Directory

All 48 FedRAMP-recognized assessors, from the source.

This table is generated directly from the FedRAMP Marketplace assessor export (dated 2026-08-18) — not hand-typed. Filter by impact level or search by name and state.

All (48)High ImpactModerate ImpactLow Impact
FirmHeadquartersHighest ImpactRecognized SinceActive CSOsAlso Offers
St. Petersburg, FLModerate20243ISO 27001, SOC 1 / SSAE1 16Profile →
Tampa, FLHigh2013111PCI DSS, ISO 27001Profile →
Alpharetta, GAUnknown20250• SOC 1, 2 & 3, • ISO/IEC 27001Profile →
Chantilly, VAUnknown20200—Profile →
Fredericksburg, VAUnknown20250CMMC, NIST 800-171Profile →
Atlanta, Georgia 30319Unknown20230DoD's CMMC / NIST 800-171, NIST 800-53 / FISMA / RMFProfile →
Chicago, ILModerate20247SOC 1/2/3, PCI DSSProfile →
McLean, VAUnknown20240• C5, • CJISProfile →
McLean, VAModerate20142ISO 9001:2008, ISO 20000Profile →
Columbia, MDUnknown20160StateRAMP - Consulting and Assessments, FISMA - Consulting and AssessmentsProfile →
Greenwood Village, COHigh2015128• C5, • CJISProfile →
Fairfax, VAModerate202010CSA Star, HITRUSTProfile →
MarylandUnknown20260FedRAMP 3PAO (Accredited, A2LA-recognized)Profile →
Cary, NCUnknown20250ISO27001:2022, CMMCProfile →
4031 University Dr. Suite 100 Fairfax, VAModerate20212NIST 800-171, NIST RMF/FISMAProfile →
Arlington, VAModerate20175ISO 27001, COBITProfile →
Oklahoma City, OKUnknown20140ISO 9001, ISO 17020Profile →
Potomac Falls, VAUnknown20120—Profile →
North Bethesda, MDHigh201524CMMC, DFARSProfile →
Reston, VAHigh20153CMMC, NISTProfile →
Bellevue, WAHigh201619CMMC, NIST Cybersecurity Framework (CSF)Profile →
Lansdowne, VAHigh202179C5, CJISProfile →
Highland Heights, Ohio 44143Unknown20150ISO 9001:2015, ISO 14001:2015Profile →
Centerville, OHHigh202221CNNSI 1253, FFIECProfile →
Falls Church, VAUnknown20151NIST RMF, ISO 17020Profile →
North Carolina, 28659Unknown20210—Profile →
Tampa, FLUnknown20250*CMMC, *NIST RMFProfile →
Suite 600, Reston VA 20190Moderate20227SOC 2, ISO 27001Profile →
Mclean, VAUnknown20160SOCProfile →
Herndon, VAHigh201263• CMMC / Joint Surveillance, • DoD SRGProfile →
Scottsdale, Arizona 85266Moderate20226ACAB LADMF, Benchmark testingProfile →
2nd Floor Denver, COModerate201713System and Organization Control (SOC) Audits, Health Insurance Portability and Accountability Act (HIPAA)Profile →
Ashburn, VAHigh201254Cybersecurity Maturity Model Certification (CMMC), NIST 800-171Profile →
Scottsdale, Arizona 85255Low20211*Approved Scanning Vendor, *GDPRProfile →
900 McLean, VAModerate20153Federal Information Security Management Act (FISMA), Governance Risk and Compliance (GRC) FrameworkProfile →
Chicago, ILLow20172• FISMA, • State RAMPProfile →
Idaho, 83467Moderate20247AICPA SOC1, SOC 2, SOC3, ISAE 3000/3402, ISO 27001:2022,ISO 27701:2019, ISO 9001:2015, ISO 22301:2019, ISO 42001:2023, ISO 27017/27018/27999Profile →
2814 Detroit Avenue, Cleveland OH 44113Moderate20233NIST 800-171, FISMAProfile →
Chicago, ILUnknown20160CCPA, CJISProfile →
Tampa, FLHigh2012211CMMC 3PAO (C3PAO), StateRAMP 3PAOProfile →
Reston, VAHigh201310StateRAMP, CMMCProfile →
201 Spear St Suite 1100 San Francisco, CAModerate20204FISMA, NIST 800-53Profile →
Huntsville, ALHigh20205NIST 800-53, NIST 800-171Profile →
Plano, TXUnknown20172FISMA 3PAO, CMMC C3PAO (in process)Profile →
Baltimore MD, 20905Moderate20251CJIS, CMMC C3PAOProfile →
6900 E. Camelback Road Suite 900 Scottsdale, AZUnknown20150FedRAMP, ISOProfile →
Irvine, CAModerate20204HIPAA, HITRUSTProfile →
12110 Sunset Hills Rd. STE 600 Reston, VAModerate20205Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171Profile →
Sourced from the official FedRAMP Marketplace assessor export, dated 2026-08-18. Firms showing "Unknown" impact level typically have no completed assessment yet. Recognition status changes; confirm current status on the official Marketplace before engaging.

Are you a FedRAMP assessor?

Claim and verify your firm's profile — accreditation details, specializations, and contact routing.

Claim your listing →