What Auditwerx does

Auditwerx, LLC is a Tampa, Florida-based professional services firm founded in 2009 that delivers security compliance advisory and reporting services to service organizations across the United States and internationally. The firm operates as a division of Carr, Riggs & Ingram Capital, LLC, combining the resources of a top-20 U.S. accounting firm with the focused attention of a boutique compliance practice. Auditwerx holds over 3,500 compliance reports delivered since inception across frameworks including SOC 1 (SSAE 18), SOC 2, SOC 3, SOC for Cybersecurity, PCI DSS, HIPAA, HITRUST, ISO 27001, CMMC, NIST CSF, and Microsoft SDPR, and is staffed by certified assessors including CISSPs, CISAs, and QSAs — all U.S.-based with no offshore delivery.

The firm's underlying technology is operationally lightweight rather than productized: a secure Auditwerx Dashboard for client artifact upload, flexible integration with leading third-party GRC platforms (including Drata), and multi-framework assessment consolidation through a single engagement. Service delivery is human-judge-driven by regulatory necessity — AICPA, PCI SSC, HITRUST, and CMMC assessor rules require qualified human sign-off — so the technology layer is positioned to reduce client friction (evidence collection, evidence reuse across frameworks) rather than to automate substantive auditor judgment.

Auditwerx's business model is professional-services engagement-based: revenue is generated per assessment on a quote-based, multi-year contract cadence with no public pricing. GTM is sales-led via free consultations, a HubSpot booking flow, a phone sales line, and content marketing through an extensive compliance blog and the Auditwerx Checkpoint newsletter. The customer base spans SaaS/technology companies, payment processors, healthcare organizations, financial institutions, and defense contractors, with vertical segmentation and mid-market/enterprise ticket sizes that support multi-framework attach. No external venture funding, M&A activity, or public revenue disclosure is present in the available data.

Name

Auditwerx

Legal name

Auditwerx, LLC

Website

https://auditwerx.com

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

11–50 employees

Short description

Auditwerx, LLC is a Tampa-based compliance advisory and reporting firm — a division of Carr, Riggs & Ingram — that delivers SOC, PCI DSS, HIPAA, HITRUST, CMMC, ISO 27001, and NIST CSF assessments to mid-market and enterprise service organizations across the U.S. and internationally.

Ownership category

akta.pro rank

Product category

Security Compliance Assessment and Reporting Services

NAICS

Offices of Certified Public Accountants (541211), Investigation and Security Services (5616)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)

akta.pro secondary industries

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Audit Management (HDADAIAF)

Keywords

• SOC compliance reporting
• PCI DSS assessment
• HIPAA HITRUST compliance
• CMMC readiness services
• ISO 27001 certification

Headquarters

HQ city

Tampa

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Compliance Assessment Services: Professional services revenue generated through security compliance assessments including SOC 1, SOC 2, SOC 3, PCI DSS, HIPAA, HITRUST, CMMC, ISO 27001, and other security compliance reports. Services are delivered by certified assessors including CISSPs and CISAs. Revenue is project-based with engagements scoped based on client needs, assessment type, and complexity.
2. Compliance Advisory and Readiness Services: Advisory services helping organizations prepare for compliance assessments, identify gaps, and remediate issues before final assessments. Includes SOC readiness services, gap assessments, and remediation guidance to ensure efficient assessment processes.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Auditwerx provides third-party security compliance examinations and advisory services across SOC (SOC 1/SSAE 18, SOC 2, SOC 3, SOC for Cybersecurity, CSAE 3416, ISAE 3402), PCI DSS, HIPAA, HITRUST CSF, CMMC, ISO 27001, NIST CSF, and privacy frameworks (GDPR, CCPA). Engagements combine formal assessments and pre-assessment readiness/gap remediation, delivered by certified in-house U.S. assessors (CISSPs, CISAs, QSAs) leveraging a secure client dashboard and integrations with leading GRC platforms.

Product overview

Auditwerx is a security compliance advisory and reporting services firm operating as a division of Carr, Riggs & Ingram (CRI). The company offers a unified portfolio of compliance assessment services organized around major frameworks: the SOC* Suite of Services (covering SOC 1, SOC 2, SOC 2+, SOC 3, and related reports), PCI DSS Compliance Services, Healthcare Compliance Services (HIPAA and HITRUST), Privacy Compliance Reporting, Security Compliance Assessment (NIST CSF and Microsoft SDPR), CMMC Readiness Services, and ISO 27001 Services. Services are delivered by certified assessors including CISSPs and CISAs. The company also provides SOC* Readiness Services as an add-on offering to help clients prepare for formal assessments. Auditwerx is not a software product company—it provides professional advisory and assessment services.

Differentiator

Problem solved

Functional benefit

Products and services

• SOC* Suite of Services A comprehensive suite of System and Organization Controls (SOC) reporting services covering SOC 1 (SSAE 18), SOC 2, SOC 2+, SOC 3, SOC for Cybersecurity, CSAE 3416, and ISAE 3402, designed for service organizations and their enterprise customers requiring independent attestation over controls.
• SOC* Readiness Services Pre-assessment readiness services that help organizations identify control gaps and remediate issues prior to formal SOC examinations, reducing delays during the final assessment.
• PCI DSS Compliance Services Payment Card Industry Data Security Standard (PCI DSS) compliance assessment and advisory services delivered by experienced Qualified Security Assessors (QSAs) for merchants, service providers, and payment gateways.
• Healthcare Compliance Services Healthcare-sector compliance services bundling HIPAA Compliance Services and HITRUST CSF Services for healthcare organizations that handle protected health information (PHI).
• Privacy Compliance Reporting Privacy compliance assessment and advisory services that help organizations identify and reduce compliance risk related to data privacy regulations including GDPR and CCPA.
• Security Compliance Assessment Security compliance assessment services including NIST CSF Compliance Services and Microsoft SDPR Compliance Services that evaluate an organization's security posture against established frameworks.
• CMMC Readiness Services Cybersecurity Maturity Model Certification (CMMC) readiness assessment and preparation services for defense contractors and government suppliers pursuing or maintaining DoD contracts.
• ISO 27001 Readiness Services ISO 27001 readiness services that help organizations prepare their information security management system (ISMS) for formal certification, including risk assessment and Statement of Applicability development.
• ISO 27001 Certification Services ISO 27001 certification services that guide organizations through stage 1 and stage 2 audits to achieve and maintain ISO 27001 information security management system certification.

Quantifiable outcome

• 3,500+ security compliance reports delivered to clients since 2009
• +2 more outcomes

Named customers4 records

Segments7 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Two partnerships are on record, tiered strategic and core.

• DratastrategicTechnology or Integration · 12 July 2024Strategic partnership announced July 12, 2024 where Auditwerx enhances strategic compliance solutions through partnership with Drata, a leading GRC (Governance, Risk, and Compliance) automation platform. The partnership enables seamless compliance integration for clients using Drata's automated compliance monitoring tools.
• Carr, Riggs & Ingram (CRI)coreOthersAuditwerx is a division of Carr, Riggs & Ingram Capital, LLC, a large accounting firm. This parent-subsidiary relationship provides Auditwerx with access to large firm resources while maintaining specialized boutique firm attention and service. CRI is a top accounting firm providing the specialized resources and experts that enable Auditwerx to deliver high-quality, personalized compliance services.

Scale indicators4 records

Recent moves5 records

Expansion highlights6 records

Direct peers

• Schellman: Schellman is a top-ranked national compliance and attestation firm offering SOC 1/2/3, ISO 27001, PCI DSS, HITRUST, and FedRAMP assessments — directly comparable to Auditwerx's multi-framework practice serving SaaS and enterprise clients.
• A-LIGN: A-LIGN is a cybersecurity and compliance attestation firm delivering SOC 2, ISO 27001, HITRUST, PCI DSS, and FedRAMP audits. Its technology-enabled approach and similar mid-market SaaS focus make it a direct competitor to Auditwerx.
• Coalfire: Coalfire is a leading cybersecurity advisory firm providing PCI DSS, SOC, HITRUST, ISO 27001, and CMMC assessments. Its broad framework coverage and federal/defense practice directly overlap Auditwerx's service portfolio.
• BARR Advisory: BARR Advisory is a cybersecurity and compliance firm specializing in SOC 2, ISO 27001, HITRUST, PCI DSS, and FedRAMP for SaaS and cloud-native businesses — highly comparable in target customer and service mix.
• Linford & Company: Linford & Company is a boutique CPA-led firm providing SOC 1/2/3, HITRUST, and PCI DSS assessments, particularly for SaaS and healthcare organizations — directly competitive with Auditwerx in the mid-market.
• KirkpatrickPrice: KirkpatrickPrice is a registered CPA firm delivering SOC, PCI DSS, HIPAA, and ISO 27001 audits with an online compliance platform — overlapping Auditwerx's service scope and customer base.

Broad incumbents

• Deloitte (Risk & Compliance practice): Deloitte's Risk & Compliance practice delivers SOC, ISO, HITRUST, and cybersecurity attestations as part of a much broader advisory portfolio — a large incumbent that competes with Auditwerx on enterprise SOC 2 and ISO 27001 engagements.
• RSM US: RSM US is a top national accounting firm providing SOC, HITRUST, CMMC, and ISO 27001 assessments within its broader risk consulting practice — a broad incumbent that targets the same mid-market SaaS and healthcare segments as Auditwerx.

Emerging players

• Vanta: Vanta is a leading GRC automation platform for SOC 2, ISO 27001, and HIPAA. While not a direct audit firm, it increasingly partners with — and competes for the workflow surrounding — assessors like Auditwerx.

Others

• Drata: Drata is a GRC automation platform and Auditwerx's strategic partner (announced July 2024). While primarily a software vendor rather than a competitor, Drata's automation capabilities are reshaping how compliance assessors deliver services and indirectly pressure traditional attestation economics.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/criauditwerx

Compliance13 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Auditwerx