Soc 2 certification cost: Audit Certification Cost Index
The median published figure in the Audit Certification Cost Index is 3,500 GBP across 2 sources' own pages in GBP (range 3,500 to 3,500 GBP; 5 sources publish a figure), read 11 September 2026.
Attestvio sells its own paid plan in this category (our pricing). It is not counted here: every figure in this index is another provider's own published price, read from its own page.
5 of the 53 named sources read in full publish a figure; 48 publish none, read 11 September 2026.
Every figure, with its source
One row per source: the figure the source's own page publishes, the page, and the day it was read. A figure that is not on a page we read is not on this one.
| Source | Figure | Read |
|---|---|---|
| Iseo Blue ISO 27001 certification costs | 3,500GBP | 2026-09-11 |
| Precursor Security penetration testing cost | 3,500GBP | 2026-09-11 |
| Intruder pricing | 3,000EUR | 2026-09-11 |
| SecureSlate SOC 2 audit cost | 284USD | 2026-09-11 |
| High Table ISO 27001 toolkit pricing | 97USD | 2026-09-11 |
The sentence each figure was read from (5)
- Iseo Blue ISO 27001 certification costs, read 2026-09-11:
I offer two fixed-fee routes - a £3,500 coaching programme and a £7,500 fully-assisted consultancy - both fixed for organisations up to 250 employees.
- Precursor Security penetration testing cost, read 2026-09-11:
A web application assessment (from £3,500) is the most common starting point for small and mid-size businesses.
- Intruder pricing, read 2026-09-11:
Starting from €3,000
- SecureSlate SOC 2 audit cost, read 2026-09-11:
Our affordable plans start at just $284/month.
- High Table ISO 27001 toolkit pricing, read 2026-09-11:
Solution / Package Best For Included Deliverables Price (USD) ISO 27001 Policy Template Bundle Early-stage teams (<10 staff) needing quick policy docs Pre-populated ISO 27001:2022 policy templates $97.00
Read in full, publishes no figure
48 named sources were read in full on the dates shown and print no usable figure. They are counted, never filled in.
- TrustNet SOC 2 report cost, read 2026-09-11: every candidate on the page was refused
- TrustNet HITRUST certification cost, read 2026-09-11: every candidate on the page was refused
- TrustNet pricing, read 2026-09-11: read in full and no accepted figure on the page
- Linford & Company SOC audit cost, read 2026-09-11: every candidate on the page was refused
- Astra Pentest pricing, read 2026-09-11: read in full and no accepted figure on the page
- SecurityMetrics PCI compliance cost, read 2026-09-11: every candidate on the page was refused
- A-LIGN pricing, read 2026-09-11: read in full and no accepted figure on the page
- Sensiba: what does SOC 2 cost, read 2026-09-11: every candidate on the page was refused
- NQA ISO 27001 certification, read 2026-09-11: read in full and no accepted figure on the page
- BSI Knowledge standards shop, read 2026-09-11: read in full and no accepted figure on the page
- Amtivo: how much does ISO 27001 certification cost, read 2026-09-11: every candidate on the page was refused
- Advisera ISO 27001 certification cost calculator, read 2026-09-11: read in full and no accepted figure on the page
- Glocert ISO 27001 cost estimator, read 2026-09-11: read in full and no accepted figure on the page
- High Table ISO 27001 certification cost, read 2026-09-11: every candidate on the page was refused
- Atoro ISO 27001 certification cost, read 2026-09-11: every candidate on the page was refused
- DPO Consulting ISO 27001 certification cost, read 2026-09-11: every candidate on the page was refused
- YourISO ISO 27001 certification cost UK, read 2026-09-11: every candidate on the page was refused
- RKMS ISO 27001 certification cost, read 2026-09-11: every candidate on the page was refused
- Elevate ISO 27001 certification cost 2026, read 2026-09-11: read in full and no accepted figure on the page
- Konfirmity SOC 2 audit cost, read 2026-09-11: every candidate on the page was refused
- Compyl HITRUST certification cost, read 2026-09-11: read in full and no accepted figure on the page
- Workstreet SOC 2 audit cost, read 2026-09-11: every candidate on the page was refused
- ZenGRC: how much does a PCI audit cost, read 2026-09-11: every candidate on the page was refused
- Feroot PCI DSS 4.0.1 audit cost, read 2026-09-11: every candidate on the page was refused
- Thoropass PCI DSS audit cost guide, read 2026-09-11: every candidate on the page was refused
- Scytale PCI DSS audit cost, read 2026-09-11: every candidate on the page was refused
- Drata SOC 2 audit cost, read 2026-09-11: every candidate on the page was refused
- Vanta: how much does a SOC 2 audit cost, read 2026-09-11: every candidate on the page was refused
- Sprinto SOC 2 compliance cost, read 2026-09-11: every candidate on the page was refused
- Blaze Information Security UK pentest cost, read 2026-09-11: every candidate on the page was refused
- Fortbridge UK pentest pricing, read 2026-09-11: every candidate on the page was refused
- DigitalXRAID cost of pen testing, read 2026-09-11: every candidate on the page was refused
- Budget Security penetration testing cost, read 2026-09-11: every candidate on the page was refused
- RedSec Labs SOC 2 audit costs, read 2026-09-11: every candidate on the page was refused
- Cavanex SOC 2 cost breakdown, read 2026-09-11: every candidate on the page was refused
- Polimity SOC 2 audit cost, read 2026-09-11: every candidate on the page was refused
- Ciphers Security SOC 2 audit cost by line item, read 2026-09-11: every candidate on the page was refused
- SecureLeap SOC 2 certification cost, read 2026-09-11: every candidate on the page was refused
- ComplyJet SOC 2 compliance cost, read 2026-09-11: every candidate on the page was refused
- IS Partners HITRUST certification services, read 2026-09-11: read in full and no accepted figure on the page
- CertiKit ISO 27001 toolkit, read 2026-09-11: read in full and no accepted figure on the page
- Governance Docs toolkit shop, read 2026-09-11: read in full and no accepted figure on the page
- ISO27001Cost.com UK cost page, read 2026-09-11: every candidate on the page was refused
- ISO27001Cost.com: what is published and what is not, read 2026-09-11: every candidate on the page was refused
- SOC2Auditors.io SOC 2 audit cost, read 2026-09-11: every candidate on the page was refused
- Bright Defense: 14 best SOC 2 audit firms, read 2026-09-11: every candidate on the page was refused
- PCIComplianceCost QSA cost, read 2026-09-11: read in full and no accepted figure on the page
- every assessor, certification body and toolkit vendor that publishes a price, read 2026-09-11: read in full and no accepted figure on the page
Methodology
Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2).
5 of the 53 named sources that could be read published a usable figure; 48 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere.
The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in GBP (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 411 candidate sentence(s) were refused by a reviewer with the reason recorded.
The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): the cost of getting certified, split into the three lines a buyer is quoted separately - the platform, the readiness work and the auditor's own fee - per framework, per buyer size and per market, computed across every assessor, certification body, toolkit vendor and platform that publishes a figure.
The headline nobody else computes is the PUBLICATION RATE: on the first read, no PCI QSA and no UKAS-accredited certification body published a fee schedule, while the toolkit and platform layer publishes freely, so the cost a buyer can look up covers only part of what they will pay.
411 candidate sentences on these pages were refused by a reviewer; each refusal and its reason is recorded in the review ledger.
Sources (53)
- TrustNet SOC 2 report cost(the publisher's own terms; quoted for reporting and comment)
- TrustNet HITRUST certification cost(the publisher's own terms; quoted for reporting and comment)
- TrustNet pricing(the publisher's own terms; quoted for reporting and comment)
- Linford & Company SOC audit cost(the publisher's own terms; quoted for reporting and comment)
- Precursor Security penetration testing cost(the publisher's own terms; quoted for reporting and comment)
- Intruder pricing(the publisher's own terms; quoted for reporting and comment)
- Astra Pentest pricing(the publisher's own terms; quoted for reporting and comment)
- SecurityMetrics PCI compliance cost(the publisher's own terms; quoted for reporting and comment)
- A-LIGN pricing(the publisher's own terms; quoted for reporting and comment)
- Sensiba: what does SOC 2 cost(the publisher's own terms; quoted for reporting and comment)
- NQA ISO 27001 certification(the publisher's own terms; quoted for reporting and comment)
- BSI Knowledge standards shop(the publisher's own terms; quoted for reporting and comment)
- Amtivo: how much does ISO 27001 certification cost(the publisher's own terms; quoted for reporting and comment)
- Advisera ISO 27001 certification cost calculator(the publisher's own terms; quoted for reporting and comment)
- Glocert ISO 27001 cost estimator(the publisher's own terms; quoted for reporting and comment)
- High Table ISO 27001 certification cost(the publisher's own terms; quoted for reporting and comment)
- High Table ISO 27001 toolkit pricing(the publisher's own terms; quoted for reporting and comment)
- Iseo Blue ISO 27001 certification costs(the publisher's own terms; quoted for reporting and comment)
- Atoro ISO 27001 certification cost(the publisher's own terms; quoted for reporting and comment)
- DPO Consulting ISO 27001 certification cost(the publisher's own terms; quoted for reporting and comment)
- YourISO ISO 27001 certification cost UK(the publisher's own terms; quoted for reporting and comment)
- RKMS ISO 27001 certification cost(the publisher's own terms; quoted for reporting and comment)
- Elevate ISO 27001 certification cost 2026(the publisher's own terms; quoted for reporting and comment)
- Konfirmity SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- Compyl HITRUST certification cost(the publisher's own terms; quoted for reporting and comment)
- Workstreet SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- ZenGRC: how much does a PCI audit cost(the publisher's own terms; quoted for reporting and comment)
- Feroot PCI DSS 4.0.1 audit cost(the publisher's own terms; quoted for reporting and comment)
- Thoropass PCI DSS audit cost guide(the publisher's own terms; quoted for reporting and comment)
- Scytale PCI DSS audit cost(the publisher's own terms; quoted for reporting and comment)
- Drata SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- Vanta: how much does a SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- Sprinto SOC 2 compliance cost(the publisher's own terms; quoted for reporting and comment)
- Blaze Information Security UK pentest cost(the publisher's own terms; quoted for reporting and comment)
- Fortbridge UK pentest pricing(the publisher's own terms; quoted for reporting and comment)
- DigitalXRAID cost of pen testing(the publisher's own terms; quoted for reporting and comment)
- Budget Security penetration testing cost(the publisher's own terms; quoted for reporting and comment)
- RedSec Labs SOC 2 audit costs(the publisher's own terms; quoted for reporting and comment)
- SecureSlate SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- Cavanex SOC 2 cost breakdown(the publisher's own terms; quoted for reporting and comment)
- Polimity SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- Ciphers Security SOC 2 audit cost by line item(the publisher's own terms; quoted for reporting and comment)
- SecureLeap SOC 2 certification cost(the publisher's own terms; quoted for reporting and comment)
- ComplyJet SOC 2 compliance cost(the publisher's own terms; quoted for reporting and comment)
- IS Partners HITRUST certification services(the publisher's own terms; quoted for reporting and comment)
- CertiKit ISO 27001 toolkit(the publisher's own terms; quoted for reporting and comment)
- Governance Docs toolkit shop(the publisher's own terms; quoted for reporting and comment)
- ISO27001Cost.com UK cost page(the publisher's own terms; quoted for reporting and comment)
- ISO27001Cost.com: what is published and what is not(the publisher's own terms; quoted for reporting and comment)
- SOC2Auditors.io SOC 2 audit cost(the publisher's own terms; quoted for reporting and comment)
- Bright Defense: 14 best SOC 2 audit firms(the publisher's own terms; quoted for reporting and comment)
- PCIComplianceCost QSA cost(the publisher's own terms; quoted for reporting and comment)
- every assessor, certification body and toolkit vendor that publishes a price(the publisher's own terms; quoted for reporting and comment)
Cite or embed this figure
Cite or embed this figure
The median published figure in the Audit Certification Cost Index is 3,500 GBP across 2 sources' own pages in GBP (range 3,500 to 3,500 GBP; 5 sources publish a figure), read 11 September 2026.
5 of the 53 named sources read in full publish a figure; 48 publish none, read 11 September 2026.
Cite as: "Attestvio Audit Certification Cost Index", updated 2026-10-05, https://attestvio.com/datasets/audit-certification-cost-index/.
Download the CSV (5 rows, computed 2026-10-05)