Independent and free for buyers. We don't do audits. We help you find and compare the firms that do.

vCISO firms that work with Vanta

These 24 vCISO firms say they work with Vanta. A vCISO is a part-time security leader you hire from outside, often to run a compliance programme.

Updated 1 Oct 2026. How we research
Get 3 to 5 quotes
Firms listed (of vCISO firms)
24
Published prices
$300 to $45,000 · €1,500 to €4,500
7 firms, each linked to its source
Checked in an official register
0 of 24
The rest show "Firm states"
Filters
Credentials
Price
Works with
Also offers
Region
Firm type
24 matching firms
  • Agency logo
    AgencyNot yet checked
    ConsultantSOC 2ISO 27001GDPRHIPAA
    Starting price
    From $2,500
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Akant logo
    AkantNot yet checked
    Consultant, France. Signs as AKANT SASISO 27001ISO 27701ISO 42001SOC 2
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Atoro logo
    AtoroNot yet checked
    Consultant, IrelandISO 27001SOC 2ISO 42001GDPR
    Starting price
    From €1,500
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • BD Emerson logo
    BD EmersonNot yet checked
    Audit firm and consultant, United StatesSOC 1SOC 2SOC 3
    Starting price
    From $7,000
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Cycore Secure logo
    Cycore SecureNot yet checked
    ConsultantSOC 2HIPAAPCI DSSISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • DNX Solutions logo
    DNX SolutionsNot yet checked
    Consultant, Australia. Signs as DNX SolutionsSOC 2ISO 27001ISO 42001PCI DSS
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Eden Data logo
    Eden DataNot yet checked
    Consultant, United StatesSOC 2GDPRHIPAAISO 27001
    Starting price
    From $3,000
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Genius GRCNot yet checked
    ConsultantSOC 2ISO 27001HIPAAPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • GRC Concierge logo
    GRC ConciergeNot yet checked
    Consultant, CanadaSOC 2ISO 27001HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Kaamel Technology logo
    Kaamel TechnologyNot yet checked
    Consultant, United StatesSOC 2GDPRHIPAAISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Kobalt.io logo
    Kobalt.ioNot yet checked
    ConsultantSOC 2ISO 27001ISO 42001HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Logic Weave logo
    Logic WeaveNot yet checked
    Consultant, AustraliaISO 27001SOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Penti logo
    PentiNot yet checked
    Consultant, United States. Signs as Certypie IncSOC 2ISO 27001HIPAAGDPR
    Starting price
    From $300
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Rhymetec logo
    RhymetecNot yet checked
    Consultant, United States. Signs as Rhymetec LLCSOC 1SOC 2ISO 27001ISO 42001
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Secure Measure logo
    Secure MeasureNot yet checked
    Consultant, AustraliaISO 27001PCI DSSGDPR
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Security Decoded logo
    Security DecodedNot yet checked
    Consultant, Singapore. Signs as Security DecodedISO 27001SOC 1SOC 2PCI DSS
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Tagore AS logo
    Tagore ASNot yet checked
    Consultant, Norway. Signs as Tagore ASISO 27001SOC 2GDPR
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Trava SecurityNot yet checked
    Consultant, United StatesISO 42001FedRAMPGDPRSOC 2
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • TSC Security logo
    TSC SecurityNot yet checked
    ConsultantSOC 2ISO 27001HIPAAGDPR
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Uzado logo
    UzadoNot yet checked
    Consultant, CanadaSOC 2ISO 27001GDPRPCI DSS
    Starting price
    From $24,000
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Workstreet logo
    WorkstreetNot yet checked
    ConsultantSOC 2ISO 27001ISO 42001CMMC
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • XorabyteNot yet checked
    Consultant, CanadaSOC 2ISO 27001HIPAAPCI DSS
    Starting price
    From $4,000
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • YGI Solutions logo
    YGI SolutionsNot yet checked
    ConsultantFedRAMPCMMCSOC 2PCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Zero Day CPA logo
    Zero Day CPANot yet checked
    Audit firm, United StatesSOC 1SOC 2SOC 3HIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026

How to choose a vCISO

Decide what you need first: a compliance programme, board reporting, customer security reviews or all three. Then ask for the hours per month, who actually does the work, and how to end the contract.

Monthly retainers are common. Ask what is included and what is billed on top.

Related lists
vCISO firmsFor AI companiesFor SaaS companiesFor fintechFor healthcare and healthtechFor financial servicesFor governmentFor defenseFor manufacturingUnited StatesCanadaAustraliaEuropeDrata consultants
What is a vCISO?

A virtual chief information security officer is an outside expert who leads your security and compliance work part time.

When does a startup need a vCISO?

Usually when enterprise customers start sending security questionnaires and nobody on the team owns security.

How is this list ordered?

By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.