Meditology Services

Meditology Services is an Atlanta, Georgia-based cybersecurity, privacy, and regulatory compliance consultancy founded in 2011 and focused exclusively on the healthcare sector. The firm is run by former CISOs and privacy officers and staffs engagements with consultants holding credentials including CISSP, OSCP, CISA, HITRUST, and CIPP. Its service lines include security and privacy risk assessments, HITRUST and SOC 2 assurance work, PCI-DSS ASV/QSA services, HIPAA and OCR compliance support, penetration testing, and cloud security reviews, serving clients from small medical practices to large national health systems.

In February 2022, Meditology received a growth investment from Primus Capital, a private equity firm, and in November 2025 the company announced the acquisition of CORL Technologies, a third-party risk management (TPRM) specialist, expanding its portfolio into vendor risk management alongside its existing GRC and technical assessment work. The combined company operates from offices in Atlanta, Philadelphia, Denver, San Diego, and St. Louis.

Because HITRUST certification, SOC 2 attestation, and PCI QSA status are independently issued and audited credentials rather than self-reported marketing claims, Meditology’s core service portfolio comes with a built-in layer of third-party verification uncommon among general security consultancies. Its narrow healthcare focus and PE-backed growth trajectory (including the CORL acquisition) position it as a credible, if services-based rather than product-based, player in a regulatory space where HIPAA and HITRUST compliance demand is structurally durable.