How we build the directory
Every fact has a source link and a date. Here is how we collect it and check it.
How we collect data
We read each firm's own website and public registers. We record what we find with the page it came from and the date we checked. If we can't find a fact, we say "Not stated". We never fill gaps with guesses.
The three labels
- Verified. A person confirmed it in an official register. We show the register, a link and the date.
- Firm states. It comes from the firm's own website. We link to the page.
- Not stated. The firm doesn't say.
We don't show marketing claims, such as a pass rate, as facts.
Which registers we check
- PCI SSC lists for payment card assessors
- FedRAMP Marketplace
- CREST member lists for penetration testers
- State CPA boards, for the licence of a firm that signs SOC reports
- AICPA peer review records
- ANAB and UKAS, for accredited certification bodies
- IAF CertSearch, to confirm ISO certificates
A firm we can't find in a register is not shown as verified.
When a Verified label expires
A Verified label older than 12 months shows as "Firm states" with "Recheck due" until we check it again. Prices carry a valid-until date and drop off when it passes. Facts checked more than 365 days ago are flagged as possibly out of date.
How firms correct data
Firms can claim a listing or use the corrections page. We check the change against a source before we publish it.
How Featured and affiliates work
Payment never changes the order of a list. Featured is a labelled, paid slot that sits apart from the results. Some links to platforms may be affiliate links. Read how we make money.
How quote matching works
When you ask for quotes, we pick firms that offer what you need, then prefer firms that work with your platform and serve your region and company size. Ties go to the firm with more verified credentials, then to name order. Featured and affiliate status are never used.
Changelog
- 2026-10-02: Quote requests, compare, claim form and this page added.
- 2026-10-02: Verified labels now expire after 12 months.