air-gapped deployment

Adelphi delivers production AI solutions for national security, connecting models and agents to governed mission data across classified, covert and enterprise environments. The company provides a secure access layer and a governed registry of data sources, permissions, policies and provenance, and embeds cleared engineers to deploy AI into mission networks through accreditation and go-live.

accreditation engineeringagentic AI workflowsAI deploymentdata access and integrationmodel evaluationsecure pipelines and access controls

Aethyr Research LLC builds sovereign AI agent infrastructure that runs inside the customer's own boundary: on-prem, private cloud, or fully air-gapped. Its stack uses NIST post-quantum cryptography (ML-DSA-65, ML-KEM-768) with tamper-evident audit trails, serving regulated enterprises and defense/government agencies. Founded May 2025 in Utah.

Edge deploymententerprise system integrationGPU-accelerated AI orchestrationLLM inferencemodel fine-tuningmulti-agent orchestrationpost-quantum cryptographyRAG pipelines

Jozu provides a self-hosted, air-gap capable platform for securing enterprise AI. Jozu Hub verifies and secures models, agents, and MCP servers, while Agent Guard enforces policy and contains agents on Kubernetes, connected or air-gapped. Created by the team behind KitOps, a CNCF project.

agent isolation in microVMartifact signingCI/CD integrationcryptographic audit loggingKubernetes deploymentOCI artifact packagingpolicy enforcementvulnerability scanning

AKMSecure delivers a patented Autonomous Key Management™ (AKM) protocol that eliminates certificates, using dynamic symmetric credentials that provision once and refresh perpetually. Quantum-resilient by design and aligned to CNSA 2.0, it supports Zero Trust, air-gapped and denied environments across enterprise IT, OT, and Tactical Edge, deployable as a lightweight SDK.

Autonomous Key Managementquantum-resilient encryptionSDK integrationsymmetric AES-256 with SHA-384/512Zero Trust session verification

BlackArc Systems is the federal practice of BlackArc Industrial, LLC, building production agentic AI systems for defense and civilian agencies and training agencies and national laboratories to run them. Founded in 2023 and headquartered in Reston, VA, the company delivers in partnership with CTG Federal, a CMMC Level 2 prime. Its founders have put 150+ AI agents into production across federal, SLED, and commercial work.

agentic AI system developmentAI training and enablementaudit and access controlevaluation and observabilityhuman-in-the-loop controlson-prem inference (Ollama, vLLM, Triton)PII redaction

Blacktip Refine is a self-hosted AWS cost optimization platform that deploys entirely inside the customer's AWS account, so no infrastructure data leaves the account boundary. It is purpose-built for GovCloud, FISMA, ITAR, IL4/IL5, HIPAA, and air-gapped environments. Refine deploys as a CloudFormation stack with a read-only IAM role, Lambda function, and S3 bucket, and produces prioritized savings reports with executable CLI commands.

AWS cost optimizationCloudFormation deploymentFISMA/ITAR/IL4/IL5/HIPAA supportGovCloud deploymentLambda functionread-only IAM role provisioningS3 bucket provisioningself-hosted deployment inside customer AWS accounttelemetry-free operationzero-egress architecture

Bluescape provides a secure visual workspace and workflow orchestration platform designed for Multiplayer AI, where human teams and AI agents work together on shared content. It is authorized to operate at FedRAMP Moderate and by the U.S. DoD at IL4/IL5 for CUI data, and is used by enterprises, defense departments, and intelligence agencies.

AI agent integrationon-premises deploymentprivate cloud deploymentsecure collaborationvisual collaboration workspaceworkflow orchestration

Cellcrypt provides quantum-safe encrypted communications, sealing every call, message and file with dual-layer post-quantum encryption (Kyber + Classic McEliece) wrapped around FIPS 140-3 compliant cryptography. It serves government agencies, defence contractors and regulated enterprises, with cloud-hosted, self-hosted on-premises, and PBX gateway deployment options.

centralised administrationend-to-end encryptionhardware security modules (HSM)PBX integrationpost-quantum encryptiontrusted platform modules (TPM)white-labellingzero-knowledge architecture

Dark Sky Technology provides software supply chain security products, including Bulletproof Trust™ and Bulletproof Code™, for SBOM generation, management, and cyber supply chain risk management. Its team has spent 25+ years protecting software systems from cybersecurity vulnerabilities and attacks, helping software companies secure code from malicious threats and untrusted code through advanced analytics on open-source packages. Headquartered in Fort Collins, Colorado.

AI LLM integration via MCPAPI and CLI integrationopen-source package risk analyticspolicy-as-code enforcementSBOM diffingSBOM generationSBOM managementSBOM revision controlSBOM sharing and receivingSBOM validationSBOM verificationthreat intelligence

Crogl is a sovereign AI SOC platform that deploys autonomous AI agents to investigate every security alert, hunt threat advisories, and document every action using the customer's own tools, data, and environment. Founded in 2023 to build autonomous agents for security operations, Crogl runs on-premises, in private cloud, or fully air-gapped, with a knowledge graph, AI orchestration layer, and model-agnostic LLM support.

AI orchestrationalert triageautonomous AI agentsfederated searchgoverned auto-remediationknowledge graphon-premises deploymentprivate cloud deploymentSIEM/EDR/ticketing/data lake integrationskill builderThreat hunting

CrunchAtlas provides agentic cyber defense and threat intelligence for critical infrastructure across IT and OT environments. Its platform connects AtlasCyber, which detects, investigates, connects cases, and prepares findings for operator review; ClemAI, a built-in cyber professional for investigation, hunting, forensics, and reporting; and PurpleHaze, which proves real attack paths, fixes exposure, and retests the fix. Deployments include cloud, on-premises, and air-gapped.

attack path validationcampaign attributionCloud deploymentdetectionexposure remediation and retestingforensicsinvestigationon-premises deploymentreportingThreat huntingthreat intelligence

DiffuseDrive develops an end-to-end automated data solution for physical AI, helping computer vision developers build autonomous machines faster. Its Atlas product generates real-world-grade synthetic data for training, validation, and edge case testing, matching EO and IR sensor characteristics and avoiding the sim-to-real gap. Founded by Bálint Pásztor and Roland Pintér, formerly of Bosch autonomous driving.

data acquisitionedge case testingEO and IR sensor simulationSynthetic data generationtraining and validation data

EchoMark provides invisible forensic watermarking that embeds unique, individualized watermarks into emails, documents, images, and screens using steganography. When information leaks, EchoMark's investigation tool compares the leaked artifact with marked copies to identify whose copy leaked, with a confidence score and chain-of-custody reporting. The company was named a 2024 Gartner Cool Vendor in Data Security.

AI rephrasingAPI integrationcomputer visionforensic watermarkingleak investigationon-premises deploymentsteganography

Trenchant Cyber designs, secures, and operates cybersecurity, AI, and data systems for regulated businesses. It offers AI-assisted threat detection, incident response, compliance readiness, private on-premise AI systems and agents, and data platform engineering. Its local AI platform ships as a customer-owned appliance with local inference and no data egress. It serves legal, accounting, manufacturing, healthcare, professional services, and defense/government contracting industries.

agent orchestration and automationAI-assisted threat detectioncompliance readinessdata governance and lineageETL and data engineeringGPU-accelerated local inferenceincident responselocal LLM deployment and tuningRAGvector and analytics infrastructure

Empyrean Defense builds a multi-domain operational intelligence and decision platform for defense, critical infrastructure, and high-consequence security. The platform fuses sensors and intelligence in the cloud or at the edge, providing sub-second correlation, a common operational picture, policy-driven automation, and a full audit trail. It is containerized and single-tenant, deployable as managed SaaS on AWS Commercial or GovCloud, in private cloud, or air-gapped.

AI/ML enrichmentcontainerized deployment (Docker, Kubernetes)cross-domain correlationEdge deploymententity resolutionidentity resolutionmulti-hypothesis trackingpolicy-driven automationsanctions and watchlist screeningsensor fusionwargaming

Enclaiva provides a secure AI reasoning platform, Nexus, that unifies an organization's knowledge base with source-level auditability, zero-knowledge encryption, and compliance from CUI to classified. It offers fine-tuned models, custom retrieval pipelines, and domain-specific knowledge graphs, with air-gapped or GovCloud deployment and NIST 800-171, CMMC, and agency-specific controls built in. It serves defense and intelligence, the industrial base, and regulated enterprises.

custom retrieval pipelinesdomain-specific knowledge graphsfull audit trailsGovCloud deploymentrole-based accesssecure AI reasoningsource-level auditabilityzero-knowledge encryption

FinalBoss Technology Inc., based in Oxnard, California, provides execution security for agentic AI. Its FinalBoss system runs inside the customer's own kernel and hardware, requiring every AI action to pass a deterministic enforcement gate before it runs; allowed actions execute with a signed receipt, and everything else is stopped. The company also offers BEAST assessment for hidden path discovery and an HTTP/API integration lane.

execution control for AI agentshidden path discoveryHTTP/API integrationkernel-level enforcementon-prem deploymentsigned receipts (Ed25519 + ML-DSA-87)standalone offline verificationwhite-label OEM