Schellman
Schellman is a top-50 attestation firm that stakes its name on assessor independence, with a large PCI practice covering Level 1 ROCs for merchants, service providers, and payment facilitators. It also bundles PCI with SOC and ISO work for multi-framework programs.
At a glance
| Headquarters | Tampa, Florida |
|---|---|
| Founded | 2002 |
| Firm type | Independent attestation and assessment firm (QSA company) |
| ROC planning range | $25K–$150K (published planning range (Sept 2026)) |
| Typical fieldwork window | 4–12 wk |
| Frameworks (per firm) | PCI DSS, SOC 1, SOC 2, ISO 27001, FedRAMP, HITRUST |
| Official website | schellman.com |
Best fit
Regulated or multi-framework buyers that want independence-first assessors and senior teams.
Before you engage
Premium positioning and process -- more than a straightforward SAQ merchant needs.
Questions about Schellman
Is Schellman good for Level 1 ROCs?
Schellman is a top-50 attestation firm with a large PCI practice covering Level 1 ROCs for merchants, service providers, and payment facilitators -- a fit for regulated or multi-framework programs.
Does Schellman bundle PCI with SOC 2?
Per public materials it covers PCI DSS, SOC 1, SOC 2, ISO 27001, FedRAMP, and HITRUST -- combined engagements can share evidence and cut total cost.
What does Schellman charge for PCI?
No published band -- request a scoped quote. Planning range for this tier: $25K–$150K (September 2026).
Get a scoped quote
Assessment fees depend on your environment, scope, and readiness. Get comparable quotes from Schellman and similar assessment firms.
Request quotes from Schellman & peersFree · No obligation · Takes 2 minutes
Alternatives to Schellman
Comparable firms buyers also evaluate -- same buyer type, different trade-offs:
Coalfire
Cybersecurity and compliance assessment firm · $25K–$150K
SecurityMetrics
PCI-focused compliance company · $15K–$75K
LevelBlue (formerly Trustwave)
Managed security services provider with PCI assessment practice · $25K–$150K
Compare quotes from these firms
One request reaches the firms above -- scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match licensed auditors to your size and scope → they send scoped quotes directly. Free, no obligation.