Coalfire Systems
Coalfire is one of the largest QSA companies operating in North America. It is the named assessor on Amazon and AWS PCI DSS validations in Visa's Global Registry of Service Providers, and its published materials describe deep cloud-first PCI assessment work for SaaS and technology companies, including helping AWS develop its original shared-responsibility model.
At a glance
| Headquarters | Westminster, Colorado |
|---|---|
| Founded | Not disclosed |
| Firm type | QSA company (QSAC); cybersecurity advisory and assessment firm |
| ROC planning range | $60K–$150K+ (planning estimate (Sept 2026)) |
| Typical fieldwork window | 6–12 wk |
| Frameworks (per firm) | PCI DSS, SOC 2, ISO 27001, HITRUST, FedRAMP, pen testing |
| Official website | coalfire.com |
Best fit
Enterprises and cloud-native companies with complex, multi-entity PCI scope.
Before you engage
A premium practice — expect enterprise pricing and confirm which engagement team is staffed.
Engagement notes
Coalfire is an enterprise-grade practice. Expect a formal scoping process and a multi-week fieldwork window; confirm the named engagement team and any use of offshore resources in writing.
Questions about Coalfire Systems
Is Coalfire Systems an accredited QSA company?
Coalfire Systems operates as a QSA company and appears as the named assessor on Amazon and AWS PCI DSS validations in Visa's Global Registry of Service Providers. As with any firm, confirm its current QSA status on the PCI SSC's assessor listings before engaging.
What is Coalfire best known for in PCI?
Cloud-first PCI assessments for SaaS and technology companies; per published industry coverage, Coalfire helped AWS develop its original shared-responsibility model.
Get a scoped quote
QSA fees depend on your size, scope, and readiness. Get comparable quotes from Coalfire Systems and similar accredited QSA companies.
Request quotes from Coalfire Systems & peersFree · No obligation · Takes 2 minutes
Alternatives to Coalfire Systems
Comparable QSA companies buyers also evaluate — same buyer profile, different trade-offs:
Schellman
QSA company (QSAC) · $50K–$120K
A-LIGN
QSA company (QSAC) · $40K–$100K
VikingCloud
QSA company (QSAC) · $50K–$120K
Compare quotes from these firms
One request reaches the firms above — scoped quotes, free, no obligation.
How it works: tell us once (4 questions, 2 min) → we match accredited QSA companies to your size and scope → they send scoped quotes directly. Free, no obligation.
← All QSA companies · PCI DSS cost guide · RFP & quote worksheet