Kroll
Kroll is a SOC 2 support firm in New York, NY, USA providing penetration testing, compliance consulting, founded in 1972. Large enterprises needing a globally recognized firm for incident response, penetration testing, and comprehensive cyber risk advisory across the full security lifecycle.
Free and anonymous. At least 3 quotes in 48 hours. One call, not five.
Who should hire Kroll?
Large enterprises needing a globally recognized firm for incident response, penetration testing, and comprehensive cyber risk advisory across the full security lifecycle.
What makes Kroll different?
World's leading incident response provider (3,000+ cases/year); CREST-accredited; 6,500+ experts in 30+ countries; trusted by 6 out of 10 Fortune 500 companies; deeply resourced for complex and contested cyber events.
Pricing: Kroll does not publish a standard price. Pricing depends on scope, environment, and engagement model — request a quote to get a current figure.
Kroll FAQ
Answers templated from this firm's directory record and preserved in FAQPage schema.
What does Kroll do for SOC 2?
Kroll is a SOC 2 support firm providing penetration testing and compliance consulting. It does not issue the SOC 2 report itself; an independent CPA firm attests. Large enterprises needing a globally recognized firm for incident response, penetration testing, and comprehensive cyber risk advisory across the full security lifecycle.
Where is Kroll based?
Kroll is based in New York, NY, USA, and supports SOC 2 work remotely. It runs a team of roughly 6000 to 9000. The firm has operated since 1972.
Does Kroll publish pricing?
Kroll does not publish a standard price. Pricing for penetration testing and compliance consulting work depends on scope, environment, and engagement model, so request a quote to get a current figure.
Compare Kroll with the right-fit firms
Tell us your scope and SOC 2 timeline. We send it to Kroll and a couple of other firms that fit, and they reply with a ballpark. Anonymous until you pick.
Run a firm? Claim or upgrade this listing. Ordering stays payment-blind: verified firms first.