QSA company profile

A-LIGN

A-LIGN runs a high-volume, technology-enabled PCI practice alongside its SOC, ISO, and FedRAMP work. Its pitch is scale and speed: standardized evidence collection and a large assessor bench for merchants and service providers that need predictable delivery.

At a glance

HeadquartersTampa, Florida
Founded2009
Firm typeTechnology-enabled compliance firm (QSA company)
ROC planning range$20K–$100K (published planning range (Sept 2026))
Typical fieldwork window4–10 wk
Frameworks (per firm)PCI DSS, SOC 1, SOC 2, ISO 27001, HITRUST, FedRAMP, CMMC
Official websitea-lign.com

Best fit

Growing companies that want PCI plus adjacent frameworks (SOC 2, ISO 27001) from one technology-led firm.

Before you engage

High-volume model -- ask who your engagement team is and how evidence review is staffed.

Independent directory note. This profile is compiled from the firm's public materials, verified September 2026. It is not an endorsement and not a paid placement. Confirm the firm's current QSA-company listing and engagement terms yourself.

Questions about A-LIGN

What is A-LIGN's PCI delivery model?

A technology-enabled, high-volume practice with standardized evidence collection and a large assessor bench -- built for predictable delivery across PCI, SOC, ISO, and FedRAMP.

Is A-LIGN a QSA company?

It is listed here as a technology-enabled compliance firm operating as a QSA company. Confirm the current PCI SSC listing before engaging.

What does A-LIGN charge for PCI?

No published band -- request a scoped quote. Planning range for this tier: $20K–$100K (September 2026).

Get a scoped quote

Assessment fees depend on your environment, scope, and readiness. Get comparable quotes from A-LIGN and similar assessment firms.

Request quotes from A-LIGN & peers

Free · No obligation · Takes 2 minutes

Alternatives to A-LIGN

Comparable firms buyers also evaluate -- same buyer type, different trade-offs:

Coalfire

Cybersecurity and compliance assessment firm · $25K–$150K

SecurityMetrics

PCI-focused compliance company · $15K–$75K

LevelBlue (formerly Trustwave)

Managed security services provider with PCI assessment practice · $25K–$150K

Compare quotes from these firms

One request reaches the firms above -- scoped quotes, free, no obligation.

Get a free quote

← All assessors  ·  PCI cost guide  ·  How to choose a QSA