QSA company profile

TraceSecurity

TraceSecurity combines a PCI QSA practice with its TraceCSO compliance platform, aimed at community banks, credit unions, and mid-market merchants. The bundled platform-plus-assessor model appeals to organizations that want year-round compliance management, not just an annual assessment.

At a glance

HeadquartersBaton Rouge, Louisiana
Founded2004
Firm typeCompliance and security firm (QSA company) with compliance platform
ROC planning range$15K–$75K (published planning range (Sept 2026))
Typical fieldwork window4–8 wk
Frameworks (per firm)PCI DSS, SOC 2, HIPAA, GLBA
Official websitetracesecurity.com

Best fit

Financial institutions and mid-market merchants that want a platform plus their assessor.

Before you engage

Ask which entity signs the ROC and how assessor independence from the platform is preserved.

Independent directory note. This profile is compiled from the firm's public materials, verified September 2026. It is not an endorsement and not a paid placement. Confirm the firm's current QSA-company listing and engagement terms yourself.

Questions about TraceSecurity

Is TraceSecurity a QSA company that can sign a ROC?

TraceSecurity is listed here as a Compliance and security firm (QSA company) with compliance platform. Only a PCI SSC-listed QSA company can sign a Report on Compliance — confirm the firm's current listing before engaging.

What frameworks does TraceSecurity support?

Per the firm's public materials: PCI DSS, SOC 2, HIPAA, GLBA.

How do I get pricing from this firm?

Assessment fees are scoped per engagement and not published by most firms. Use our quote request to get a scoped fee from TraceSecurity and comparable firms.

Get a scoped quote

Assessment fees depend on your environment, scope, and readiness. Get comparable quotes from TraceSecurity and similar assessment firms.

Request quotes from TraceSecurity & peers

Free · No obligation · Takes 2 minutes

Alternatives to TraceSecurity

Comparable firms buyers also evaluate -- same buyer type, different trade-offs:

Coalfire

Cybersecurity and compliance assessment firm · $25K–$150K

SecurityMetrics

PCI-focused compliance company · $15K–$75K

LevelBlue (formerly Trustwave)

Managed security services provider with PCI assessment practice · $25K–$150K

Compare quotes from these firms

One request reaches the firms above -- scoped quotes, free, no obligation.

Get a free quote

← All assessors  ·  PCI cost guide  ·  How to choose a QSA