Skip to content
777 Sourcing.

Capability

vulnerability scanning

Suppliers
76
States & provinces
27
Countries
3

76 vulnerability scanning suppliers across 27 states and provinces in 3 countries. Profiles show capabilities, materials, certifications, and facility locations so you can compare shops and build a shortlist.

Suppliers

Advisedly provides an AI-native platform that replaces 80+ enterprise security and compliance tools, covering GRC, SIEM, EDR, SOAR, vulnerability scanning, vendor risk, training, and ticketing. It supports 500+ frameworks including CMMC, FedRAMP, HIPAA, ISO 27001, PCI-DSS, SOC 2, and NIST.

EDRGRCSIEMSOARticketingtrainingvendor risk management

AGENSYS CORP

ASHBURN, VA

Agensys Corporation is a professional services firm providing agile processes, skilled people, and technology solutions to Defense, Intelligence, and Civilian agency customers as well as commercial clients. Its capabilities include data management, cloud engineering, software development, cyber security, and end-user/operational support, along with staff augmentation, contract-for-hire, and permanent placement services.

Cloud EngineeringCloud MigrationsCyber securitydata managementDevOpsEnd User/Operational SupportHelp desk supportIncident responsepenetration testingsoftware developmentStaff augmentationsystems administration

Jozu provides a self-hosted, air-gap capable platform for securing enterprise AI. Jozu Hub verifies and secures models, agents, and MCP servers, while Agent Guard enforces policy and contains agents on Kubernetes, connected or air-gapped. Created by the team behind KitOps, a CNCF project.

agent isolation in microVMair-gapped deploymentartifact signingCI/CD integrationcryptographic audit loggingKubernetes deploymentOCI artifact packagingpolicy enforcement

All Capital Solutions is an emerging IT Engineering company delivering trusted Cybersecurity and Software Engineering solutions. It combines mission understanding, technical excellence, and agile delivery to enhance IT security and operational readiness, offering cybersecurity engineering, software development, cloud infrastructure support, and systems integration.

24x7 Incident ResponseAgile full-stack developmentAI/ML integrationcloud infrastructure supportcloud migration planningcybersecurity engineeringDevSecOpsKubernetes-orchestrated CI/CDpatch managementsoftware developmentSystems Integration

ALL NET INC

SPEARFISH, SD

All Net Connect delivers personal, affordable IT service to small and mid-size businesses throughout the Black Hills region of South Dakota, including Rapid City, Spearfish, Deadwood and Lead. Founded in December 1998 by Bob and Gen Harlan, the company provides managed IT services, network administration, cybersecurity, hardware and software management, cabling, online IT documentation, and data backup and restoration, working onsite or remotely with 24/7 emergency service.

cablingCybersecuritydata backup and recoveryManaged It Servicesnetwork administrationnetwork installation and configurationnetwork optimizationonsite and remote supportremote monitoringsecurity trainingvirus removal

AMERINET

SAINT PAUL, MN

Virtual Guardian is a U.S.-based cybersecurity VAR and integrator built by leaders behind security firms including NaviLogic, AmeriNet, Accuvant, and FishNet Security. It is a wholly owned, independently operated subsidiary of ESi Technologies, providing risk assessments, offensive testing, compliance programs, vendor risk programs, and enterprise security and AI-ready network architecture.

compliance gap analysisNetwork architecturepenetration testingphysical assessmentremediation roadmappingrisk assessmentssecurity architecturesocial engineeringthreat modelingvendor risk management

ANCHORE INC

SANTA BARBARA, CA

Anchore is a leader in software supply chain security for modern cloud-native environments. Anchore Enterprise is an SBOM-powered software supply chain management platform for continuous security and compliance, helping large enterprises and government agencies generate and manage SBOMs, automate vulnerability scanning, and enforce compliance at scale. Headquartered in Santa Barbara, California, Anchore was founded in 2016 by Saïd Ziouani and Daniel Nurmi.

automated compliancecontainer securityDevSecOps & automationpolicy enforcementSBOM managementsecret and malware detectionsoftware composition analysis

APAVO CORPORATION

SPRINGFIELD, VA

Apavo Corporation is a woman-owned cybersecurity firm founded in 2018 by a former federal civilian who led and helped develop DoD and IC cybersecurity programs. Based in Springfield, VA, it delivers RMF/ATO execution, inspection readiness, and compliance support to DoD and Intelligence Community programs, with 15+ years inside DoD and IC mission environments.

continuous monitoringcyber program and project managementIncident responseinspection readiness assessmentsISSO/ISSM supportMalware Analysispenetration testingrisk assessmentsRMF/ATO executionSecurity Control Assessor activitiesSIEM implementationSOC architecture design and engineering

APEX COMPUTERS INC

MALDEN, MA

Your browser does not support the video tag. You’ll like working with us. Peak performance, because you need the job done right the first time. APEX provides comprehensive AI customization, IT and cybersecurity solutions, offering 24/7 managed services, security consulting, and infrastructure support to ensure businesses operate securely, efficiently, and without disruption. We keep your business running smoothly and help bring innovation to midsized businesses with custom AI solutions. Efficiency is critical. We get it. Let’s Chat Why choose APEX for IT & Cybersecurity?APEX takes the complexity out of IT and cybersecurity, providing an all-in-one solution that evolves with your business. We secure your infrastructure, optimize your processes, and ensure you’re always ready for what’s next. We don’t just solve problems—we anticipate them. What Our Customers Are Saying Our customers.

AI customizationAudits and ComplianceCapEx Planningcloud servicesconsultingCybersecuritydisaster recoveryEnd-user supportmanaged antivirusManaged Email Securitymanaged firewallManaged It Servicesmanaged security servicesNetwork architectureNetwork SolutionsO365 Managementreadiness assessmentsThreat Analytics and Response

ARAYDIA, LLC

JACKSONVILLE, FL

Araydia, LLC provides cybersecurity consulting services spanning government organizations and the private sector in the field of Cybersecurity and Assessment & Authorization (A&A). They offer technical solutions and expertise in information security management to help clients implement successful security programs for their systems, from security implementation to accreditation package development.

accreditation package developmentContingency planningdisaster recovery planningmultimedia collateral creationprint publication designsecurity control assessmentsSTIG reviews

ARENA TECHNICAL, LLC

ROCKVILLE, MD

Arena Technical, LLC (AT) is a full service, woman owned, information technology consulting and staffing organization. AT delivers qualified IT consultants and technical resources across industries, working closely with clients and teams to reach and exceed goals, from legacy to leading edge technologies.

Certification and accreditationenterprise network solutionsinfrastructure engineeringIT consultingIT staffingpenetration testingPMO consultingproject managementtraining course design and development

Argus Cybersecurity Solutions provides cybersecurity services for businesses of all sizes, focusing on digital asset protection, risk assessments, and vulnerability management. Their team supports federal and commercial organizations with cloud security compliance and security control assessments.

AI analyticscloud security compliancecustom web application developmentFedRAMP security assessmentsGRC program managementLLM-based analyticsNIST 800-53 security control assessmentpenetration testingrisk assessmentsSecurity audits

Aristi is a cybersecurity firm based in the Washington DC metro area. Founded in 2008, it helps organizations navigate the evolving cyber-threat landscape, delivering customized expertise in managing cyber risks, protecting critical information, and achieving compliance with government and industry standards. It serves federal agencies, cloud service providers, and commercial enterprises.

compliance gap analysiscontinuous monitoringpenetration testingsecurity assessment planningsecurity awareness and trainingsecurity testingsystem security plan development

ARK DATA CENTERS

CEDAR RAPIDS, IA

Ark delivers high-performance national digital infrastructure, including owned-and-operated edge data centers, private cloud, integrated network, and integrated security services across the United States. The company states it has 20+ years of expertise supporting data-intensive organizations, with fully owned and operated infrastructure, built-in compliance, redundancy, and 24/7 monitoring.

24/7 monitoringbusiness continuitycarrier-neutral network connectivitycolocationdisaster recoveryfirewall managementMDR/XDRmigration and onboardingprivate cloud

Aspire Tech is a mission-driven cybersecurity firm with a strong background in cyber threat intelligence. It provides cybersecurity services including SOC-as-a-Service, managed security services, cloud security, digital forensics, SIEM, DevSecOps, and compliance advisory, with a Security Operations Center operating 24x7x365.

cloud monitoringcompliance reportingcontinuous network monitoringdigital forensicsIncident responselog data collection/correlationphishing simulationrisk assessmentsecurity health checksecurity monitoringthreat intelligence

ASPIS CONSULTING

KANSAS CITY, MO

Aspis Consulting is a cybersecurity and professional services consulting firm based in Kansas City, Missouri. Founded by a former federal agency CISO, it specializes in protecting digital assets while also offering information technology, management consulting, and administrative support professional services. It serves commercial, government, and small & midsized business clients.

Administrative supportCybersecuritydark web monitoringdigital forensic investigationIncident responsemanaged detection & responsemarketing servicespenetration testingrecruitingRegulatory Compliancerisk managementsecurity awareness trainingStaff augmentation

ASSURANCE DATA INC

INDIANA, PA

Assurance Data, Inc. delivers enterprise-grade cybersecurity solutions to federal agencies, utilities, and commercial organizations, specializing in protecting critical infrastructure, operational technology, and sensitive data with advanced threat detection, zero-trust architecture, and compliance management. The company states it has over 25 years of experience.

AI/ML model securitycompliance managementDevSecOpsdigital forensicsdisaster recoveryIncident responsemanaged detection and responseSCADA integrationSIEM integrationthreat detectionzero trust architecture

(407) 601-7148 The Key to Your Information Assurance AIT’s team of experts has extensive experience performing Cybersecurity for a variety of Government, Industry, and Academia. Risk Management Provides leadership with the tools and information to make informed decisions and risk-based decisions. Safe-Guard Your Business Are you doing enough to safeguard and protect your business and customer data? Vision To Transform Information Assurance and Software Engineering into Best-Value Solutions for the Federal Government, DOD, and Commercial Industry. Mission To Become the Premier Cybersecurity Organization by Providing Low-cost, Common Sense-Based Approaches to Achieving Information Assurance Compliance. Strategy To Provide Low-Cost, Low-Risk, Transparent Solutions while Providing Expert Technical Implementations and Strategy. About AIT Engineering At AIT Engineering, we provide consulting.

Boundary Defense Analysisbusiness continuityCross-Domain SolutionsCybersecuritydatabase engineeringDIACAP conversiondisaster recoveryinformation assurancepenetration testingRisk Management Framework (RMF)SIEMsoftware developmentSystems Integration

BACKBONE SECURITY.COM, INC.

STROUDSBURG, PA

Backbone Security is a cybersecurity firm incorporated in 2000 that assists organizations of all types with managing information security risk and meeting compliance requirements. It offers assessment and consulting services delivered by consultants using customized methodologies, and is a PCI Approved Scanning Vendor certified to conduct vulnerability scans for PCI.

business continuity planningdisaster recovery planningincident response planningPCI scanningpenetration testingphishing simulations and trainingsecurity policy review and developmentsocial engineering testingweb application security assessmentwireless network security assessment

BARR CYBER SOLUTIONS LLC

FAIRFIELD, CA

Barr Cyber Solutions LLC provides trusted cybersecurity and IT services tailored for DoD and federal agencies, ensuring compliance and operational readiness. The company focuses on securing mission-critical systems through vulnerability remediation, automation and scripting, and continuous compliance with regulations and policy standards.

ACAS supportcomplianceendpoint hardeningIT administration automationpatching and imagingscripting and GUI creationvulnerability remediation

B.I.T.S

ABERDEEN, MD

Bravura Information Technology Systems, Inc. was founded in 2014 by President & CEO Ms. Claudine Adams. It is a Woman-Owned, Minority-Owned, Small Business (WOSB) headquartered in Aberdeen, Maryland, serving the Department of Defense, Federal Government, Intelligence Community, commercial clients, and foreign allies. The company is ISO 9001:2015- and ISO 27001:2022-certified and is a recognized global leader in aerostat operations and persistent surveillance.

aerial surveillanceaerostat configuration and customizationaerostat manufacturingdatabase administrationfabricationflight operationshelp deskIT asset managementnetwork systems developmentpenetration testingprocurementsecure supply chain managementSoftware/Application DevelopmentSustainmentsystems and network administrationsystems engineering and integrationtest and evaluationtransportationwarehousing

BLACK PALM SECURITY LLC

COCONUT CREEK, FL

Black Palm Security LLC is a certified minority-owned cybersecurity consulting company based in Coconut Creek, Florida. It provides penetration testing, threat detection, vulnerability management, and compliance services to companies of all sizes across various industries, with customized services designed to identify vulnerabilities and mitigate targeted attacks.

Cloud Security Assessmentmanaged detection and responsepenetration testingphishing simulationred team attack simulationrisk and compliance assessmentsSecurity auditsthreat huntingweb application testingwireless penetration testing

BLUE MANTLE LLC

STERLING, VA

Blue Mantle Technology is an IT security firm specializing in Information Assurance services for the Federal Government, civilian agencies, and businesses. Founded in the Dulles Technology Corridor, it provides cybersecurity and CMMC compliance services for defense contractors, federal agencies, and commercial enterprises, covering the full cyber lifecycle: Design, Build, Defend, and Respond.

cloud security architectureCMMC compliancegap analysisIncident responsemonitoringpenetration testingPOA&M trackingrisk assessmentsecurity assessmentsSecurity EngineeringSSP development

B&M CYBER

ROCKVILLE, MD

B&M Cyber (formerly B&M Consulting Group, Inc.) is a woman-owned small business (WOSB) and State of Maryland Certified Minority Business Enterprise providing cybersecurity and privacy services to Federal and State agencies and commercial organizations. Its leadership has advised Federal Agency CIOs and CISOs for over 20 years on cybersecurity risk management, cyber defense, incident response, security engineering, independent assessment, and cyber program strengthening.

cyber defenseDevSecOps pipeline implementationFedRAMP cloud migrationIncident responseindependent assessmentInformation Security Continuous Monitoring (ISCM)NIST Risk Management Framework (RMF) supportpenetration testingrisk and vulnerability assessmentsecurity architectureSecurity Engineeringthreat huntingweb application security testing

Related capabilities

Other processes offered by the shops that list vulnerability scanning.

Browse all capabilities