penetration testing

Breault Research Organization (BRO) provides optical engineering, software, sensing, data analytics, and cybersecurity solutions. Founded by Robert Breault, BRO has held design and analysis roles for programs including the Hubble Space Telescope, ISO, GOES, XMM, and LIGO, and offers optical engineering services, optical software, unmanned systems, and cyber security assessment and program management.

blue teamingCybersecurity AssessmentData Analyticsillumination systems designoptical engineeringoptical systems engineeringprototypingRed Teamingsoftware engineeringsource modelingstray light analysis

BRETT LLC is a Service Disabled Veteran Owned Small Business (SDVOSB) owned by Lloyd George Brett, who serves as Chief Executive Officer. The company provides high-technology consulting to the Federal Government, specializing in technical services in systems engineering, testing, sensor/system evaluations, modeling/simulation and proto-typing. It is an information technology solutions and system/software engineering company with experience in engineering, development, implementation, testing, and full life-cycle support of custom and commercialized syste

Certification and accreditationcounter-IED supportcyber technical trainingEW operational supportForensic investigationsmodeling and simulationnet-centric data interoperabilitynetwork engineering design, development and integrationnetwork security and information assuranceprototypingsoftware engineeringSystems Engineeringtesting and evaluationVulnerability assessment

Briarcrest Solutions LLC is a service-disabled veteran-owned small business providing systems engineering, cybersecurity consulting, and assessment services to government and commercial organizations. The firm works across the system lifecycle, supporting design and integration, security program development, and independent assessments, and works as a prime or subcontractor.

audit readiness and evidence preparationCMMC readiness and gap analysisData engineeringincident response planningInterface DesignmodernizationPipeline developmentrisk assessmentRisk Management Framework and ATO supportsecurity architecture and design reviewSecurity Control Assessmentsecurity program developmentSystems EngineeringSystems Integrationtabletop exercisesthird party and supply chain reviewVulnerability assessment

Brightline Solutions delivers enterprise-grade software engineering, cloud development, and AI-enabled automation to government clients. Founded after its founder led large-scale software initiatives at Amazon and other technology firms, the company aims to bring enterprise-level quality and modern engineering practices to all levels of government. It is located in Oklahoma City, OK and serves clients nationwide.

Agile/SAFe process coachingAI workflow orchestrationautomated reportingBusiness dashboardsCI/CD pipelinesCloud optimization and migrationCustom process automationData analysis and model integrationData pipeline implementationFull-stack web and platform developmentInfrastructure as Code (IaC)legacy modernizationLLM-powered automationSecure code analysisSecurity auditstechnical architecture guidancethreat modeling

Bugcrowd is a crowdsourced cybersecurity company that teams with elite security researchers and pentesters to reduce risk and improve security ROI through bug bounty, penetration testing, and vulnerability disclosure programs. Its platform combines human expertise with AI, including Savant, an AI strategy for preemptive security, and CrowdMatch technology for matching talent to engagements.

agentic pentestingAI-powered triageattack surface managementbug bountycrowdsourced security testingmanaged triageRed Teamingvulnerability disclosure

Business Operational Concepts (BOC) is an IT systems integrator and managed service provider that helps organizations modernize, secure, and manage their IT environments with 24/7 support. BOC serves federal, local and state government, Tribal enterprises, academic institutions, non-profits, and commercial clients, and is an SBA-certified Women-Owned Small Business (WOSB) with 18+ years in business.

Cloud migrationCybersecuritydatacenter operationsendpoint engineeringIncident responseIT asset managementMicrosoft 365 and Azurenetwork operationsprogram and project managementservice desk supportsoftware license managementTechnical Writingvirtualizationzero trust architecture

Contact One Communications, Inc. (C1C) is a worldwide systems integration company established in 2000, providing Information Technology services including Engineering and Installation (E&I), Operations and Maintenance (O&M), and Force Protection in Cyber Security and Information Assurance, Perimeter Security, and Telecommunications Infrastructure. Headquartered in Jacksonville, Florida, with offices in the greater DC area and Europe, it supports DoD and NATO globally. It is a veteran-owned small business.

CybersecurityDevOpsDevSecOpsengineering and installationICT engineeringNetwork engineeringoperations and maintenanceproject managementsite surveysystem engineeringSystems Integrationtranslation and interpretationvulnerability testing

C2Engineer, Inc. is a minority-owned 8(a) certified small business offering Cyber Engineering and Computer Services to government and commercial clients. It provides Cyber Security, Information Technology and Healthcare solutions to the DOD, Federal, and Commercial markets, with offices in San Antonio, TX, Ellsworth, SD, and the Anderson AFB, Guam area.

Database design and managementfirewall solutionshardware design, installation, maintenance and operator trainingHelp desk supportinformation security policy developmentinternet/web site developmentlegacy systems application support and migrationnetwork administrationnetwork intrusion detection and preventionRisk Management FrameworkSystems Integrationvideo teleconferencing support

C3 Complete is an award-winning technology consultancy headquartered in Delray Beach, Florida. Since 2009, C3 has delivered relationship-focused, outcome-driven technology solutions to clients throughout North America, specializing in Technology, Telecom & Security. It is independently owned and serves industries including financial services, legal, accounting, healthcare, government, and education.

24x7 help deskcloud servicesConnectivityinformation securityManaged ServicesNetwork engineeringpatch managementremote network monitoringSD-WANSIP trunkingVoice & collaboration

C3 Integrated Solutions provides IT, cybersecurity, and compliance services for the Defense Industrial Base and other federal contractors, including CMMC compliance solutions (C3 Command, C3 Catalyst, C3's CMMC Ready Program), managed IT services (C3 Core), and Microsoft 365 GCC/GCC High deployment and migration.

Azure Government Cloud deploymentbackup and disaster recoveryCMMC compliance advisorycybersecurity monitoringHelp desk supportIncident responseManaged It ServicesMicrosoft 365 GCC/GCC High migrationSecurity Operations Center (SOC)vulnerability management

C3IO specializes in security consulting services with a focus on counterintelligence. The company offers counterintelligence consulting, security assessments, risk management, and training and awareness programs to help organizations protect against espionage, insider threats, and other intelligence threats.

continuous monitoringIncident responserisk assessmentssecurity trainingvulnerability assessments

The Cactus Group is a cybersecurity and technology firm focused on practical execution in regulated, high-trust, and mission-driven environments. It combines hands-on technical work, compliance experience, and purpose-built technology to help organizations solve complex problems. It serves government and defense, regulated and high-trust organizations, growing businesses, and primes and technology teams.

AI-enabled solutionsATO and authorization readinesscompliance and framework readinesscontrol implementationcustom application developmentIncident responseprocess optimizationSystems Integrationtechnical assuranceVulnerability assessmentworkflow automation

CadillacTech Services was formed in 2018 and serves the cybersecurity and technology management needs of the government and private sectors. It provides IT consulting and managed solutions, including cybersecurity, endpoint protection, IT infrastructure management, vCIO/vCTO IT leadership, government consulting, and public/private cloud architecture and hosting. Its teams are staffed 24x7 and it employs 100% US citizens.

backupscloud architecture and hostingdiligent monitoringendpoint protectionImpact analysisIT infrastructure managementITSM ticketingnetwork encryptionremote supportrisk/threat assessmentssystems and configuration analysisvCIO/vCTO IT leadershipvulnerability scanning

Cadre is a cybersecurity advisory and consulting firm that has guided cybersecurity decisions for 25+ years. It assesses environments to find exposures, trains teams to recognize threats, tests defenses, quantifies risk, and recommends tailored technology solutions. Services range from hands-on to advisory, including assessments, professional services, security awareness training, and rapid diagnostic and resolution for breaches or incidents.

Check Point trainingcompliance assessmentsIncident responseproduct implementation and tuningsecurity and network architecture designsecurity assessmentssecurity awareness trainingSecurity consultingvulnerability assessments

Calance is a global IT services firm providing solutions in Gen AI, Business Intelligence, Data Science, Application Development & DevOps, Robotic Process Automation (RPA), Infrastructure, Cybersecurity, Microsoft technologies and IT staffing. Operating in the United States, Canada and India, Calance helps clients bring their ideas to life as a managed IT service provider.

application developmentbusiness intelligenceCloud migrationCybersecurityData ScienceDevOpsIT help deskIT staffingmachine learningManaged It Servicesoffshore outsourcingrobotic process automationVulnerability assessmentZero Trust security

ASM Educational Center, Inc. (ASM) is a family-owned and operated business based in Rockville, Maryland, in the Greater Washington DC Metropolitan Area. For the past 34 years it has served the Training (IT, Technical, Management, and Human Capital) and Consulting needs of clients from around the world. It is a CompTIA Partner Award Winner (2018) and operates an Authorized Testing Center.

authorized testing centercareer trainingcorporate trainingcustomized curriculumgovernment traininginstructor-led trainingonline self-paced trainingon-site trainingvirtual instructor-led trainingvulnerability assessmentsweb application testingWireless Security Assessments

Cambium Data is a Navy veteran-owned IT company founded in June 2009 and based in Omaha, Nebraska, serving Omaha and Lincoln businesses. Owner Tony Underwood has over three decades of experience in IT. The company provides managed IT, cybersecurity, networking, cloud services, phone systems, and AI integration from one local team.

AI integrationAzure hostingAzure Virtual Desktopbackup and disaster recoverybusiness phone systemscablingcloud and Microsoft 365 administrationCybersecurityhelp deskmanaged ITnetwork supportsecurity camera installationvirtualization

Canaan Technology provides proactive business IT services with expertise in Microsoft 365 cloud services, cybersecurity incident response and risk assessment, business continuity, data protection, AI governance, and IT compliance. They operate a 24x7x365 Security Operations Center (SOC) with Managed Detection and Response (MDR) and serve clients in Connecticut, New York, and Florida.

24/7 Security Operations Center (SOC)AI governancecable certificationCloud migrationCybersecuritydigital forensicshelpdesk supportManaged Detection and Response (MDR)Managed It Servicesnetwork designVLAN segmentation

Canfield CyberDefense Group (CCG), legally Canfield Consulting Group, LLC, is a Women-Owned Small Business and SBA 8(a) certified company founded January 1, 2013. CCG develops CheckMate, a self-contained cyber-defense security appliance powered by Phen.AI cognitive learning artificial intelligence, providing Zero Trust monitoring, threat detection, and automated response.

automated response and mitigationbehavioral analyticscognitive learning artificial intelligencecybersecurity trainingdeep packet inspectionforensic analysismachine learningtechnical supportthreat huntingvulnerability scanningZero Trust monitoring

Capitol Communications, Inc. is a Cheyenne, Wyoming-based technology managed service provider with more than 20 years in the industry. It provides IT services, cybersecurity, network systems, phone systems, security systems, and structured cabling for businesses of all sizes, and offers Partner Services Plus (PSP) and Technical Service Partner (TSP) programs.

cloud servicescomputer repair and maintenanceCybersecurityhelp desk and tech supportincident response planningIT managed servicesnetwork managementNOCphone system managementstructured cablingvideo conferencingVulnerability assessment

Capstone Security is an independent information security consulting firm founded in 2000. For more than twenty-five years it has helped clients protect critical data, harden applications, maintain compliance, and reduce overall risk, serving federal agencies and enterprises across industries including healthcare, financial services, retail, energy, technology, and hospitality. Every engagement is senior-led, with no products sold and no vendor commissions.

CI/CD pipeline securitycloud architectureCloud migrationcontainer & Kubernetes securitycontrol reviewsgap analysisincident response supportinfrastructure as code securitypolicy developmentrisk assessmentsecrets managementsecure code reviewsecurity awareness trainingsocial engineeringSystems Integrationthreat modelingVulnerability assessmentwireless security assessment

Carbajal Analytics LLC was created by Dr. Carrie Carbajal, a professional with 15+ years of experience in government contracting, research and development, statistical analysis, digital signal processing engineering (DSP), acquisition and contract management, and human capital management. The company offers network engineering, digital signal processing, research and development, human capital management, and consulting services, and sells RF/Baseband software-based synthetic signal generator applications.

Artificial Intelligenceconsultingdigital signal processingfederal contractingFPGAhuman capital managementmachine learningNetwork engineeringnetwork securityresearch and developmentSDR-based methodsstatistical analysis

Carson Solutions is an IT services and cybersecurity firm with over 25 years of experience delivering quality IT services to Federal, State, and Local agencies as well as commercial customers. Services span planning, design, management, and maintenance of information technology, including systems administration, help desk, project management, and engineering solutions.

automationincident response and continuity planningIT staff augmentationorchestrationproject and program managementsecurity and vulnerability assessmentsstorage area network engineeringvirtualization

CAS Severn is an IT solutions provider founded in 1978 that delivers IT transformation, cybersecurity, and data resilience solutions for clients in the Public Sector, Healthcare, and Financial Services industries. The company offers consulting, managed services, Zero Trust security, hybrid cloud transformation, and advanced computing and data management.

application developmentCloud transformationCybersecurity consultingdata center move servicesHigh Performance Computing (HPC)IT staff augmentationManaged Servicesphishing testingproject managementsoftware integrationVulnerability assessment