Independent and free for buyers. We don't do audits. We help you find and compare the firms that do.

vCISO firms for AI companies

These 8 vCISO firms say they work with AI companies. A vCISO is a part-time security leader you hire from outside, often to run a compliance programme.

Updated 1 Oct 2026. How we research
Get 3 to 5 quotes
Firms listed (of vCISO firms)
8
Published prices
$300 to $60,000
4 firms, each linked to its source
Checked in an official register
1 of 8
Filters
Credentials
Price
Works with
Also offers
Region
Firm type
8 matching firms
  • GRSee1 verified
    Consultant and audit firmSOC 2SOC 3ISO 27001ISO 42001
    Starting price
    From $15,000
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • Bright Defense logo
    Bright DefenseNot yet checked
    Consultant, United StatesSOC 2ISO 27001HIPAACMMC
    Starting price
    From $1,000
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Cycore Secure logo
    Cycore SecureNot yet checked
    ConsultantSOC 2HIPAAPCI DSSISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Penti logo
    PentiNot yet checked
    Consultant, United States. Signs as Certypie IncSOC 2ISO 27001HIPAAGDPR
    Starting price
    From $300
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Rhymetec logo
    RhymetecNot yet checked
    Consultant, United States. Signs as Rhymetec LLCSOC 1SOC 2ISO 27001ISO 42001
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Trava SecurityNot yet checked
    Consultant, United StatesISO 42001FedRAMPGDPRSOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Workstreet logo
    WorkstreetNot yet checked
    ConsultantSOC 2ISO 27001ISO 42001CMMC
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • XorabyteNot yet checked
    Consultant, CanadaSOC 2ISO 27001HIPAAPCI DSS
    Starting price
    From $4,000
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026

How to choose a vCISO

Decide what you need first: a compliance programme, board reporting, customer security reviews or all three. Then ask for the hours per month, who actually does the work, and how to end the contract.

Monthly retainers are common. Ask what is included and what is billed on top.

Related lists
vCISO firmsFor SaaS companiesFor fintechFor healthcare and healthtechFor financial servicesFor governmentFor defenseFor manufacturingUnited StatesCanadaAustraliaEuropeVanta consultantsDrata consultants
What is a vCISO?

A virtual chief information security officer is an outside expert who leads your security and compliance work part time.

When does a startup need a vCISO?

Usually when enterprise customers start sending security questionnaires and nobody on the team owns security.

How is this list ordered?

By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.