FedRAMP 3PAO assessments

COACT is a Service Disabled Veteran Owned Small Business founded in 1990 that provides cybersecurity and compliance services for government and commercial clients. It is accredited as a FedRAMP 3PAO and GovRAMP 3PAO and operates an ISO 9001:2015 quality system. Services include compliance support for FISMA, FedRAMP, GovRAMP, LADMF, NIST SP 800-171, and CMMC, along with penetration testing, software development, and operational support.

ACAB assessments for LADMFcontinuous monitoringDocumentation developmentgap analysisGovRAMP 3PAO assessmentspenetration testingRed Teamingrisk assessmentsecurity engineering and control implementationsocial engineering testingsoftware developmentSystem Administrationvulnerability assessments

Coalfire Federal provides public sector and private companies with cybersecurity expertise, specializing in CMMC advisory and assessment services as an authorized C3PAO, and FedRAMP and FISMA ATO services as a 3PAO. Formed in 2017 to manage federal government cybersecurity services inherited through Veris Group, it has provided cybersecurity services for nearly 20 years.

C3PAO assessmentsCMMC assessmentsCUI boundary analysiscyber automation, engineering, and orchestrationcyber program management and operationsDoD Impact Level 6 assessmentsFISMA ATOgap analysismock assessmentspenetration testingremediation supportrisk management and compliancesecurity compliance and advisoryvulnerability assessments

Karthik Consulting (KC) is a government contracting firm founded in 2008 that provides cybersecurity, agile software development, AWS cloud services, and IT service and program management to federal agencies including the Department of Defense and Federal Civilian Agencies. It is a DOD Cleared Facility with a DCAA-approved accounting system and holds numerous prime contract vehicles.

agile software developmentAWS GovCloud operations and maintenanceCloud security architecture review, design, and implementationCybersecuritydatabase administrationdatacenter operationsDevSecOpsEnterprise data warehouse designLegacy Application ModernizationPublic Key Infrastructure (PKI) implementationSIPRnet/NIPRnet network administration