A-LIGN

Best IT auditors I've ever dealt with, report quality is exceptional - you'll never fail an audit with these folks.Auditors are so knowledgeable and experienced, all in-house, no outsourcing shenanigans.The whole process is accelerated by their solution that connects with your readiness platform, and amazingly it can overlap different frameworks by finding common criteria. If you need more than one framework (e.g. ISO 27001 & SOC 2), it's a game changer - I still haven't come across this capability elsewhere.For the quality, pricing is fair and reasonable. They really have the best resources and people. Audits are never fun, but A-LIGN have been a pleasure to work with. "

Disorganized at best. We negotiated a PEN test arrangement with them, signed the contract, and paid the invoice. When it came time to perform the PEN test, they acknowledged that it wasn't actually included in our engagement (even though the line item was labeled "Penetration Testing") and spent another 60 days (why so long?) negotiating to add the actual PEN test before we ultimately went with another provider.When we asked for a refund on the initial incorrect engagement, they indicated that the "milestone being Upon execution of agreement" and therefore "the requirements were met" even though they never performed the services that were negotiated.Update: After notifying them of this review, they "escalated" the case and provided a refund. "

These guys know HIPAA "

Revolving door "