What KirkpatrickPrice does

KirkpatrickPrice is a licensed CPA firm and PCI QSA founded in 2005, headquartered in Nashville, Tennessee with an operational base in Tampa, Florida and offices in approximately 10 US cities. The firm provides third-party cybersecurity and compliance audit services — including SOC 1, SOC 2, PCI DSS, HITRUST, ISO 27001, ISO 42001, NIST, HIPAA, CMMC, privacy, and penetration testing — to more than 2,000 clients globally across 40+ US states, Canada, and Asia. Service organizations in technology, healthcare, financial services, payment processing, and the defense industrial base comprise the core customer base, and the firm is led by founder Joseph Kirkpatrick (CISSP, CISA, CGEIT, CRISC, QSA).

The firm differentiates through its proprietary Online Audit Manager platform, an interactive compliance environment that consolidates audit-readiness videos, security scans, documentation preparation, evidence collection, and progress tracking. The platform is positioned alongside an experienced auditor bench holding CISSP, CISA, CGEIT, CRISC, QSA, and CCSFP credentials, many of whom have prior client-side experience. This combination of credentialed auditors and embedded tooling underpins an enterprise field-sales motion where dedicated specialists engage prospects through direct contact (phone and website) and guide them from readiness through final report.

Commercially, the firm operates a professional services revenue model with project-based and multi-year retainer pricing that is not publicly disclosed. Go-to-market is a content-led inbound enterprise motion (blog, SOC 2 Academy video series, podcast, webinars, white papers, newsletter) supported by organic social. The firm is privately held with no disclosed funding rounds, ownership transactions, or institutional backing in the available source material.

Name

KirkpatrickPrice

Legal name

KirkpatrickPrice Inc.

Website

https://kirkpatrickprice.com

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

51–100 employees

Short description

KirkpatrickPrice is a licensed CPA and PCI QSA firm providing cybersecurity and compliance audits — including SOC 1, SOC 2, PCI DSS, HITRUST, ISO 27001, HIPAA, CMMC, and penetration testing — to more than 2,000 service-organization clients across 40+ US states, Canada, and Asia, delivered via its Online Audit Manager platform and a team of credentialed auditors.

Ownership category

akta.pro rank

Product category

Cybersecurity Compliance Auditing

NAICS

Offices of Certified Public Accountants (541211), Accounting, Tax Preparation, Bookkeeping, and Payroll Services (54121)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)

akta.pro secondary industry

Audit & Assurance Services (BPAHABAA)

Keywords

• Cybersecurity audit services
• SOC 2 compliance
• PCI DSS assessment
• ISO 27001 certification
• Penetration testing

Headquarters

HQ city

Tampa

HQ country

United States

HQ region

North America

Offices10 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Cybersecurity Audit Services: Professional services revenue from conducting SOC 1, SOC 2, pentesting, PCI DSS, HITRUST, ISO 27001, NIST, HIPAA, and privacy audits for service organizations. Fees are typically project-based or annual retainer arrangements for ongoing compliance services.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels9 records

Core offering

KirkpatrickPrice is a licensed CPA and PCI QSA firm that conducts cybersecurity audits and compliance assessments for service organizations. The firm delivers SOC 1, SOC 2, PCI DSS, HITRUST, ISO 27001, ISO 42001, NIST, HIPAA, and privacy audits, along with penetration testing across multiple domains (API, cloud, network, web, mobile, IoT, red team). Audit engagements are supported by an in-house Online Audit Manager platform that provides documentation, evidence collection, security scanning, and progress tracking.

Product overview

KirkpatrickPrice is a licensed CPA firm specializing in cybersecurity audits and compliance services. Their portfolio consists of a core platform (Online Audit Manager) for managing the audit process, supported by an educational content series (SOC 2 Academy), and a comprehensive suite of audit services including SOC 1, SOC 2, Penetration Testing, Cloud Security, CMMC Readiness, HIPAA, HITRUST, ISO 27001, ISO 42001, NIST, PCI DSS, Privacy, Risk Assessment, and Vendor Compliance assessments. The Online Audit Manager is their primary software platform providing interactive audit tools, while the various audit services represent distinct compliance offerings delivered by their team of certified auditors.

Differentiator

Problem solved

Functional benefit

Brands

• Online Audit Manager: The proprietary compliance platform used to conduct audits, manage evidence collection, track progress, and generate audit reports.

Products and services

• Online Audit Manager Interactive compliance platform that enables organizations to prepare for audits by watching training videos, running security scans, identifying compliance gaps, preparing documentation, and communicating with KirkpatrickPrice auditors throughout the engagement.
• SOC 1 Audit Audit of a service organization's internal controls relevant to client internal control over financial reporting, performed in accordance with SSAE 18.
• SOC 2 Audit Audit validating that an organization's controls satisfy the AICPA Trust Services Criteria for security, availability, processing integrity, confidentiality, and system privacy.
• Cloud Security Audit Information security audit that validates a cloud offering through comprehensive security assessments of cloud-hosted environments and controls.
• CMMC Readiness Assessment Cybersecurity Maturity Model Certification preparation and assessment service for defense contractors that need to demonstrate compliance with DoD cybersecurity requirements.
• HIPAA Audit Audit assessing the confidentiality, integrity, and availability of electronic Protected Health Information (ePHI) for covered entities and business associates.
• HITRUST CSF Certification Certification assessment against the HITRUST CSF framework, built on principles of HIPAA, PCI DSS, ISO 27001/27002, NIST 800-53, and GDPR.
• ISO 27001 Audit Audit of an organization's Information Security Management System (ISMS) to verify effective implementation of information security controls.
• ISO 42001 Audit Audit for AI management systems that helps organizations using artificial intelligence establish appropriate processes, structures, and controls.
• NIST Audit Audit demonstrating compliance with NIST SP 800-53 security and privacy controls for federal information systems.
• PCI DSS Audit Audit ensuring compliance with the Payment Card Industry Data Security Standard and validating the security of cardholder data environments.
• PCI-SSF Assessment Assessment against the PCI Secure Software Standard for software vendors that develop applications handling payment card data.
• Privacy Audit Audit ensuring compliance with privacy laws and regulations affecting business operations, including GDPR.
• Risk Assessment Service identifying vulnerabilities, potential threats, and risks through systematic risk evaluation processes.
• Vendor Compliance Assessment Assessment helping organizations manage and monitor vendor compliance with policies, procedures, and regulatory requirements.
• SOC for Cybersecurity Examination under the AICPA cybersecurity framework that describes an organization's cybersecurity risk management program and verifies control effectiveness.
• Penetration Testing Security testing services covering API, cloud, code review, continuous, IoT, mobile applications, network, red teaming, social engineering, web applications, and wireless environments.

Quantifiable outcome

• Over 2,000 clients worldwide have completed audits and security assessments with KirkpatrickPrice

Named customers8 records

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Direct peers

• Coalfire: Coalfire is a large cybersecurity advisory and assessment provider offering PCI DSS, HITRUST, SOC, FedRAMP, and cloud security audits alongside offensive security services, overlapping KP's audit and pen-test offerings at slightly larger scale.
• A-LIGN: A-LIGN is a cybersecurity compliance firm offering SOC 2, ISO 27001, PCI DSS, HITRUST, FedRAMP, and penetration testing services with a proprietary compliance management platform—directly overlapping KP's audit portfolio and tech-enabled delivery model.
• BARR Advisory: BARR Advisory is a cybersecurity compliance and audit firm delivering SOC 2, HITRUST, PCI DSS, ISO 27001, FedRAMP, and penetration testing—directly competing with KP across the same compliance frameworks.
• 360 Advanced: 360 Advanced is a cybersecurity compliance firm performing SOC 1/SOC 2, PCI DSS, HITRUST, ISO 27001, and CMMC audits for mid-market clients—a close peer in scale and service mix to KirkpatrickPrice.
• Linford & Co. Linford & Co is a CPA firm delivering SOC 1, SOC 2, HIPAA, and PCI DSS audits to SaaS and technology service organizations, competing head-to-head with KirkpatrickPrice for mid-market North American compliance engagements.
• Schellman Compliance: (Grouped above with Schellman & Co. — the same entity providing both attestation and compliance services directly competing with KirkpatrickPrice's audit portfolio.)
• Schellman & Co. Schellman is a top-tier licensed CPA firm focused exclusively on SOC, ISO, PCI DSS, HITRUST, and FedRAMP assessments; it is the most direct like-for-like competitor to KirkpatrickPrice in the cybersecurity audit specialty market.
• AssurancePoint (MorganFranklin): AssurancePoint, part of MorganFranklin Consulting, provides SOC, HITRUST, PCI, ISO, and FedRAMP audits as a specialist practice competing for the same service-organization audit engagements as KirkpatrickPrice.

Others

• Vanta: Vanta is a leading compliance automation SaaS platform that streamlines SOC 2, ISO 27001, and HIPAA evidence collection—an enabling/ecosystem participant that reduces audit hours but also represents a structural threat to traditional audit firms like KirkpatrickPrice.

Broad incumbents

• Deloitte & Touche (Audit & Advisory): Big Four firm with broad SOC 1/SOC 2 audit and risk advisory practices serving enterprise clients—captures the high end of the same compliance audit market in which KirkpatrickPrice competes.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/kpaudit
• YouTubeyoutube.com/user/KirkpatrickPrice
• LinkedInlinkedin.com/company/kirkpatrickprice
• Facebookfacebook.com/540733492609423

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about KirkpatrickPrice