Coalfire

Listed · public sources

Coalfire is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for PCI DSS assessment across CMMC; the firm also offers penetration testing and vCISO & advisory.

Compiled from public sources · observed Jul 2026

Appears in Vanta's Audit Partner directory and Drata's Audit Alliance · observed Jul 2026

Before you request a quote from Coalfire

You’d be talking to GRC Migrate, the independent advisor, not Coalfire.We don’t sell audits. You get an independent read, and an introduction to a vetted partner where one fits.

See what buyers at your size actually paid →

Independent by structure: nothing from platform vendors, nothing from firms to be listed. We earn a flat referral fee only when a vetted partner accepts an introduction, disclosed plainly.

Get Connected to this auditor

Prefer not to book a call? Share a few details and GRC Migrate, the independent advisor, reviews it first and makes a warm intro if it’s a fit. You’re reaching GRC Migrate, not Coalfire directly.

Already have a quote from Coalfire or another firm?Get an independent read on it →

The facts, with their sources

Every line below is compiled from a public source and dated. Nothing here is written by the firm.

Sources last observed

Services

DetailSource
vCISO & advisorycoalfire.com · Jul 2026; coalfire.com · Jul 2026; coalfire.com · Jul 2026
PCI DSS assessmentcoalfire.com · Jul 2026
penetration testingcoalfire.com · Jul 2026

Frameworks

DetailSource
PCI DSScoalfire.com · Jul 2026
CMMCcoalfire.com · Jul 2026

CPA firm

DetailSource
self-statedcoalfire.com · Jul 2026

Directory presence

Firm website (a fact, not a recommendation): coalfire.com

We hold too few verified quotes for Coalfire to publish a firm-level figure, and we won’t estimate one.

Is this your firm? Get in touch and we’ll route it to the operator directly.

Request a correction or removal

See something wrong, or want this listing removed? Tell us which fact and why. We review correction requests within two business days; a disputed fact is pulled from this page pending review.