FedRAMP

Applied Sciences & Information Systems, Inc. provides custom digital solutions that advance clients' missions, serving as a partner for the country's defense. The company builds stable software tailored to clients' unique needs and circumstances, working with utility, federal, state, and local government, and non-profit clients.

enterprise systemsfacilities supportMobile Applicationssoftware developmentweb applications

Black Rock Engineering and Technology is a certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and Minority Owned Business that helps government agencies modernize critical infrastructure without risking operations, security, or compliance. The company provides engineering and professional services to the DoD and commercial markets, with expertise in STIG, Zero Trust, NIST 800-171, DFARS 7012, and FedRAMP. It was the first company awarded a 3-year ATO for an ICS system.

authorization (ATO)compliance assessmentCyber securityDFARS 7012 alignmentDigital modernizationNetwork engineeringNIST 800-171 alignmentsoftware engineeringSTIG solutionszero trust

Capitol Atlas Strategies is a VOSB/SDVOSB cybersecurity firm specializing in GRC, risk management, CMMC, FISMA, and FedRAMP for federal agencies and defense contractors.

CMMCCybersecurityFISMAGRCrisk management

cFocus Software Incorporated is a CMMC Level 2 certified small business established in 2006 that provides software development, cybersecurity, geospatial, cross domain, and IT infrastructure services to federal government agencies. The company integrates AI into its software development lifecycle and supports the full SDLC across cloud, hybrid, and on-prem platforms. It is a Microsoft Gold Certified Partner, AWS Technology Partner, Tenable Partner, and ServiceNow Partner.

AI-integrated software development lifecycleAI/ML modelingapplication design and developmentCDS testing and accreditationCloud, on-prem, and hybrid deploymentsCommon Operating Picture solutionscross domain solution engineering and 24/7 O&MCybersecuritydeployment and maintenanceenterprise GIS integrationFISMAgeospatial information managementHigh Value Asset (HVA) AssessmentsIncident responsemodernizationNCDSMO / Raise The Bar complianceRMFsecure coding and code reviewsthreat hunting

Compass Federal Consulting (CFC) is an information security firm founded in 2011 that serves federal government, higher education, healthcare IT, and private sector clients through risk-based security practices. It provides governance, risk and compliance, security operations, professional services, and cloud services.

cloud security architectureCMMCdata loss preventionFISMA complianceIncident responseISO 2700 Compliancepenetration testingPOA&M managementrisk assessmentSecDevOpsSecurity Control AssessmentSecurity Documentation Designsecurity trainingvulnerability management

CybizSecurity Consulting is an SDVOSB and minority-owned cybersecurity consulting firm based in Orlando, FL, specializing in federal compliance and GRC. It focuses on FedRAMP, StateRAMP, CMMC, NIST RMF, and AI risk management, and provides expert vCISO services for government contractors and enterprise.

AI Risk ManagementCMMCCybersecurity consultingfederal complianceGRCNIST RMFStateRAMPvCISO services

Digital Infuzion (DIFZ) builds enterprise systems and custom informatics solutions that help clients manage, mine, and make sense of data. Founded by Hemant Virkar after his career at NIH, the company began in healthcare informatics and now serves government, commercial, non-profit, and standards organizations with digital transformation, data science, cybersecurity, and digital health services.

Agile DevSecOpsAI & Deep LearningBI & Data Analysisbusiness process engineeringclinical informaticscloud securitycloud servicesData engineeringdigital analyticsEnterprise architectureenterprise securityHealth ITIT PlanningIT strategyOpen Sourceprogram managementsurveillance

FedScale is a trusted advisor of mission-critical IT, cloud, and digital transformation services to U.S. federal agencies. Founded in 2013, the company delivers solutions across civilian and defense environments, with expertise spanning operations and maintenance, system modernization, and emerging technologies. FedScale is CMMI SVC/3 and ISO-certified and serves agencies including USDA, DOI, and DHS.

ATOCloud migrationcloud modernizationCybersecuritydigitizationeDiscoveryFOIAoperational supportprogram managementRecords managementtraining

Kreative Technologies, LLC is a federal IT firm headquartered in Fairfax, Virginia, founded in 2013. It specializes in healthcare IT, cybersecurity, systems engineering, and enterprise modernization for federal agencies including the DoD, Defense Health Agency, VA, and civilian agencies. The company is CMMI ML3 (DEV/SVC) appraised and ISO 9001, ISO 27001, and ISO 20000-1 certified.

A&Aagile developmentAI integrationsAWS GovCloudAzure GovernmentCI/CDCloud Migrationscontinuous monitoringCybersecurityDevSecOpsmachine learningMicroservicesOpenText implementationpenetration testingPKIRMFSecure software developmentServiceNow GRCsystem integration

KSApex LLC is a Virginia-based federal IT prime contractor founded in 2012 and prime since 2019, serving federal agencies with AI-powered, cloud-agnostic, security-first solutions. It is the home of AEGIS, a proprietary AI Governance Framework, and is Virginia SWaM certified as a Small, Women-owned, and Minority-owned Business. The company reports zero contract failures and holds GSA MAS contract 47QTCA19D00FT (CAGE 6XAG3).

AI governancebig data pipelines and analyticscloud infrastructure (Azure, AWS, GCP)CMMCcustom application developmentCybersecurityDevSecOps and CI/CDIT operations and helpdesklow-code modernizationRMF/ATOSection 508 accessibilityZero Trust readiness