vulnerability management

Calyra Tech Systems is a Managed Service Provider (MSP) and IT Infrastructure Integrator based in Raleigh, North Carolina. It delivers secure, scalable, and managed IT environments for organizations across education, healthcare, nonprofit, government, defense, and commercial sectors, combining strategy, support, cybersecurity, and infrastructure under one accountable team.

Backup & Disaster RecoveryCloud & Business ContinuitycommunicationsCompliance Training & Workshopscybersecurity complianceIncident response & recoveryManaged It Servicesnetwork infrastructureRisk Assessment & Mitigationstructured cabling

Certitude Security® provides cybersecurity strategies and services to U.S. businesses, including risk analysis, security frameworks, vulnerability management, incident detection and response, and data backup and recovery. It also offers IT cost containment services and SPOT-Beam® PDF templates to help organizations reduce vendor overhead and reallocate trapped capital to strategic initiatives.

Cybersecuritydata backup and recoveryincident detection and responseIT cost containmentRisk Analysissecurity frameworks

Circlebits Inc. is a cybersecurity partner serving public and private sectors with enterprise-grade security solutions. It provides cybersecurity consultation, cloud security, managed services, GRC, and AI-powered solutions, helping organizations find vulnerabilities before cyber-criminals do and prepare for compliance audits.

Cloud Security Assessmentscompliance and audit readinessdigital forensicsidentity and access managementincident response planningpenetration testingPhishing simulationsrisk assessments and gap analysissecurity awareness trainingZero Trust architecture design

CJEN Inc. is an IT solution integration company based in Dumfries, Virginia. It provides team-based IT solutions including security risk and compliance management, certification and accreditation, independent verification and validation, security operations, network and database security consulting, security architecture design, business process management, cloud computing and virtualization, service-oriented architecture, systems management, enterprise records management, data analytics, and data center storage and migration.

Certification & Accreditationcloud computing and virtualizationData MigrationIndependent verification and validationIT solution integrationpenetration testingsecurity architecture designsecurity operations center

Claron Technical Services is a professional services company helping government and enterprise clients turn complex requirements into secure, reliable technology solutions. Founded in 2011, it is a cleared, certified Woman-Owned Small Business delivering cybersecurity, systems engineering, and IT infrastructure expertise, with experience supporting Department of Defense programs.

Backup, recovery, and continuityCybersecurityinformation assuranceIT governance and risk managementIT infrastructureKubernetes and containerizationNetwork and system monitoringNetwork architecture and implementationregulatory and compliance guidanceRequirements analysis and managementsecurity architecture and engineeringSystems and database managementsystems architecture and designSystems EngineeringSystems Integrationverification and validation

ClouDen Technologies is an SBA-certified 8(a) small business delivering cloud, cybersecurity, and IT modernization services to U.S. federal agencies, educational institutions, and commercial organizations. It designs, implements, and operates secure infrastructure across cloud and on-premises environments, aligned to NIST, FedRAMP, FISMA, and risk-based compliance frameworks, and operates under ISO 9001, ISO/IEC 20000-1, and ISO/IEC 27001 frameworks.

application developmentCloud solutionsCyber securitydeployment automationDevSecOpsEnterprise architectureidentity and access managementInfrastructure monitoringKubernetes ImplementationManagement Servicessecurity compliance assessments

Cloud Protectors is a pure-play cloud security consulting and staffing firm serving government agencies, prime contractors, and enterprise organizations. It delivers security strategy, hands-on engineering, and specialized talent across public, private, multi-cloud, and hybrid environments, including advisory, Zero Trust, FedRAMP and NIST compliance, and staffing through its Talent-as-a-Service (TaaS) model with the CloudShield assessment process. Headquartered in Washington, DC with a branch office in Miami Dade, FL.

Cloud hardening and security baselinescloud security consultingCloud security engineeringCloud security staffing and recruitingCloud threat detection and incident readinessDevSecOps security enablementFedRAMP and regulatory complianceIdentity and Access Management (IAM)Security automation and tooling integrationSIEM, logging, and monitoring configurationZero-Trust implementation

ColorCode Solutions is a service-disabled veteran-owned, minority-owned enterprise technology firm headquartered in Fayetteville, North Carolina. It partners with commercial enterprises and public-sector organizations to design, modernize, secure, automate, and operate mission-critical technology platforms across five engineering practices: Zero Trust Architecture, Compliance Automation, Secure Infrastructure, Data Platform Engineering, and Security Operations.

AI/ML infrastructureAPI integrationCI/CD pipeline hardeningcompliance automationcontainer orchestrationContinuous Control Monitoringcontinuous verificationdata lake and warehouse designDevSecOps pipelinesIncident responseinfrastructure as codelegacy modernizationmicrosegmentationPolicy as CodeSIEM and SOAR engineeringSOC buildoutstreaming pipelinesthreat huntingzero trust architecture

Compass Federal Consulting (CFC) is an information security firm founded in 2011 that serves federal government, higher education, healthcare IT, and private sector clients through risk-based security practices. It provides governance, risk and compliance, security operations, professional services, and cloud services.

cloud security architectureCMMCdata loss preventionFedRAMPFISMA complianceIncident responseISO 2700 Compliancepenetration testingPOA&M managementrisk assessmentSecDevOpsSecurity Control AssessmentSecurity Documentation Designsecurity training

Compliance View is a management consulting firm focused on information security, offering cybersecurity and compliance services through teams of Audit, Compliance, and IT Security professionals. It also provides Pen Testing Reporting Software with features such as internal user management, multiple client management, scan data processing, and customizable reports.

compliance consultingethical hackingpenetration testingreport generation softwareSecurity auditsweb application security assessment

Coravant is a veteran-owned technology consulting firm headquartered in Denver, Colorado, that helps organizations identify, implement, and realize the benefits of technology. Founded by CEO Jeremy Miller, a U.S. Air Force veteran, the company offers strategy, services, and technology resale, serving service providers, financial services, healthcare, retail, and large commercial enterprises. It is certified as a Veteran Owned Business, MBE, and CPUC Certified.

AI advisory and strategyAIOps deploymentAWS cost optimizationAzure patch automationCloud migrationCMMC readinessEvent correlationFinOpsincident managementIP address managementNetwork assessment and designNIST CSF 2.0 gap assessmentObservability & MonitoringOpenTelemetry architecturePen-testingSOC servicesSplunk upgrade and migrationvCISO engagementVMware-to-container transformation

Core4ce is a trusted national security partner that operates with a data mindset, harnessing data to advance R&D initiatives, develop technology solutions, and protect national interests. It works across four disciplines – cyber, analytics, engineering, and mission solutions – supporting warfighters and intelligence officers with tools, data, and operational support. Core4ce is a federal contractor specializing in defense technology solutions and professional services.

AI/MLcloud servicesComputer modeling and simulationCyber application security assessmentsCybersecurity Service Provider (CSSP) supportData engineeringdata exploitationDevSecOpsenterprise ITMission support and lifecycle managementNetwork architecture and engineeringNetwork vulnerability assessmentsresearch and developmentZero Trust cybersecurity assessments

Core Managed Compliance offers a comprehensive suite of regulatory compliance services designed to help businesses meet necessary regulatory standards efficiently and effectively. Their team of experts guides organizations through the complexities of compliance, providing support so clients can stay focused on core operations.

cyber risk assessmentdark web monitoringEnterprise risk managementGRC managementnetwork securitypatch managementpenetration testingRegulatory ComplianceSaaS securitySASE architecturesecurity awareness trainingSIEM and SOC servicesvCISO services

Creative Visions, LLC is a cybersecurity-focused small business supporting federal agencies, teaming partners, and commercial organizations with practical solutions for complex security environments. It integrates directly into customer environments to operate, maintain, and improve cybersecurity capabilities across on-premises, hybrid, and cloud infrastructures. It holds SBA 8(a), WOSB, Top Secret FCL, and GSA MAS 54151HACS designations.

cloud and identity securitycontinuous monitoringFISMA reportingIncident responseprogram governance and PMO supportRMF and authorization supportsecurity control assessmentsSecurity EngineeringSIEM engineeringSOC supportthreat analysisZero Trust-aligned modernization

Crest Security Assurance is a cybersecurity firm providing security services for federal agencies and commercial organizations, covering the full cybersecurity lifecycle from strategy and policy to assessment, authorization, continuous monitoring, and 24x7x365 defense operations. It is an ISO 9001:2015, CMMI-SVC 2, and 8(a) certified small business.

AI/ML GovernanceBlue Team Assessmentscloud securityCyber Threat Emulationdigital forensicsidentity and access managementIncident responseInsider Threat analysisnetwork forensicspenetration testingpolicy developmentred team operationsRegulatory Audit SupportRisk Management Framework (RMF) supportSecurity Assessment and Authorization (A&A)Security EngineeringSIEM engineeringSOC operationszero trust

Critical Start provides managed detection and response (MDR) services with 24x7x365 monitoring, investigation, and response from a US-based SOC. Founded in 2012 by three security experts, the company combines AI-accelerated triage with human-led investigation and backs response times with contractual SLAs. Its CORR platform provides full transparency into every alert, investigation, and response.

24/7/365 monitoringAI-accelerated triagedigital forensicshuman-led investigationIncident responsemanaged detection and responseMicrosoft Security deploymentpenetration testingSIEM managementtabletop exercisesthreat detection

CyberAIDE provides cybersecurity solutions focused on a proactive approach of attacking threats, informing stakeholders, defending against attacks, and collaborative efforts. Its product Codyx monitors systems, assesses threat levels, and takes action. The site notes pages are under construction and information may not be correct.

cloud & memory securityexploit preventionsecurity awareness trainingtheft & code protectionthreat huntingthreat intelligencevulnerability assessments

CyberBlip is an IT consulting firm providing managed IT services, remote IT support, cybersecurity consulting, and compliance-aligned system engineering for small and mid-sized businesses. Its environments align with NIST CSF, ISO 27001, CIS Controls, HIPAA, SOC 2, PCI-DSS, and CMMC standards, with dedicated coverage across Miami-Dade and Broward.

backup and disaster recoverybusiness continuity planningCloud infrastructure designCloud migrationcompliance alignmentCybersecurity consultingendpoint protectionhelpdesk servicesManaged It ServicesMicrosoft 365 administrationnetwork administrationpatch managementRemote IT supportSIEM monitoring

CyberCare is a professional services organization supporting government and commercial clients through expertise-driven delivery and outcome-focused services. Through CyberCare Professionals and CyberCare Services, it combines workforce enablement, delivery, and advisory capabilities across technical, operational, and risk-aware environments. CyberCare Professionals is a Woman-Owned Small Business (WOSB) serving federal, state, local government, and commercial sectors.

business continuity and disaster recovery planningCybersecurityDigital transformationIncident responseIT servicesManaged ServicesManufacturing and engineeringoperations and logisticsRFI and RFP strategy and response managementstaffing and recruitingSystems IntegrationTechnology platform administrationthreat analysistraining and change management

CyberEdge Security Services is a Service-Disabled Veteran-Owned Small Business (SDVOSB) delivering mission-focused professional and technology services to federal agencies, military organizations, state governments, and local municipalities. The company provides administrative and professional services, cybersecurity and risk management, information technology services, management consulting, and program and project management.

Administrative supportcybersecurity program supportdocument managementhuman resources supportincident response supportlogistics and operational supportManagement consultingNIST and CMMC alignmentprogram and project managementRecords managementrisk assessmentssecurity awareness trainingSecurity compliance and governancetraining coordinationworkforce management

Cyber Husky is an IT service provider founded in 2021 and headquartered in Charleston, SC, with employees, clients, and operations across the United States. It runs IT and security for businesses with 5 to 300 users and delivers Azure, Microsoft 365, CMMC, and AI projects. It is a Microsoft Solutions Partner in Modern Work, Security, Infrastructure, and Data & AI, and its engineers hold Microsoft, CompTIA, and CMMC credentials.

AI consultingAzure engineeringcloud managementcompliance readinessCybersecurityhelpdesk supportInfrastructure and endpoint monitoringIntune/Autopilotmanaged detection & responseManaged It ServicesMicrosoft 365 migrationMXDRpatch managementvCTO and vCISO planning

Cybernete Security Group is a veteran-owned cybersecurity and risk management consulting firm based in California. Founded by a team of seasoned cybersecurity professionals, it provides risk management, vulnerability management, incident response, security awareness training, and Governance, Risk, and Compliance (GRC) services, including AI and privacy compliance, NIST Cybersecurity Framework transitions, and incident response playbooks.

compliance consultingIncident responserisk managementsecure cloud solutionssecurity awareness training

Cyberneza is an Orlando, Florida-based, veteran-owned small business providing federal and commercial cybersecurity services. It helps defense contractors, SaaS companies, and regulated organizations turn cybersecurity requirements into practical programs, technical designs, implementation guidance, and measurable security improvements, backed by 29+ years of federal and enterprise experience. It is SAM.gov registered and SBA-certified veteran-owned.

AI risk and governanceATO processesCMMC readinessControl designCUI scopingevidence reviewGap assessmentsimplementation guidanceIncident responseISO 27001 readinessISO/IEC 42001 readinessmanaged securityNIST 800-171 complianceNIST RMFsecurity architectureSOC 2 readinesszero trust

CyberRazer is a cybersecurity firm founded by a small team of cybersecurity professionals, now a diverse group of experts. It provides tailored cybersecurity solutions for organizations without in-house security, including SMBs, FinTech, EdTech, healthcare, legal, military and government contracting. Its philosophy is that security is a process, not a product, and it emphasizes proactive, lasting resilience.

CERT tabletop exercisesCompliance and certification readinessDetection tuning and automationDLP & UBA integrationidentity & access managementincident managementmanaged security servicesmanaged SIEMMDR/EDRNetwork security architecture reviewRemote security managementrisk assessmentsvCISO advisory