Detection engineering

Aegisbyte is a veteran-led, minority-owned, service-disabled veteran-owned cybersecurity firm founded in 2022 and headquartered in Virginia, USA. It provides offensive security, adversary emulation, and AI assurance for the Department of Defense, the Intelligence Community, the Defense Industrial Base, federal civilian, critical infrastructure, energy, telecom, SLED, and regulated commercial enterprises.

Adversary Emulationcompliance mapping to NIST, CMMC, FedRAMP, HIPAA, PCI, MITRE ATT&CKembedded/IoT analysisexploit developmentICS/SCADA and OT testingLLM/agentic/RAG security assessmentpenetration testingpurple teamingred teamingreverse engineering

Analytica42 helps organizations maximize the potential of their SIEM and SOAR platforms. The company provides SIEM/SOAR enablement, migration and transformation, co-managed SIEM, use case development, and content services, with over 20 years of experience and over 80 years of combined team experience.

automation and orchestrationCase Managementcustom application developmentdashboard creationdata analyticsdata ETL migrationinstallation and configurationparser creationplatform consolidationrules and alertingSIEM/SOAR implementationthird-party integrationsThreat huntingtraining and educationuse case development

AttackIQ provides a security optimization platform for continuous threat exposure management (CTEM). Its AVA Agentic OS orchestrates AI agents that execute autonomous cybersecurity missions to validate defenses, break attack paths, and reduce threat debt. Offerings include AttackIQ Flex for on-demand exposure validation, AttackIQ Ready for fully managed continuous validation, and AttackIQ Enterprise for complete control of security readiness.

Adversary EmulationAI-powered autonomous cybersecurity missionsbreach and attack simulationCTEM implementationexposure validationoffensive testingpurple teamingred team augmentationsecurity control validationvulnerability prioritization

bitsIO delivers observability, enterprise security, and AI services for enterprise teams. It is a five-time Splunk Partner of the Year and Splunk Trusted Partner that monitors systems, closes security gaps, optimizes Splunk cost with datasensAI, and helps observe and secure AI agents running in production. The company serves 300+ enterprise clients across four countries with 50+ certified consultants.

AI agent securityAI observabilitycloud migrationconsultingobservability deploymentSIEM migrationSplunk implementationSplunk managed services

Booz Allen is a technology company that transforms missions with advanced technologies to advance the country's most critical civil, defense, and national security priorities. It offers software platforms, analytical tools, and cybersecurity accelerators, including the Vellox AI-native cyber product suite, Sit(x) TAK-Server-as-a-Service, and Modelpoint threat analysis. The company serves government, military, intelligence, and commercial clients.

AI and machine learningbattle managementcloud-native platform developmentCybersecurityedge computeencryptionmalware reverse engineeringsecure communicationssoftware developmentthreat intelligence

BRASI TECH LLC provides consulting and professional services in cyber security and data engineering. It configures log collection, parsing, and forwarding into SIEM or data analytics platforms, builds and deploys cyber security threat analytics for log and event data, and offers full stack Elastic architecture and deployment including Logstash, Kibana, Elasticsearch, and Beats, on-site or in AWS Cloud. It also provides custom training and meets requirements for US federal government work.

AWS Cloud deploymentsElastic stack architecture and deploymentlog collection, parsing, and forwarding configurationon-site deploymentsSIEM integrationThreat Analyticstraining

Cerbicore is an information security company whose consultants include former law enforcement officers, intelligence officers, Department of Defense computer security specialists, computer programmers, threat hunters, and published experts. It provides Information Security solutions to Fortune 500 organizations and the U.S. Government, offering strategic consulting, threat hunting, incident response, and training.

forensicsincident responseprogram developmentStrategic Assessmentstable-top exercisesThreat huntingtraining

Chameleon Technologies is an owner-operated cybersecurity, privacy engineering, and AI assurance firm led by Yarick Tsagoyko with senior engineers Alexander George and Daniel Mirsky. It helps federal and regulated organizations design, automate, and operate secure cloud, SOC, CDM, compliance, and AI environments. Based in Potomac, Maryland, with nationwide delivery.

AI assurancecloud security architecturecompliance automationdigital forensicsIaC and CI/CD automationincident responseMITRE SAF assessment automationPrivacy engineeringRMF/ATO evidence automationsecure DevSecOpsSIEM engineeringSOC modernizationthreat detectionZero Trust Engineering

CYBRILL is a veteran-owned, SBA-Certified SDVOSB cybersecurity engineering firm specializing in modern security operations. Built and led by senior engineers, it helps organizations assess, modernize, optimize, and support the platforms, data, and detections that power security operations, with experience across 150+ government and enterprise environments including 17+ federal and 30+ state/local agencies.

automationCribl engineeringmulti-destination routingOptimizationplatform engineeringsecurity architectureSIEM migrationSplunk engineeringtelemetry and data pipelinestroubleshooting

DCE Infosec LLC is a minority-owned business specializing in comprehensive cybersecurity, data engineering, and staffing and recruitment services. It offers security solutions including incident response, SIEM, SOAR, IAM, endpoint security, and network security, along with data services such as cleaning, preprocessing, visualization, and governance, plus recruitment services. The company serves government agencies and enterprise clients across technology, finance, healthcare, and telecommunications sectors.

Cribl Deploymentdata engineeringDLPendpoint securityIAMincident responseNetwork Device Deploymentnetwork securitySIEMSOARSOC monitoringSplunk Deploymentstaffing servicesthreat detectionvulnerability managementWAP Deployment

Dephiant Consulting Inc. is a principal-led, specialist-supported, project-scoped cybersecurity advisory serving enterprises and growth-stage organizations across EMEA, North America, APAC, Africa, and LATAM. It helps organizations prepare for NIST SP 800-171 and CMMC, SOC 2 and ISO 27001 assessments, answer vendor security questionnaires, and run fractional GRC programs. It prepares clients for independent audits but does not issue certifications. It is a Woman-, Minority-, Black-, and Veteran-owned business.

AI/LLM security testingcloud security posture managementcompliance readinessDigital transformationenterprise IT solutionsincident responseIT advisorypenetration testingquantified cyber risk managementRed TeamThreat huntingvCISO / fractional CISO

devZero Security LLC is an SDVOSB/VOSB-certified cybersecurity firm based in Arlington, Virginia. It provides red team and adversary emulation, detection engineering, and security architecture services, with every engagement executed by cleared, senior personnel holding TS/SCI clearances (US and NATO).

ATT&CK coverage mappingCloud and hybrid environmentsDetection-as-CodeNetwork and identity engineeringPurple team validationRed team and adversary emulationsecurity architecture

Exploit Strike LLC is a cybersecurity professional services firm focused on securing infrastructures, systems, networks, and applications. It offers offensive, collaborative, and defensive security services, and its Exploit Shield product hunts credentials, tokens, and configs leaked on public developer platforms such as GitHub and Docker Hub.

adversary simulationleak hunting on developer platformsOSINTpenetration testingpurple teamingred teamingreverse engineeringsecurity program developmentSOC advisoryvCISO consulting