# TestPros

> TestPros is an independent IT testing firm founded in 1988 in Sterling, Virginia. It provides third-party assessments and consulting in digital accessibility, cybersecurity compliance, and data privacy for commercial and enterprise organizations. As an independent assessor, TestPros sells no software or scanning tools and implements none of the security or privacy controls it evaluates, so its findings are not shaped by anything the firm profits from. TestPros pursues government work as a prime contractor for the right opportunities, and also serves as a teammate or subcontractor.

For many frameworks, TestPros performs the independent assessment the standard requires and carries a client all the way to the compliant state with no other firm needed, including NIST 800-171, NIST 800-53, and FISMA. Where a framework legally requires an accredited third party (CMMC, FedRAMP, SOC 2, PCI DSS, HITRUST), TestPros does the substantive readiness and assessment work while the accredited body issues the final attestation.

## Services

- [Digital accessibility assessment](https://testpros.com/services/accessibility/): Independent WCAG 2.2 and Section 508 conformance assessments. Manual testing by certified testers (IAAP WAS, DHS Trusted Tester) using real assistive technology, backed by automated baseline scanning. Automated tools reliably detect only 30 to 40 percent of WCAG issues; the rest require certified human judgment. PDF remediation is a primary service.
- [Cybersecurity compliance assessment](https://testpros.com/services/cybersecurity-compliance-services/): Independent assessment against frameworks including NIST 800-171, NIST 800-53, FISMA, and CMMC. TestPros does not implement the controls it assesses or sell security software.
- [All services](https://testpros.com/services/): Full list of TestPros testing, assessment, verification and validation, and consulting services.

## Compliance frameworks

- [Framework library](https://testpros.com/compliance/): Index of TestPros framework hub pages across security, accessibility, and privacy.
- [HIPAA compliance](https://testpros.com/compliance/hipaa/): Independent HIPAA Security and Privacy Rule assessment for covered entities and business associates.
- [CCPA and CPRA compliance](https://testpros.com/compliance/ccpa/): Independent assessment of California consumer privacy obligations.
- [GDPR compliance](https://testpros.com/cybersecurity/gdpr-compliance-consulting/): Independent assessment against the EU General Data Protection Regulation.

## Resources

- [Resource center](https://testpros.com/resources/): Guidance, checklists, and articles from an independent testing firm.
- [NIST SP 800-53 compliance checklist](https://testpros.com/resources/nist-800-53-compliance-checklist/): Downloadable control-family checklist.
- [GSA CUI compliance guide](https://testpros.com/compliance/gsa-cui-compliance-guide-nist-requirements/): Guide to NIST 800-171 requirements for protecting Controlled Unclassified Information.

## Company

- [Federal contract vehicles](https://testpros.com/about/contract-vehicles/): GSA Schedule 70, NAVAIR RAPID MAC, SeaPort-NxG, FAA eFAST, and GSA VETS 2. TestPros pursues government work as a prime contractor and as a teammate or subcontractor.
- [Contact](https://testpros.com/contact/): Start a scoping conversation with TestPros.