vulnerability management

Derivative Technology provides intelligent information security services, helping clients convert security challenges into business benefits. The company serves clients of all sizes, focusing on information security governance assessment and program planning, penetration testing and vulnerability management, network security architecture design and assessment, infrastructure operations and risk assessment, business process re-engineering and automation, information asset and intellectual property protection, and business continuity and disaster recovery.

Business continuity and disaster recoverybusiness process re-engineeringNetwork security architecture designpenetration testingprogram planningrisk assessmentSecurity governance assessment

Dice Defensive Technologies (DDT) is a veteran-led, Service-Disabled Veteran-owned cybersecurity and information technology services company based in Colorado Springs, CO. It delivers cybersecurity solutions, managed IT services, systems engineering, software development, cloud computing, and management consulting to federal, state, and local government agencies and private sector clients. Its core work is taking DoD assets from deauthorization (DATO) back to Authority to Operate (ATO) and keeping them approved through continuous monitoring.

AI/LLM integrationcloud computingcontinuous monitoringDefensive Cyber OperationsIAVM/IAVB responseNIST RMFpenetration testingRAG applicationsred team simulationSecure software developmentSTIG-based remediationSystems Engineeringthreat huntingworkflow automation

Digital Consultants, LLC is an Alexandria, VA-based IT and cybersecurity services company founded in 2006 with a mission of "Leading with our People." It delivers end-to-end IT, cybersecurity, audiovisual engineering, wireless communications, data management, and training solutions to federal agencies and enterprise clients. The company holds ISO 9001:2015 certification and CMMI Level 3 appraisal for Services, and achieved CMMC Level 2 self-assessment.

audiovisual engineering and integrationCloud migrationCybersecuritydata architecture and visualizationIT operationsRMF compliancetraining and instructional systems designVideo Teleconferencingwireless communications

Digital Hands is a full-service managed security services provider (MSSP) delivering Unified Security Posture Management (USPM). For two decades it has run a 24/7 US-based SOC and NOC, offering managed security operations, managed infrastructure, and risk advisory services built around four USPM pillars: Identity Defense, AI Security Posture, Cloud/SaaS & Data, and Threat Exposure.

24/7 US-based SOC & NOCAI security posture managementcloud and SaaS posture managementfirewall managementidentity defenseManaged EDRmanaged security operationsmanaged SIEMpatch managementrisk advisorySD-WAN transformationsecurity posture assessmentsThreat Exposure Management

Digital Reign is a veteran-owned cybersecurity and IT infrastructure company based in Lowell, Massachusetts. It provides end-to-end cybersecurity, infrastructure support, compliance, and cloud services, and is also a value-added reseller of enterprise hardware, software, and licensing. It additionally offers fingerprinting services, including Live Scan and Ink Fingerprinting, and is an authorized IDEMIA enrollment center.

asset taggingCloud migrationcompliance auditscontinuous monitoringcyber awareness trainingdeploymentIDEMIA enrollmentimagingink fingerprintingIT helpdeskITIL/DevOpslive scan fingerprintingpenetration testingpre-configurationservers & databases maintenancestagingsystem upgrades

Diversicom is a managed IT, cybersecurity, and AI partner for regulated industries, headquartered in Tampa, Florida, with staff in four states and clients coast to coast. The company has served regulated industries for over 20 years, since 2004, and offers managed IT support, cybersecurity, backup and recovery, cloud hosting, and AI and data services under one team and one monthly bill.

24/7 SOC monitoringAI app deploymentAI consulting and workflow automationAzure and hybrid cloud migrationsbackup and disaster recoverycloud hostingdark web monitoringdata recoverydevice and endpoint managementEDRemail securitylive business dashboardsmanaged IT supportphishing trainingvCIO roadmapvendor management

Dominion Security Partners is an enterprise cybersecurity firm headquartered in Richmond, Virginia, serving clients throughout the Mid-Atlantic and Southeast. Its client base includes Fortune 500 companies, large enterprises, SMBs, and federal, state, and local governments. The firm offers penetration testing, risk assessments, cybersecurity consulting, managed security services, and GRC SaaS platforms, and reports 100+ assessments completed, a 94% client retention rate, and 0 post-engagement breaches.

24/7 SOC monitoringCloud Security Posture Assessmentcompliance readiness assessmentCybersecurity consultingEndpoint detection and response (EDR) managementGRC platform deployment and managementmanaged security servicesM&A security due diligencepenetration testingred team operationsrisk assessmentsSecurity architecture reviewSIEM management and tuningSocial engineering and phishing simulationsthreat detection and incident responsevirtual CISO services

Dox Electronics provides IT support, cybersecurity, and compliance consulting services based in Rochester, New York, serving manufacturing, defense, finance, healthcare, education, and government sectors. With more than 40 years of experience, Dox offers penetration testing, security assessments, compliance audits, cloud services, and managed IT support.

Cloud migrationcompliance auditsfirewall configurationintrusion preventionIT consultingmanaged cloud servicespenetration testingsecurity assessmentsSIEMVPN solutions

Duffy Compliance is a Mid-Atlantic cybersecurity and compliance consulting firm based in Maryland, serving companies nationwide. It provides proactive cybersecurity compliance programs for IT government contractors, including CMMC compliance, fractional CISO and fractional compliance officer services, and assessments. The firm has been helping IT contractors stay ahead of government requirements for more than 11 years and has worked with NIST 800-171 since its inception.

architecture reviewsassessmentsCMMC compliancecontinuous monitoringcybersecurity compliance consultingfractional CISO servicesfractional compliance officer servicesincident response planningsecurity testing

Dynamic Government Resources, LLC (DGR) is an IT and management solutions provider serving federal government clients, specializing in integrating emerging technologies, enabling automation, and developing scalable Agile solutions. DGR is a joint venture between BDR Solutions, LLC and Favor TechConsulting, LLC, and is a CVE-verified SDVOSB, HUBZone, and 8(a) Small Business.

Advanced analyticsAgile coachingbig databusiness intelligenceCloud migrationcyber strategydatabase administrationdata center consolidationData MigrationDocument ConversionEnterprise Infrastructureidentity and access managementIT service managementprogram managementRecords managementsoftware developmentSystem Administrationtelecommunications supportweb design

Dynexaryn Infrastructure Group, LLC is a veteran-owned IT consulting firm delivering secure, scalable infrastructure solutions for federal, defense, and commercial clients with mission-critical requirements. The firm specializes in network architecture, cybersecurity engineering, and cloud infrastructure, designing solutions that combine technology with proven security practices for complex environments requiring reliability, security, and performance.

cloud architecture, deployment, and managementcybersecurity engineeringLegacy system modernizationnetwork architecture and designsecurity implementation and monitoringThreat assessment

East Bay is a service-disabled veteran-owned small business (SDVOSB) founded in 2002 that specializes in enterprise network modernization and data integrity solutions. It delivers IT support services and law enforcement operations consulting to local, state, and federal agencies, and maintains a Top Secret facility clearance. Its mission-first approach serves government agencies and enterprises in their digital transformation journeys.

Agile & DevOpsbusiness intelligencecomputer systems designcontinuous monitoringcustom programmingdata governancedata integrationData ScienceIncident responseManagement consultingPMO supportsecurity architecturesecurity operations center

Echelon Risk + Cyber is an award-winning risk and cybersecurity consulting firm providing vCISO and MSSP leadership for mid-market organizations, aligned with compliance across regulated industries. The firm offers managed security services, offensive security and adversary simulation, defensive security and hardening, risk advisory and GRC, and AI risk and security, serving industries including financial services, higher education, healthcare, technology and SaaS, and the Defense Industrial Base.

AI governanceBusiness continuity and disaster recoveryCompliance Readiness AssessmentsCybersecurity awareness trainingGRCincident response planningmanaged security servicespenetration testingpurple teamingRed Teamingrisk assessmentsSecurity Team as a Servicetabletop exercisesthreat huntingvCISO

EDG Solutions is a veteran-led cybersecurity and IT services company based in South Carolina, founded by Ernest D. Greene. It helps small businesses protect their systems with practical, reliable cybersecurity and IT support, including vulnerability management, endpoint security, and secure IT operations, delivered without unnecessary complexity.

compliance readiness supportendpoint securityoperational troubleshootingpolicy and control reviewsremediation tracking and reportingrisk identification and prioritizationsecure IT configurationsecurity posture assessmentssystem hardeningvulnerability scanning and analysis

EIST LLC (Excellence Is Standard Technology LLC) is a Washington, DC–based IT consulting and reseller firm. It is HUBZone-certified, Minority-Owned, and holds DC Certified Business Enterprise (CBE) and Small Business Enterprise (SBE) certifications. EIST serves federal agencies, state and local government, K-12 school districts, and regulated enterprises, delivering cybersecurity, AI governance, digital transformation, and hardware/software procurement.

agile program deliveryAI risk assessment and auditingAlgorithmic bias detectionCloud architecture and migrationdata analytics and visualizationenterprise application modernizationFedRAMP/FISMA complianceIncident responseISO 27001/SOC 2/FedRAMP readinessLLM deployment safety controlsNIST AI RMF alignmentPrivacy engineeringsecurity architecture designSIEM implementationZero-Trust implementation

Elementos is a privately owned, Service-Disabled Veteran-Owned Small Business based in Miami, Florida. Its team specializes in Cyber Security and Information Technology, focusing on people and tools to protect individuals' and organizations' sensitive and private data.

business continuity planningcustom software programmingcyber security assessmentcybersecurity trainingdatabase conversion and integrationdesign sprintsendpoint detectionfull stack developmentintrusion detection and preventionKanbanlegacy system modernization and integrationnetwork architecture designpatch managementproduct developmentSCRUMStaff augmentation

What our clients say after the audit closes Governance Director, Tealium ISO 42001 - Tealium “Over the past two years, Elevate has provided consistent, responsive service and completed all deliverables at a high level of quality and on time. They have supported internal audit, risk assessment, and professional services across a wide variety of global regulations and compliance frameworks. The Elevate team has been a great partner for Tealium.” Read the case study VP of Finance Consolidated Water “Elevate has provided our company, Consolidated Water Co. Ltd., with more than 15 years of outstanding service. They have served in an internal auditor capacity and have proven to be highly valuable in ensuring that we have met and continue to meet the financial reporting control requirements for public companies under the Sarbanes-Oxley Act.” Read the case study GRC Director Fortune 500 Company.

AI governancecontinuous monitoringcontrol mappingdocumentation buildsGap assessmentsinternal auditmock auditspenetration testingrisk assessment

Enovetix NS is a veteran-owned joint venture and SBA-approved Mentor-Protégé Service-Disabled Veteran-Owned Small Business (SDVOSB) joint venture. It partners with the Veterans Administration to improve veteran care, facilities, and support systems, and delivers innovative, cost-effective solutions to enhance security, efficiency, and the success of government missions.

agile developmentbig databusiness intelligenceCyber securitydata managementDevSecOpsEnterprise Data Warehousesenterprise infrastructure operationsgovernance, risk management and complianceincident management and responseinformation assuranceLegacy system modernizationlow-code/no-code platformsmachine learningnetwork managementPKI and identity managementsecurity operationssoftware and systems integrationthreat intelligence and threat detection

Enterprise Cyber Solutions is dedicated to applying the principles of pragmatic cybersecurity to help clients address challenges in cyber strategy, architecture, and regulatory compliance, at scales ranging from small startup companies up to regulated multinationals. Its team of advisors possess more than 60 years of combined experience in national security and critical infrastructure, including defense contracting, cyber consulting, and advanced engineering.

CMMC compliancecyber strategyIncident responsepolicy developmentRegulatory Compliancesecurity architecturesecurity assessmentstabletop exercisesvCISO services

Epoch IT is an IT support and training company headquartered in Allentown, Pennsylvania, with a second office in Vermont. For more than 20 years it has provided managed IT, cybersecurity, cloud solutions, infrastructure services, and IT training to small and mid-sized businesses across the United States and beyond.

cloud migration and managementCybersecuritydisaster recovery planningincident response planningIT trainingManaged It Servicesnetwork monitoringsecurity camera and video surveillance installationstructured cabling installation and design

Eracent provides a unified platform for IT Asset Management (ITAM), Software Asset Management (SAM), SaaS spend management, and FinOps. The company helps organizations overcome silos, inefficiencies, and risks created by managing ITAM, SaaS, and FinOps in disconnected tools, offering complete visibility and centralized control across the technology ecosystem. Eracent was recognized as a Leader and an Outperformer in the GigaOm Radar for Software Asset Management v2.

application portfolio managementautomated provisioningcloud cost managementCMDB data quality analysisintegration and connectorsIT asset discoverySaaS spend managementSBOM management and analysissoftware compliance and reconciliationsoftware license management and optimization

Cyber Security & Specialty Consultants (CSSC) provides IT and cybersecurity compliance consulting for government and commercial organizations. CSSC offers compliance for frameworks including NIST 53, NIST 171, CMMC, FedRAMP, SOC 1, 2, & 3, ISO 27001 & 27002, and FISMA CSF, and provides assessments, program development, training, and educational resources for IT, HR, and Supply Chain Operations.

assessmentscompliance consultingcontinuous monitoringIncident responseprogram developmentrisk managementsupply chain risk managementtraining

ESTC Solutions is a Service-Disabled Veteran-Owned Small Business delivering cybersecurity, cloud, and IT modernization services to government agencies and mission-critical organizations at the federal, state, and local levels. Its practice is built on more than 30 years of IT leadership experience, including executive-level roles overseeing enterprise technology and cybersecurity programs within the federal government. ESTC maintains active ISC2 CISSP and CGRC certifications.

AI governanceAI readinessanalyticsautomationcloud modernizationcloud securitycontinuous monitoringCybersecuritydata architecturedata governanceDigital modernizationEnterprise architectureICAMinfrastructure modernizationRMFsecurity assessmentszero trust

eTEM Consulting LLC is a Certified Service-Disabled Veteran Owned Business founded by Elvis Tem, a Cybersecurity/Information Technology professional with over 10 years' experience supporting Federal Government and commercial clients. The company provides professional and consulting services in Cybersecurity/Information Assurance, Information Technology, and management and leadership to government and commercial clients in the Health, Defense, and Civilian sectors.

Application Engineering & Architecturecomputer forensicsconfiguration managementCybersecurityIncident responseinformation assuranceNetwork Engineering & Architecturepenetration testingprocess improvementProgram & Project Managementsecurity operationsSplunk Implementation & O&MSystem Engineering & Architecture