{
 "name": "Attestvio Audit Certification Cost Index",
 "title": "Audit Certification Cost Index",
 "url": "https://attestvio.com/datasets/audit-certification-cost-index/",
 "csv": "https://attestvio.com/datasets/audit-certification-cost-index.csv",
 "markdown": "https://attestvio.com/datasets/audit-certification-cost-index/index.md",
 "computed_at": "2026-10-05",
 "license": "https://attestvio.com/terms",
 "headline": "The median published figure in the Audit Certification Cost Index is 3,500 GBP across 2 sources' own pages in GBP (range 3,500 to 3,500 GBP; 5 sources publish a figure), read 11 September 2026.",
 "quotes": [
  "The median published figure in the Audit Certification Cost Index is 3,500 GBP across 2 sources' own pages in GBP (range 3,500 to 3,500 GBP; 5 sources publish a figure), read 11 September 2026.",
  "5 of the 53 named sources read in full publish a figure; 48 publish none, read 11 September 2026."
 ],
 "citation": "\"Attestvio Audit Certification Cost Index\", updated 2026-10-05, https://attestvio.com/datasets/audit-certification-cost-index/.",
 "changed_since": null,
 "national": {
  "unit": "GBP",
  "n": 2,
  "median": 3500,
  "min": 3500,
  "max": 3500,
  "p25": null,
  "p75": null,
  "mean": 3500,
  "units": {
   "EUR": 1,
   "GBP": 2,
   "USD": 2
  },
  "published_sources": 5,
  "named_sources": 53,
  "read_sources": 53,
  "not_published": 48,
  "published_share": 0.094
 },
 "by_axis": {},
 "rows": [
  {
   "source": "Iseo Blue ISO 27001 certification costs",
   "url": "https://iseoblue.com/iso-27001/certification-guides/certification-costs/",
   "figure": "£3,500 ",
   "value": 3500,
   "unit": "GBP",
   "vat": null,
   "axis": {},
   "retrieved_at": "2026-09-11",
   "quote": "I offer two fixed-fee routes - a £3,500 coaching programme and a £7,500 fully-assisted consultancy - both fixed for organisations up to 250 employees.",
   "source_class": "primary-provider-own-site",
   "text_sha256": "2297f5cb91b1ff6b67727784f934576c9b4aa382dd448370b92610a7901b7632"
  },
  {
   "source": "SecureSlate SOC 2 audit cost",
   "url": "https://getsecureslate.com/blog/how-much-does-a-soc-2-audit-cost-in-2026",
   "figure": "$284",
   "value": 284,
   "unit": "USD",
   "vat": null,
   "axis": {},
   "retrieved_at": "2026-09-11",
   "quote": "Our affordable plans start at just $284/month.",
   "source_class": "primary-provider-own-site",
   "text_sha256": "e8211eebe72daf6fcaba23beb3b3f96e3c0c06a0bc99e8ac25cd0e3597622e8c"
  },
  {
   "source": "Precursor Security penetration testing cost",
   "url": "https://www.precursorsecurity.com/services/offensive-security/penetration-testing/cost",
   "figure": "£3,500",
   "value": 3500,
   "unit": "GBP",
   "vat": null,
   "axis": {},
   "retrieved_at": "2026-09-11",
   "quote": "A web application assessment (from £3,500) is the most common starting point for small and mid-size businesses.",
   "source_class": "primary-provider-own-site",
   "text_sha256": "87341e975adbaf923cac57ee9a267135c90f98bb1b7a78bf569da7e3d64c1a85"
  },
  {
   "source": "Intruder pricing",
   "url": "https://www.intruder.io/pricing",
   "figure": "€3,000",
   "value": 3000,
   "unit": "EUR",
   "vat": null,
   "axis": {},
   "retrieved_at": "2026-09-11",
   "quote": "Starting from €3,000",
   "source_class": "primary-provider-own-site",
   "text_sha256": "9aa1d3f91dadcd4203fde4be51959b2ee71d7be21247e107f2acf4f314733631"
  },
  {
   "source": "High Table ISO 27001 toolkit pricing",
   "url": "https://hightable.io/iso-27001-toolkit-pricing/",
   "figure": "$97.00",
   "value": 97,
   "unit": "USD",
   "vat": null,
   "axis": {},
   "retrieved_at": "2026-09-11",
   "quote": "Solution / Package Best For Included Deliverables Price (USD) ISO 27001 Policy Template Bundle Early-stage teams (<10 staff) needing quick policy docs Pre-populated ISO 27001:2022 policy templates $97.00",
   "source_class": "primary-provider-own-site",
   "text_sha256": "cf020b3603c3f346b76c930bd7eb40298bc94cac3b109e7028304de64a99a5d7"
  }
 ],
 "not_published": [
  {
   "source": "TrustNet SOC 2 report cost",
   "url": "https://trustnetinc.com/pricing/soc-report-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "TrustNet HITRUST certification cost",
   "url": "https://trustnetinc.com/pricing/hitrust-pricing-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "TrustNet pricing",
   "url": "https://trustnetinc.com/pricing/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Linford & Company SOC audit cost",
   "url": "https://linfordco.com/blog/soc-audit-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Astra Pentest pricing",
   "url": "https://www.getastra.com/pricing",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "SecurityMetrics PCI compliance cost",
   "url": "https://www.securitymetrics.com/blog/how-much-does-pci-compliance-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "A-LIGN pricing",
   "url": "https://www.a-lign.com/pricing",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Sensiba: what does SOC 2 cost",
   "url": "https://sensiba.com/resources/insights/what-does-soc-2-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "NQA ISO 27001 certification",
   "url": "https://www.nqa.com/en-gb/certification/standards/iso-27001",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "BSI Knowledge standards shop",
   "url": "https://www.bsigroup.com/en-GB/products-and-services/standards/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Amtivo: how much does ISO 27001 certification cost",
   "url": "https://amtivo.com/us/resources/insights/how-much-does-iso-27001-certification-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Advisera ISO 27001 certification cost calculator",
   "url": "https://advisera.com/tools/iso-27001-certification-cost-calculator/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Glocert ISO 27001 cost estimator",
   "url": "https://www.glocertinternational.com/iso-27001-cost-calculator",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "High Table ISO 27001 certification cost",
   "url": "https://hightable.io/iso-27001-certification-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Atoro ISO 27001 certification cost",
   "url": "https://atoro.io/iso-27001-certification-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "DPO Consulting ISO 27001 certification cost",
   "url": "https://www.dpo-consulting.com/blog/iso-27001-certification-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "YourISO ISO 27001 certification cost UK",
   "url": "https://youriso.co.uk/iso-27001-certification-cost-uk-business-guide/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "RKMS ISO 27001 certification cost",
   "url": "https://www.rkmsuk.co.uk/iso-consultancy/the-cost-of-iso-27001-certification/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Elevate ISO 27001 certification cost 2026",
   "url": "https://elevateconsult.com/insights/iso-27001-certification-cost-2026-expert-verified-budget-guide/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Konfirmity SOC 2 audit cost",
   "url": "https://www.konfirmity.com/blog/soc-2-audit-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Compyl HITRUST certification cost",
   "url": "https://compyl.com/blog/how-much-does-hitrust-certification-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Workstreet SOC 2 audit cost",
   "url": "https://www.workstreet.com/blog/soc-2-audit-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "ZenGRC: how much does a PCI audit cost",
   "url": "https://www.zengrc.com/blog/how-much-does-a-pci-audit-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Feroot PCI DSS 4.0.1 audit cost",
   "url": "https://www.feroot.com/blog/understand-pci-dss-401-audit-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Thoropass PCI DSS audit cost guide",
   "url": "https://www.thoropass.com/blog/pci-dss-audic-cost-guide",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Scytale PCI DSS audit cost",
   "url": "https://scytale.ai/resources/how-much-will-it-cost-to-get-pci-dss-audited/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Drata SOC 2 audit cost",
   "url": "https://drata.com/learn/soc-2/cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Vanta: how much does a SOC 2 audit cost",
   "url": "https://www.vanta.com/collection/soc-2/soc-2-audit-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Sprinto SOC 2 compliance cost",
   "url": "https://sprinto.com/blog/soc-2-compliance-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Blaze Information Security UK pentest cost",
   "url": "https://www.blazeinfosec.com/post/penetration-testing-cost-uk/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Fortbridge UK pentest pricing",
   "url": "https://fortbridge.co.uk/pentesting/how-much-does-penetration-testing-cost-uk/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "DigitalXRAID cost of pen testing",
   "url": "https://www.digitalxraid.com/blog/cost-of-pen-testing/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Budget Security penetration testing cost",
   "url": "https://budgetsecurity.com/blog/penetration-testing-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "RedSec Labs SOC 2 audit costs",
   "url": "https://www.redseclabs.com/blog/soc-2-audit-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Cavanex SOC 2 cost breakdown",
   "url": "https://cavanex.com/blog/soc-2-compliance-cost-2026",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Polimity SOC 2 audit cost",
   "url": "https://polimity.com/blog/how-much-does-a-soc-2-audit-cost/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Ciphers Security SOC 2 audit cost by line item",
   "url": "https://cipherssecurity.com/soc-2-audit-cost-full-breakdown-2026/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "SecureLeap SOC 2 certification cost",
   "url": "https://www.secureleap.tech/blog/soc-2-certification-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "ComplyJet SOC 2 compliance cost",
   "url": "https://www.complyjet.com/blog/soc-2-compliance-cost",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "IS Partners HITRUST certification services",
   "url": "https://www.ispartnersllc.com/it-assurance/hitrust-csf/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "CertiKit ISO 27001 toolkit",
   "url": "https://certikit.com/products/iso-27001-toolkit/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "Governance Docs toolkit shop",
   "url": "https://governancedocs.com/shop/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "ISO27001Cost.com UK cost page",
   "url": "https://iso27001cost.com/cost-uk",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "ISO27001Cost.com: what is published and what is not",
   "url": "https://iso27001cost.com/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "SOC2Auditors.io SOC 2 audit cost",
   "url": "https://soc2auditors.io/resources/how-much-does-a-soc-2-audit-cost-in-2026",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "Bright Defense: 14 best SOC 2 audit firms",
   "url": "https://www.brightdefense.com/resources/soc-2-audit-firms/",
   "retrieved_at": "2026-09-11",
   "reason": "every candidate on the page was refused"
  },
  {
   "source": "PCIComplianceCost QSA cost",
   "url": "https://pcicompliancecost.com/qsa-cost",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  },
  {
   "source": "every assessor, certification body and toolkit vendor that publishes a price",
   "url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/",
   "retrieved_at": "2026-09-11",
   "reason": "read in full and no accepted figure on the page"
  }
 ],
 "sources": [
  {
   "url": "https://trustnetinc.com/pricing/soc-report-cost/",
   "label": "TrustNet SOC 2 report cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://trustnetinc.com/pricing/hitrust-pricing-cost/",
   "label": "TrustNet HITRUST certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://trustnetinc.com/pricing/",
   "label": "TrustNet pricing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://linfordco.com/blog/soc-audit-cost/",
   "label": "Linford & Company SOC audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.precursorsecurity.com/services/offensive-security/penetration-testing/cost",
   "label": "Precursor Security penetration testing cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.intruder.io/pricing",
   "label": "Intruder pricing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.getastra.com/pricing",
   "label": "Astra Pentest pricing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.securitymetrics.com/blog/how-much-does-pci-compliance-cost",
   "label": "SecurityMetrics PCI compliance cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.a-lign.com/pricing",
   "label": "A-LIGN pricing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://sensiba.com/resources/insights/what-does-soc-2-cost/",
   "label": "Sensiba: what does SOC 2 cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.nqa.com/en-gb/certification/standards/iso-27001",
   "label": "NQA ISO 27001 certification",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.bsigroup.com/en-GB/products-and-services/standards/",
   "label": "BSI Knowledge standards shop",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://amtivo.com/us/resources/insights/how-much-does-iso-27001-certification-cost/",
   "label": "Amtivo: how much does ISO 27001 certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://advisera.com/tools/iso-27001-certification-cost-calculator/",
   "label": "Advisera ISO 27001 certification cost calculator",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.glocertinternational.com/iso-27001-cost-calculator",
   "label": "Glocert ISO 27001 cost estimator",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://hightable.io/iso-27001-certification-cost/",
   "label": "High Table ISO 27001 certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://hightable.io/iso-27001-toolkit-pricing/",
   "label": "High Table ISO 27001 toolkit pricing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://iseoblue.com/iso-27001/certification-guides/certification-costs/",
   "label": "Iseo Blue ISO 27001 certification costs",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://atoro.io/iso-27001-certification-cost/",
   "label": "Atoro ISO 27001 certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.dpo-consulting.com/blog/iso-27001-certification-cost",
   "label": "DPO Consulting ISO 27001 certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://youriso.co.uk/iso-27001-certification-cost-uk-business-guide/",
   "label": "YourISO ISO 27001 certification cost UK",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.rkmsuk.co.uk/iso-consultancy/the-cost-of-iso-27001-certification/",
   "label": "RKMS ISO 27001 certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://elevateconsult.com/insights/iso-27001-certification-cost-2026-expert-verified-budget-guide/",
   "label": "Elevate ISO 27001 certification cost 2026",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.konfirmity.com/blog/soc-2-audit-cost",
   "label": "Konfirmity SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://compyl.com/blog/how-much-does-hitrust-certification-cost/",
   "label": "Compyl HITRUST certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.workstreet.com/blog/soc-2-audit-cost",
   "label": "Workstreet SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.zengrc.com/blog/how-much-does-a-pci-audit-cost/",
   "label": "ZenGRC: how much does a PCI audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.feroot.com/blog/understand-pci-dss-401-audit-cost/",
   "label": "Feroot PCI DSS 4.0.1 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.thoropass.com/blog/pci-dss-audic-cost-guide",
   "label": "Thoropass PCI DSS audit cost guide",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://scytale.ai/resources/how-much-will-it-cost-to-get-pci-dss-audited/",
   "label": "Scytale PCI DSS audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://drata.com/learn/soc-2/cost",
   "label": "Drata SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.vanta.com/collection/soc-2/soc-2-audit-cost",
   "label": "Vanta: how much does a SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://sprinto.com/blog/soc-2-compliance-cost/",
   "label": "Sprinto SOC 2 compliance cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.blazeinfosec.com/post/penetration-testing-cost-uk/",
   "label": "Blaze Information Security UK pentest cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://fortbridge.co.uk/pentesting/how-much-does-penetration-testing-cost-uk/",
   "label": "Fortbridge UK pentest pricing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.digitalxraid.com/blog/cost-of-pen-testing/",
   "label": "DigitalXRAID cost of pen testing",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://budgetsecurity.com/blog/penetration-testing-cost/",
   "label": "Budget Security penetration testing cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.redseclabs.com/blog/soc-2-audit-cost/",
   "label": "RedSec Labs SOC 2 audit costs",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://getsecureslate.com/blog/how-much-does-a-soc-2-audit-cost-in-2026",
   "label": "SecureSlate SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://cavanex.com/blog/soc-2-compliance-cost-2026",
   "label": "Cavanex SOC 2 cost breakdown",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://polimity.com/blog/how-much-does-a-soc-2-audit-cost/",
   "label": "Polimity SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://cipherssecurity.com/soc-2-audit-cost-full-breakdown-2026/",
   "label": "Ciphers Security SOC 2 audit cost by line item",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.secureleap.tech/blog/soc-2-certification-cost",
   "label": "SecureLeap SOC 2 certification cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.complyjet.com/blog/soc-2-compliance-cost",
   "label": "ComplyJet SOC 2 compliance cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.ispartnersllc.com/it-assurance/hitrust-csf/",
   "label": "IS Partners HITRUST certification services",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://certikit.com/products/iso-27001-toolkit/",
   "label": "CertiKit ISO 27001 toolkit",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://governancedocs.com/shop/",
   "label": "Governance Docs toolkit shop",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://iso27001cost.com/cost-uk",
   "label": "ISO27001Cost.com UK cost page",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://iso27001cost.com/",
   "label": "ISO27001Cost.com: what is published and what is not",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://soc2auditors.io/resources/how-much-does-a-soc-2-audit-cost-in-2026",
   "label": "SOC2Auditors.io SOC 2 audit cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.brightdefense.com/resources/soc-2-audit-firms/",
   "label": "Bright Defense: 14 best SOC 2 audit firms",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://pcicompliancecost.com/qsa-cost",
   "label": "PCIComplianceCost QSA cost",
   "license": "the publisher's own terms; quoted for reporting and comment"
  },
  {
   "url": "https://www.pcisecuritystandards.org/assessors_and_solutions/qualified_security_assessors/",
   "label": "every assessor, certification body and toolkit vendor that publishes a price",
   "license": "the publisher's own terms; quoted for reporting and comment"
  }
 ],
 "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 5 of the 53 named sources that could be read published a usable figure; 48 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in GBP (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 411 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): the cost of getting certified, split into the three lines a buyer is quoted separately - the platform, the readiness work and the auditor's own fee - per framework, per buyer size and per market, computed across every assessor, certification body, toolkit vendor and platform that publishes a figure. The headline nobody else computes is the PUBLICATION RATE: on the first read, no PCI QSA and no UKAS-accredited certification body published a fee schedule, while the toolkit and platform layer publishes freely, so the cost a buyer can look up covers only part of what they will pay.",
 "embed": "<figure style=\"margin:0;padding:16px;border:1px solid #d9d9d9;border-radius:8px;background:#ffffff;color:#111111;font-family:system-ui,sans-serif;max-width:480px\"><p style=\"margin:0 0 8px;font-size:28px;font-weight:700;color:#111111;background:#ffffff\">3,500 GBP</p><p style=\"margin:0 0 8px;font-size:14px;color:#111111;background:#ffffff\">median published figure, Audit Certification Cost Index, across 5 sources, read 11 September 2026</p><figcaption style=\"font-size:12px;color:#444444;background:#ffffff\"><a href=\"https://attestvio.com/datasets/audit-certification-cost-index/#median\" style=\"color:#1a4fd6;background:#ffffff\">Source: Attestvio Audit Certification Cost Index</a></figcaption></figure>"
}
