STIG compliance

Alaska Northstar Resources (ANR) is an SBA 8(a)-certified subsidiary of Shee Atiká, an Alaska Native Corporation, and a Small Disadvantaged Business. ANR delivers agile, secure IT solutions for government agencies, including cloud architecture, DevSecOps, cybersecurity, and enterprise IT services, serving clients such as the U.S. Air Force, Army, DISA, and USDA.

Agile SDLCapplication migrationApplication ServicesAssessment and Authorization (A&A)automated software testingcloud orchestration and automationCybersecurityDatabase development and migrationdata encryptionDevSecOpsEnterprise Cloud Servicesfirewall managementIDS/IPSnetwork hardeningnetwork servicesRisk Management Framework (RMF)routing and switchingsecurity automationwireless network deployment

Alico Cyber Solutions provides complete integrated cyber and information security services with practical mission centered solutions. Its operationally focused team serves customers in the federal, state, and private sectors, applying a culture of thoroughness, accuracy, vigilance, and efficiency. The company was founded in 2018 and leverages extensive experience in high threat environments.

Active Directory Security Auditconfiguration managemententerprise security architectureethical hackingIncident responseintrusion preventionNetwork Architecture Hardeningoffensive cyber operationspenetration testingRisk Mitigation and Threat Huntingsecurity operations centersystems administrationvulnerability assessments

Cooperstone Solutions designs, secures, and manages mission-ready IT infrastructure for government agencies, defense contractors, and commercial organizations. Based in Alexandria, Virginia, it is a Virginia SWaM Small Business offering Linux and Windows infrastructure, cloud, cybersecurity, automation, and IT consulting services.

Active DirectoryAnsibleAWS migrationsBashcloud architectureGroup PolicyInfrastructure AutomationIT consultingLinux administrationPowerShellsystem hardeningTerraformvulnerability remediationWindows Server administration

Hanalyx builds production-safe infrastructure for the agentic era: rollback-safe primitives, a control plane, and a spec compiler that let teams and AI agents change production Linux without breaking it. Its portfolio consists of three open-source products: OpenWatch (compliance control plane), Kensa (transactional change engine), and Specter (spec compiler). The company is based in Hanover, Maryland and holds SDVOSB, VOSB, and Minority-Owned certifications.

audit-ready signed evidenceautomatic rollbackcontinuous compliance posture monitoringdrift detectionLinux system hardeningspec compilationtransactional configuration management

HarborTech is a multi-discipline technology and business services firm based in Bel Air, MD, serving Baltimore, Harford County, and the greater Mid-Atlantic region. Built by engineers and operators with 12+ years of federal, DoD, and private sector experience, it offers revenue intelligence, government and federal IT consulting, real estate development and acquisition, and materials vendor solutions.

AI-powered revenue analysiscloud architectureDevOpsInfrastructure AutomationMaterials sourcingReal estate development and acquisitionRMF/ATO lifecycle support

IRONEYE LLC is a cybersecurity firm based in Arlington, VA, delivering high-impact results across the full Risk Management Framework (RMF) lifecycle with a lean team of seasoned practitioners. The company serves Civilian, Defense, and Intelligence Community systems, providing security engineering, information assurance, and cyber hygiene services.

ACAS and SCAP scanningCyber hygieneGRC tools (eMASS, Xacta360, Archer)information assuranceRMF lifecycle supportSecure baseline implementation and auditingSecurity EngineeringVulnerability and configuration scanning