QSA company profile

HALOCK

HALOCK is a long-running risk and security consultancy whose PCI practice serves merchants and service providers in the Midwest and nationally. It is known for its risk-analysis methodology work, which maps well to PCI DSS v4.x targeted risk analyses.

At a glance

HeadquartersSchaumburg, Illinois
Founded1996
Firm typeRisk management and security assessment firm (QSA company)
ROC planning range$15K–$75K (published planning range (Sept 2026))
Typical fieldwork window4–8 wk
Frameworks (per firm)PCI DSS, SOC 2, ISO 27001, HIPAA, NIST
Official websitehalock.com

Best fit

Mid-market merchants that want risk-led PCI assessments rather than checkbox audits.

Before you engage

Confirm QSA team availability and scheduling during your target assessment window.

Independent directory note. This profile is compiled from the firm's public materials, verified September 2026. It is not an endorsement and not a paid placement. Confirm the firm's current QSA-company listing and engagement terms yourself.

Questions about HALOCK

Is HALOCK a QSA company that can sign a ROC?

HALOCK is listed here as a Risk management and security assessment firm (QSA company). Only a PCI SSC-listed QSA company can sign a Report on Compliance — confirm the firm's current listing before engaging.

What frameworks does HALOCK support?

Per the firm's public materials: PCI DSS, SOC 2, ISO 27001, HIPAA, NIST.

How do I get pricing from this firm?

Assessment fees are scoped per engagement and not published by most firms. Use our quote request to get a scoped fee from HALOCK and comparable firms.

Get a scoped quote

Assessment fees depend on your environment, scope, and readiness. Get comparable quotes from HALOCK and similar assessment firms.

Request quotes from HALOCK & peers

Free · No obligation · Takes 2 minutes

Alternatives to HALOCK

Comparable firms buyers also evaluate -- same buyer type, different trade-offs:

Coalfire

Cybersecurity and compliance assessment firm · $25K–$150K

SecurityMetrics

PCI-focused compliance company · $15K–$75K

LevelBlue (formerly Trustwave)

Managed security services provider with PCI assessment practice · $25K–$150K

Compare quotes from these firms

One request reaches the firms above -- scoped quotes, free, no obligation.

Get a free quote

← All assessors  ·  PCI cost guide  ·  How to choose a QSA