vCISO firms

A vCISO is a part-time security leader you hire from outside, often to run a compliance programme. Compare 48 vCISO firms on published prices, what they offer and how each fact was checked.

Updated 1 Oct 2026. How we research

Get 3 to 5 quotes

Firms listed: 48
Published prices: $300 to $60,000 · €1,500 to €4,500
Checked in an official register: 3 of 48

BARR Advisory2 verified
Audit firm and certification body and consultantSOC 1SOC 2SOC 3ISO 27001
Starting price
Not published
Legal entity
Not stated
Accreditations
Verified
Get a quoteCompareProfileChecked 1 Oct 2026
GRSee1 verified
Consultant and audit firmSOC 2SOC 3ISO 27001ISO 42001
Starting price
From $15,000
Legal entity
Not stated
Accreditations
Verified
Get a quoteCompareProfileChecked 1 Oct 2026
Patronusec1 verified
Consultant, Poland. Signs as Patronusec Sp. z o.o.DORAPCI DSSISO 27001TISAX
Starting price
Not published
Legal entity
Firm states
Accreditations
Verified
Get a quoteCompareProfileChecked 1 Oct 2026
7 River SystemsNot yet checked
Consultant, United StatesSOC 1SOC 2ISO 27001ISO 27701
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
AgencyNot yet checked
ConsultantSOC 2ISO 27001GDPRHIPAA
Starting price
From $2,500
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
AiriusNot yet checked
Consultant, United StatesSOC 2ISO 27001HIPAAPCI DSS
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
AkantNot yet checked
Consultant, France. Signs as AKANT SASISO 27001ISO 27701ISO 42001SOC 2
Starting price
Not published
Legal entity
Firm states
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Andersen ConsultingNot yet checked
Consultant
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
AtoroNot yet checked
Consultant, IrelandISO 27001SOC 2ISO 42001GDPR
Starting price
From €1,500
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
BD EmersonNot yet checked
Audit firm and consultant, United StatesSOC 1SOC 2SOC 3
Starting price
From $7,000
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
Bright DefenseNot yet checked
Consultant, United StatesSOC 2ISO 27001HIPAACMMC
Starting price
From $1,000
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
CISOnowNot yet checked
ConsultantCMMC
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
CORAL eSecureNot yet checked
ConsultantISO 42001
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Cyber AllyNot yet checked
Consultant, AustraliaSOC 2ISO 27001
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Cyber DynamoNot yet checked
ConsultantNIST AI RMFISO 42001
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Cycore SecureNot yet checked
ConsultantSOC 2HIPAAPCI DSSISO 27001
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
DNX SolutionsNot yet checked
Consultant, Australia. Signs as DNX SolutionsSOC 2ISO 27001ISO 42001PCI DSS
Starting price
Not published
Legal entity
Firm states
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
DPO ConsultingNot yet checked
Consultant, FranceGDPREU AI Act
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Echelon Risk + CyberNot yet checked
ConsultantSOC 2ISO 27001HIPAACMMC
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Eden DataNot yet checked
Consultant, United StatesSOC 2GDPRHIPAAISO 27001
Starting price
From $3,000
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
GBQ PartnersNot yet checked
Audit firmSOC 1SOC 2SOC 3ISO 27001
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Genius GRCNot yet checked
ConsultantSOC 2ISO 27001HIPAAPCI DSS
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
GRC ConciergeNot yet checked
Consultant, CanadaSOC 2ISO 27001HIPAA
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Kaamel TechnologyNot yet checked
Consultant, United StatesSOC 2GDPRHIPAAISO 27001
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Kobalt.ioNot yet checked
ConsultantSOC 2ISO 27001ISO 42001HIPAA
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
LatacoraNot yet checked
ConsultantSOC 2ISO 27001HIPAAGDPR
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Lazarus AllianceNot yet checked
Audit firmSOC 1SOC 2SOC 3CMMC
Starting price
Not published
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
Logic WeaveNot yet checked
Consultant, AustraliaISO 27001SOC 2
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
OmniCyber Security LtdNot yet checked
ConsultantISO 27001ISO 42001Cyber EssentialsPCI DSS
Starting price
Not published
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
PentiNot yet checked
Consultant, United States. Signs as Certypie IncSOC 2ISO 27001HIPAAGDPR
Starting price
From $300
Legal entity
Firm states
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Pivot Point SecurityNot yet checked
Consultant, United StatesISO 27001CMMCSOC 2PCI DSS
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Revolution InfoSecNot yet checked
Consultant, New ZealandISO 27001ISO 42001NIST AI RMF
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
RhymetecNot yet checked
Consultant, United States. Signs as Rhymetec LLCSOC 1SOC 2ISO 27001ISO 42001
Starting price
Not published
Legal entity
Firm states
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
SapphireNot yet checked
Consultant, United KingdomCyber Essentials
Starting price
Not published
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
Secure MeasureNot yet checked
Consultant, AustraliaISO 27001PCI DSSGDPR
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
SecurePoint 360, LLCNot yet checked
ConsultantSOC 2
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Security DecodedNot yet checked
Consultant, Singapore. Signs as Security DecodedISO 27001SOC 1SOC 2PCI DSS
Starting price
Not published
Legal entity
Firm states
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
SeisoNot yet checked
Consultant, United StatesISO 27001SOC 2CMMCHIPAA
Starting price
Not published
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
Soter AdvisoryNot yet checked
ConsultantSOC 2ISO 27001PCI DSSHIPAA
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Tagore ASNot yet checked
Consultant, Norway. Signs as Tagore ASISO 27001SOC 2GDPR
Starting price
Not published
Legal entity
Firm states
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
TevoraNot yet checked
ConsultantCMMCFedRAMPHITRUSTHIPAA
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Trava SecurityNot yet checked
Consultant, United StatesISO 42001FedRAMPGDPRSOC 2
Starting price
Not published
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026
TSC SecurityNot yet checked
ConsultantSOC 2ISO 27001HIPAAGDPR
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
UzadoNot yet checked
Consultant, CanadaSOC 2ISO 27001GDPRPCI DSS
Starting price
From $24,000
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
WorkstreetNot yet checked
ConsultantSOC 2ISO 27001ISO 42001CMMC
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
XorabyteNot yet checked
Consultant, CanadaSOC 2ISO 27001HIPAAPCI DSS
Starting price
From $4,000
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
YGI SolutionsNot yet checked
ConsultantFedRAMPCMMCSOC 2PCI DSS
Starting price
Not published
Legal entity
Not stated
Accreditations
Not stated
Get a quoteCompareProfileChecked 1 Oct 2026
Zero Day CPANot yet checked
Audit firm, United StatesSOC 1SOC 2SOC 3HIPAA
Starting price
Not published
Legal entity
Not stated
Accreditations
Firm states
Get a quoteCompareProfileChecked 1 Oct 2026

How to choose a vCISO

Decide what you need first: a compliance programme, board reporting, customer security reviews or all three. Then ask for the hours per month, who actually does the work, and how to end the contract.

Monthly retainers are common. Ask what is included and what is billed on top.

Related lists

What is a vCISO?

A virtual chief information security officer is an outside expert who leads your security and compliance work part time.

When does a startup need a vCISO?

Usually when enterprise customers start sending security questionnaires and nobody on the team owns security.

How is this list ordered?

By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.