesVerified
Fredericksburg, Virginia assessment firm listed as a FedRAMP 3PAO, CMMC C3PAO and PCI QSA.
Coalfire
HQ: United StatesVerified
Cybersecurity advisory and assessment firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST assessor, ISO certification body and (via Coalfire Federal) CMMC C3PAO.
Chicago, Illinois · Alpharetta, Georgia · Bellevue, Washington · +2 more
ControlCase
HQ: United StatesVerified
Compliance assessment firm based in Fairfax, Virginia with an Indian entity in Mumbai; listed as PCI QSA, FedRAMP 3PAO, HITRUST assessor, C3PAO and CERT-In empanelled auditor. The Indian entity is NABCB-accredited for ISO/IEC 27001.
Crimson Security
HQ: United StatesVerified
Reston, Virginia security compliance and assessment firm listed as a PCI Qualified Security Assessor (QSA) company and a HITRUST External Assessor; its site offers HIPAA-based assessments.
Ernst & Young LLP (EY US)
HQ: United StatesVerified
US member firm of the EY global network; listed as a PCI DSS Qualified Security Assessor and a HITRUST External Assessor.
New York, New York · Chicago, Illinois · San Francisco, California · +11 more
Fortreum
HQ: United StatesVerified
Virginia-based assessment firm listed as a FedRAMP 3PAO, PCI QSA and CMMC C3PAO, with an ANAB-accredited ISO certification arm.
Forvis Mazars
HQ: United StatesVerified
US accounting and advisory firm with offices in many states; listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Charlotte, North Carolina · Appleton, Wisconsin · Asheville, North Carolina · +72 more
GuidePoint Security
HQ: United StatesVerified
Reston, Virginia cybersecurity services firm listed as a PCI Qualified Security Assessor (QSA) company; its site offers PCI DSS compliance services.
KPMG LLP (KPMG US)
HQ: United StatesVerified
US member firm of the KPMG network. FedRAMP-recognized third-party assessor and PCI Qualified Security Assessor company.
New York, New York · Chicago, Illinois · McLean, Virginia · +9 more
Schneider Downs
HQ: United StatesVerified
Pittsburgh-based CPA and advisory firm with offices in Columbus and McLean; performs SOC examinations and is listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Pittsburgh, Pennsylvania · Columbus, Ohio · McLean, Virginia
Sikich
HQ: United StatesVerified
Accounting, technology and advisory firm with US offices in the Midwest, Mid-Atlantic and New England and offices in India; its services include SOC reporting and PCI DSS assessments.
Chicago, Illinois · Alexandria, Virginia · Marlborough, Massachusetts · +13 more
Tevora
HQ: United StatesVerified
Irvine, California cybersecurity firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Irvine, California · Fairfax, Virginia · Scottsdale, Arizona
Other frameworks in Virginia: CMMC (25) · FedRAMP (20) · HITRUST (13) · GovRAMP (12) · ISO 27001 (5) · ISO 27701 (4) · SOC 1 (4) · SOC 2 (4)
Other PCI DSS locations: the United States · Illinois · Chicago · Florida · Texas · California · Georgia · New York city, US · New York state, US · Atlanta
FAQ
How many PCI DSS firms are listed in Virginia?
13 Verified firms are listed for PCI DSS with an office in Virginia. This is not a ranking.
Which registry do you check for PCI DSS?
We check PCI SSC Qualified Security Assessor list. A framework tag appears only when that registry listed the firm at last check.
Which cities have the most listed firms?
Chicago (5), Atlanta (3), Boston (3), Dallas (3), Denver (3), Houston (3).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms match both the framework and the location.
Related guides: PCI DSS QSA companies · HITRUST External Assessors
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Request received
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.