threat hunting

CecureData is a cybersecurity company founded by ex-military professionals with over 25 years of cybersecurity expertise, serving Fortune 500 companies and government agencies. It provides cybersecurity solutions, data protection services, and enterprise security training, including its Lock & Learn Cybersecurity Training Program, with a mission to protect customer data everywhere, every day.

Adversary EmulationCloud securitycontinuous monitoringCyber staffingdata loss preventionincident responseMITRE ATT&CK-based huntingpenetration testingrisk managementsecurity assessmentsthreat intelligencevulnerability assessments

Cerbicore is an information security company whose consultants include former law enforcement officers, intelligence officers, Department of Defense computer security specialists, computer programmers, threat hunters, and published experts. It provides Information Security solutions to Fortune 500 organizations and the U.S. Government, offering strategic consulting, threat hunting, incident response, and training.

Detection engineeringforensicsincident responseprogram developmentstrategic assessmentstable-top exercisestraining

Certus Cybersecurity is a provider of product security services that helps organizations secure their software and hardware, including emerging technologies. It serves Fortune 100 enterprises, global law firms, and high-growth businesses worldwide, pairing deep technical expertise with automation and manual testing.

adversarial testingcloud configuration reviewcloud penetration testingcloud security assessmentcontinuous monitoringdevice design reviewdevice penetration testingfirmware analysishardware security testingmanaged detection and responsepenetration testingprivacy-leakage analysissecure code reviewsecurity trainingthreat modeling

cFocus Software Incorporated is a CMMC Level 2 certified small business established in 2006 that provides software development, cybersecurity, geospatial, cross domain, and IT infrastructure services to federal government agencies. The company integrates AI into its software development lifecycle and supports the full SDLC across cloud, hybrid, and on-prem platforms. It is a Microsoft Gold Certified Partner, AWS Technology Partner, Tenable Partner, and ServiceNow Partner.

AI-integrated software development lifecycleAI/ML modelingapplication design and developmentCDS testing and accreditationCloud, on-prem, and hybrid deploymentsCommon Operating Picture solutionscross domain solution engineering and 24/7 O&MCybersecuritydeployment and maintenanceenterprise GIS integrationFedRAMPFISMAgeospatial information managementHigh Value Asset (HVA) Assessmentsincident responsemodernizationNCDSMO / Raise The Bar complianceRMFsecure coding and code reviews

ClearPro Partners is an SBA-certified HUBZone Small Business Joint Venture between Procentrix, LLC and ClearFocus Technologies, LLC. It combines digital transformation and cybersecurity expertise to secure, modernize, and automate the operational and IT environments of government organizations, serving Defense, Intelligence, and Federal Civilian missions across 40+ organizations.

AI, Data & Automationapplication modernizationcloud infrastructurecloud migrationcybersecurity engineeringdigital modernizationdisaster recoveryincident responseMission resiliencesecurity operationsZero Trust Support

ColorCode Solutions is a service-disabled veteran-owned, minority-owned enterprise technology firm headquartered in Fayetteville, North Carolina. It partners with commercial enterprises and public-sector organizations to design, modernize, secure, automate, and operate mission-critical technology platforms across five engineering practices: Zero Trust Architecture, Compliance Automation, Secure Infrastructure, Data Platform Engineering, and Security Operations.

AI/ML infrastructureAPI integrationCI/CD pipeline hardeningcompliance automationcontainer orchestrationContinuous Control Monitoringcontinuous verificationdata lake and warehouse designDevSecOps pipelinesincident responseinfrastructure as codelegacy modernizationmicrosegmentationPolicy as CodeSIEM and SOAR engineeringSOC buildoutstreaming pipelinesvulnerability managementzero-trust architecture

Corelight provides an AI-powered Open NDR (network detection and response) platform that transforms network data into evidence for threat detection, threat hunting, and incident response. Its multi-layered detection engine fuses threat intelligence, machine learning, behavioral analytics, and expert-tuned signatures, and it offers Agentic Triage for faster investigations. The platform is built on the open-source Zeek standard and integrates with security ecosystems such as Splunk, CrowdStrike, and Microsoft.

agentic triagebehavioral analyticscloud monitoringforensicsmachine learning detectionnetwork detection and responsepacket capturesignature-based detection

Credence Solutions Group, LLC (branded CSG-Cyber) is a cybersecurity-focused firm established by U.S. military veterans and a Service Disabled Veteran Owned Business (SDVOB). It provides end-to-end security solutions including threat detection, incident response, penetration testing, and compliance, helping organizations build secure, scalable, and compliant environments.

AI securitycloud security consultingcompliancefirewall reviewsincident responsepenetration testingsecurity awareness trainingSIEM analysisvCISOvendor risk management

Crogl is a sovereign AI SOC platform that deploys autonomous AI agents to investigate every security alert, hunt threat advisories, and document every action using the customer's own tools, data, and environment. Founded in 2023 to build autonomous agents for security operations, Crogl runs on-premises, in private cloud, or fully air-gapped, with a knowledge graph, AI orchestration layer, and model-agnostic LLM support.

AI orchestrationair-gapped deploymentalert triageautonomous AI agentsfederated searchgoverned auto-remediationknowledge graphon-premises deploymentprivate cloud deploymentSIEM/EDR/ticketing/data lake integrationskill builder

CrowdStrike is a global cybersecurity company offering the AI-native Falcon platform for protecting endpoints, cloud workloads, identities, and data. Its offerings include endpoint security, next-gen identity security, cloud security, SaaS security, AI detection and response, threat intelligence, exposure management, and managed detection and response through Falcon Complete.

AI-powered vulnerability scanningCloud securitycybersecurity consultingEndpoint protectionidentity securityincident responsemanaged detection and responsered team servicesthreat intelligence

CrunchAtlas provides agentic cyber defense and threat intelligence for critical infrastructure across IT and OT environments. Its platform connects AtlasCyber, which detects, investigates, connects cases, and prepares findings for operator review; ClemAI, a built-in cyber professional for investigation, hunting, forensics, and reporting; and PurpleHaze, which proves real attack paths, fixes exposure, and retests the fix. Deployments include cloud, on-premises, and air-gapped.

air-gapped deploymentattack path validationcampaign attributioncloud deploymentdetectionexposure remediation and retestingforensicsinvestigationon-premises deploymentreportingthreat intelligence

Cyber 4 Us is a woman-, minority-, and veteran-owned cybersecurity training and consulting firm based in Beavercreek, OH. It provides government agencies, businesses, and nonprofits with cybersecurity consulting, incident response planning, solution architecture, and educational programs, and offers digital literacy and certification training for communities including students, veterans, seniors, returning citizens, and immigrants.

advisory remediationcertification preparationcompliancecybersecurity consultingdigital forensicsincident response planningpolicy reviewsrisk managementsecurity awareness trainingsolution architecturetechnical assessments

CyberAIDE provides cybersecurity solutions focused on a proactive approach of attacking threats, informing stakeholders, defending against attacks, and collaborative efforts. Its product Codyx monitors systems, assesses threat levels, and takes action. The site notes pages are under construction and information may not be correct.

cloud & memory securityexploit preventionsecurity awareness trainingtheft & code protectionthreat intelligencevulnerability assessmentsvulnerability management

Cyber Command, LLC is a managed IT and cybersecurity provider headquartered in Winter Springs, Florida, serving small and mid-sized businesses across Central Florida with clients nationwide since 2015. It offers 24/7/365 US-based support with real engineers, managed and co-managed IT, cybersecurity, cloud services, and platform engineering for businesses with 10-300+ employees.

24/7 helpdeskAI consultingBusiness Continuitycloud managementcloud migrationCo-Managed ITcomplianceCybersecurityDevOpsmanaged IT servicesplatform engineeringSOC monitoringVoIP

Cybercore International is a cybersecurity and global intelligence firm offering digital executive protection and other services to clients both domestic and international. Its offerings include executive and dignitary protection, residential security, advance and travel security, event security, and tailored cybersecurity services such as penetration testing, threat intelligence, and threat hunting.

dark web discoveryExecutive protectionexposure remediationpenetration testingRisk AssessmentsSOCaaSsocial media monitoringthreat intelligencetraining programs

CyberMetis is a cybersecurity company protecting the critical data and applications of organizations across the globe from known and unknown cyber threats. Its mission is to hunt, investigate and stop cyber threats before they become business disrupting events. It offers risk management programs, MDR, XDR, digital forensics and incident response, and vCISO and security consulting services.

24/7 SOC supportDigital Forensics & Incident ResponseExtended Detection & ResponseIncident Response as a Servicemanaged detection & responseMFA solutions with Zero Trust architectureSecurity audits and assessmentsSecurity consultingThreat suppression within 4 hoursvCISO services

Cyberspatial Inc. develops Teleseer, a network intelligence platform that passively reads network traffic and turns it into a readable map of devices, connections, and dependencies. It is agentless and built for IT, OT, and defense networks, and can be run in a browser with a packet capture, via a continuously capturing sensor, or as a virtual appliance. The company was founded by ex-military, ex-US Cyber Command, and ex-Fortune 500 security and engineering professionals.

agentless network analysisincident responsenetwork forensicsnetwork mappingon-premises sensorsOT network monitoringpacket carving and extractionpassive asset discoveryPCAP analysisvirtual appliance deployment

of page​ Cybersecurity Operations & Incident Response Advanced Persistent Threat (APT) Detection & Threat Hunting Cyber Analytics & Big Data Analytics Artificial Intelligence & Machine Learning for Cyber Defense Cybersecurity Engineering & Architecture Network Security Engineering, Design & Implementation Secure Communications Strategy & Implementation Cloud & Big Data Security (Fed RAMP / DoD SRG IL4–IL6) IT Compliance, Audit & Risk Management (NIST RMF) Governance, Policy & Cyber Advisory Services Computer Forensics & Digital Investigations (e Discovery) Federal / Defense Incident Response Intelligence Analysis & Cyber Threat Intelligence Mobile & Endpoint Security SCADA & Critical Infrastructure Security Security Platform Integration (SIEM, SOAR, EDR, NDR) Cybersecurity Training & Mission Exercises Areas of Expertise: ​ Protecting U.S. government and commercial network infrastructure.

AI-enabled analyticsAPT detectionbig data analyticsCloud securitycontinuous monitoringcybersecurity training and tabletop exercisesdigital forensicsincident responsepenetration testingsecurity engineering and architectureSIEM/SOAR/EDR/NDR integrationvulnerability assessmentszero-trust design

Cybervisure is a Virginia-based cybersecurity and cloud engineering firm serving U.S. Government agencies, state, and private sector clients. The team brings over a decade of experience supporting DHS, DoD, and intelligence community programs at enterprise scale. They are CMMC Level 2 Self-Assessed and NIST SP 800-171 compliant, and have secured 15,000+ endpoints across DHS CISA's enterprise.

asset intelligence & CMDBcloud security posture managementcloud storage and backupfirewall & segmentationidentity & access managementincident responsemanaged detection and responsenetwork security engineeringSIEM engineeringSOC optimizationzero-trust network design

CYBREX delivers cyber, cloud and AI talent and solutions for federal and commercial organizations. Through an AI-enabled consultant network of vetted cyber professionals, it provides managed services, cyber consulting, project-based delivery, and cyber staffing, including cleared professionals for government initiatives.

application securitybackup & disaster recoveryCloud Migration & ModernizationCybersecurityCyber staffingDevSecOpsFinOpsIncident response / SIEMinfrastructure as codeMalware forensicsNetwork engineering & SD-WANpenetration testingSOARSOC engineering & managementvCISO advisory

Cybros, LLC is an SBA-verified Service-Disabled Veteran Owned Small Business (SDVOSB) and Minority Business Enterprise (MBE) delivering Information Security Program Management and modernized Cloud Security solutions to public and commercial sectors through its Cybros Fusion Center, a hybrid MSSP operated in accordance with NIST 800-53.

Cloud securityCyber Range trainingdata loss preventionDevSecOpsincident responsemanaged detection and responsemanaged SIEMpenetration testingSecurity Automation & OrchestrationSecurity Operations Center as a Servicevulnerability management

Cyburity is a Huntsville, Alabama-based cybersecurity, IT, and compliance company founded in 2017. It is a CMMC Level 2 certified MSP and ESP serving the Defense Industrial Base, federal agencies, healthcare providers, and commercial teams, offering managed IT, offensive and defensive cybersecurity, compliance, AI services, and software development.

AI integrationblue teamingclassified systems supportCMMC compliance consultingDevSecOpsdigital forensicsincident responsemanaged ITpenetration testingred teamingSIEM monitoringsoftware developmenttechnology resale

D3 Security is a cybersecurity company that develops Morpheus, an agentic SOC platform that autonomously triages, investigates, and responds across the full alert lifecycle. Its Attack Path Discovery engine traces alerts across identities, endpoints, cloud, and email infrastructure, maps blast radius, and drafts remediation. Every finding is graded by evidence quality (Confirmed, Inferred, or Gap), and the platform offers four autonomy modes with one audit trail per incident.

agentic reasoningattack path discoveryautonomous alert triagecase managementdeterministic playbooksinvestigationmulti-tenant operationsresponse and orchestrationself-healing integrations

DarkWater Associates LLC is a veteran-owned firm providing human-reviewed cyber exposure intelligence for organizations nationwide, licensed private investigations and attorney support in North Carolina, and practical cybersecurity speaking and workshops. It is founder-led by Douglas Peters, a U.S. Air Force Iraq War combat veteran and licensed North Carolina private investigator.

cyber exposure intelligencedigital forensicsevidence preservationincident responselocatesmalware analysisOSINTpublic-record researchspeaking and workshopssurveillancethreat intelligence