air-gapped deployment

Adelphi delivers production AI solutions for national security, connecting models and agents to governed mission data across classified, covert and enterprise environments. The company provides a secure access layer and a governed registry of data sources, permissions, policies and provenance, and embeds cleared engineers to deploy AI into mission networks through accreditation and go-live.

accreditation engineeringagentic AI workflowsAI deploymentdata access and integrationmodel evaluationsecure pipelines and access controls

Aethyr Research LLC builds sovereign AI agent infrastructure that runs inside the customer's own boundary: on-prem, private cloud, or fully air-gapped. Its stack uses NIST post-quantum cryptography (ML-DSA-65, ML-KEM-768) with tamper-evident audit trails, serving regulated enterprises and defense/government agencies. Founded May 2025 in Utah.

Edge deploymententerprise system integrationGPU-accelerated AI orchestrationLLM inferencemodel fine-tuningmulti-agent orchestrationpost-quantum cryptographyRAG pipelines

Jozu provides a self-hosted, air-gap capable platform for securing enterprise AI. Jozu Hub verifies and secures models, agents, and MCP servers, while Agent Guard enforces policy and contains agents on Kubernetes, connected or air-gapped. Created by the team behind KitOps, a CNCF project.

agent isolation in microVMartifact signingCI/CD integrationcryptographic audit loggingKubernetes deploymentOCI artifact packagingpolicy enforcementvulnerability scanning

AKMSecure delivers a patented Autonomous Key Management™ (AKM) protocol that eliminates certificates, using dynamic symmetric credentials that provision once and refresh perpetually. Quantum-resilient by design and aligned to CNSA 2.0, it supports Zero Trust, air-gapped and denied environments across enterprise IT, OT, and Tactical Edge, deployable as a lightweight SDK.

Autonomous Key Managementquantum-resilient encryptionSDK integrationsymmetric AES-256 with SHA-384/512Zero Trust session verification

BlackArc Systems is the federal practice of BlackArc Industrial, LLC, building production agentic AI systems for defense and civilian agencies and training agencies and national laboratories to run them. Founded in 2023 and headquartered in Reston, VA, the company delivers in partnership with CTG Federal, a CMMC Level 2 prime. Its founders have put 150+ AI agents into production across federal, SLED, and commercial work.

agentic AI system developmentAI training and enablementaudit and access controlevaluation and observabilityhuman-in-the-loop controlson-prem inference (Ollama, vLLM, Triton)PII redaction

Blacktip Refine is a self-hosted AWS cost optimization platform that deploys entirely inside the customer's AWS account, so no infrastructure data leaves the account boundary. It is purpose-built for GovCloud, FISMA, ITAR, IL4/IL5, HIPAA, and air-gapped environments. Refine deploys as a CloudFormation stack with a read-only IAM role, Lambda function, and S3 bucket, and produces prioritized savings reports with executable CLI commands.

AWS cost optimizationCloudFormation deploymentFISMA/ITAR/IL4/IL5/HIPAA supportGovCloud deploymentLambda functionread-only IAM role provisioningS3 bucket provisioningself-hosted deployment inside customer AWS accounttelemetry-free operationzero-egress architecture

Bluescape provides a secure visual workspace and workflow orchestration platform designed for Multiplayer AI, where human teams and AI agents work together on shared content. It is authorized to operate at FedRAMP Moderate and by the U.S. DoD at IL4/IL5 for CUI data, and is used by enterprises, defense departments, and intelligence agencies.

AI agent integrationon-premises deploymentprivate cloud deploymentsecure collaborationvisual collaboration workspaceworkflow orchestration

Cellcrypt provides quantum-safe encrypted communications, sealing every call, message and file with dual-layer post-quantum encryption (Kyber + Classic McEliece) wrapped around FIPS 140-3 compliant cryptography. It serves government agencies, defence contractors and regulated enterprises, with cloud-hosted, self-hosted on-premises, and PBX gateway deployment options.

centralised administrationend-to-end encryptionhardware security modules (HSM)PBX integrationpost-quantum encryptiontrusted platform modules (TPM)white-labellingzero-knowledge architecture

Dark Sky Technology provides software supply chain security products, including Bulletproof Trust™ and Bulletproof Code™, for SBOM generation, management, and cyber supply chain risk management. Its team has spent 25+ years protecting software systems from cybersecurity vulnerabilities and attacks, helping software companies secure code from malicious threats and untrusted code through advanced analytics on open-source packages. Headquartered in Fort Collins, Colorado.

AI LLM integration via MCPAPI and CLI integrationopen-source package risk analyticspolicy-as-code enforcementSBOM diffingSBOM generationSBOM managementSBOM revision controlSBOM sharing and receivingSBOM validationSBOM verificationthreat intelligence

Crogl is a sovereign AI SOC platform that deploys autonomous AI agents to investigate every security alert, hunt threat advisories, and document every action using the customer's own tools, data, and environment. Founded in 2023 to build autonomous agents for security operations, Crogl runs on-premises, in private cloud, or fully air-gapped, with a knowledge graph, AI orchestration layer, and model-agnostic LLM support.

AI orchestrationalert triageautonomous AI agentsfederated searchgoverned auto-remediationknowledge graphon-premises deploymentprivate cloud deploymentSIEM/EDR/ticketing/data lake integrationskill builderthreat hunting

CrunchAtlas provides agentic cyber defense and threat intelligence for critical infrastructure across IT and OT environments. Its platform connects AtlasCyber, which detects, investigates, connects cases, and prepares findings for operator review; ClemAI, a built-in cyber professional for investigation, hunting, forensics, and reporting; and PurpleHaze, which proves real attack paths, fixes exposure, and retests the fix. Deployments include cloud, on-premises, and air-gapped.

attack path validationcampaign attributioncloud deploymentdetectionexposure remediation and retestingforensicsinvestigationon-premises deploymentreportingthreat huntingthreat intelligence

DiffuseDrive develops an end-to-end automated data solution for physical AI, helping computer vision developers build autonomous machines faster. Its Atlas product generates real-world-grade synthetic data for training, validation, and edge case testing, matching EO and IR sensor characteristics and avoiding the sim-to-real gap. Founded by Bálint Pásztor and Roland Pintér, formerly of Bosch autonomous driving.

data acquisitionedge case testingEO and IR sensor simulationSynthetic data generationtraining and validation data

EchoMark provides invisible forensic watermarking that embeds unique, individualized watermarks into emails, documents, images, and screens using steganography. When information leaks, EchoMark's investigation tool compares the leaked artifact with marked copies to identify whose copy leaked, with a confidence score and chain-of-custody reporting. The company was named a 2024 Gartner Cool Vendor in Data Security.

AI rephrasingAPI integrationcomputer visionforensic watermarkingleak investigationon-premises deploymentsteganography

Trenchant Cyber designs, secures, and operates cybersecurity, AI, and data systems for regulated businesses. It offers AI-assisted threat detection, incident response, compliance readiness, private on-premise AI systems and agents, and data platform engineering. Its local AI platform ships as a customer-owned appliance with local inference and no data egress. It serves legal, accounting, manufacturing, healthcare, professional services, and defense/government contracting industries.

agent orchestration and automationAI-assisted threat detectioncompliance readinessdata governance and lineageETL and data engineeringGPU-accelerated local inferenceIncident responselocal LLM deployment and tuningRAGvector and analytics infrastructure

Empyrean Defense builds a multi-domain operational intelligence and decision platform for defense, critical infrastructure, and high-consequence security. The platform fuses sensors and intelligence in the cloud or at the edge, providing sub-second correlation, a common operational picture, policy-driven automation, and a full audit trail. It is containerized and single-tenant, deployable as managed SaaS on AWS Commercial or GovCloud, in private cloud, or air-gapped.

AI/ML enrichmentcontainerized deployment (Docker, Kubernetes)cross-domain correlationEdge deploymententity resolutionidentity resolutionmulti-hypothesis trackingpolicy-driven automationsanctions and watchlist screeningsensor fusionwargaming

Enclaiva provides a secure AI reasoning platform, Nexus, that unifies an organization's knowledge base with source-level auditability, zero-knowledge encryption, and compliance from CUI to classified. It offers fine-tuned models, custom retrieval pipelines, and domain-specific knowledge graphs, with air-gapped or GovCloud deployment and NIST 800-171, CMMC, and agency-specific controls built in. It serves defense and intelligence, the industrial base, and regulated enterprises.

custom retrieval pipelinesdomain-specific knowledge graphsfull audit trailsGovCloud deploymentrole-based accesssecure AI reasoningsource-level auditabilityzero-knowledge encryption

FinalBoss Technology Inc., based in Oxnard, California, provides execution security for agentic AI. Its FinalBoss system runs inside the customer's own kernel and hardware, requiring every AI action to pass a deterministic enforcement gate before it runs; allowed actions execute with a signed receipt, and everything else is stopped. The company also offers BEAST assessment for hidden path discovery and an HTTP/API integration lane.

execution control for AI agentshidden path discoveryHTTP/API integrationkernel-level enforcementon-prem deploymentsigned receipts (Ed25519 + ML-DSA-87)standalone offline verificationwhite-label OEM

gravityAI is an enterprise AI platform for building, deploying, and governing multi-model workflows, purpose-built for regulated industries. It provides AI inventory and orchestration in one place, letting teams connect their own systems and data, register vendor AI, and build workflows via drag-and-drop or code. Everything runs in the customer's own cloud, on-premise, or air-gapped, with built-in governance, risk levels, ownership records, and auditability.

AI governanceAI model deploymentAI workflow orchestrationAPI-first platformauditabilitycode-based developmentdrag-and-drop workflow buildingon-premise deploymentprivate cloud deploymentversion comparison and rollback

BWS Holdings LLC, doing business as Industrial Logistics, is a founder-led technology company founded in 2024 and based in Fort Smith, Arkansas. It is 100 percent owned and led by founder Brian Westney, a service-disabled veteran. The company builds compliance and training software for federal and commercial missions and holds 100% Service-Disabled Veteran-Owned Small Business (SDVOSB) standing.

AI study toolscompliance training softwareFAR 9.6 teamingon-premises and private deploymentSDVOSB prime contracting

Ingestigate is a document search, entity graphing, and investigation platform that ingests hundreds of mixed-format files (1,000+ file types including PDFs, Excel, images, parquet, and ORC) and makes them searchable and viewable. It uses local AI to automatically extract entities such as people, organizations, emails, phone numbers, and crypto wallet addresses and maps them on a live relationship graph. The platform offers sub-millisecond search, OCR, policy-based access control, and SaaS, on-premise, or air-gapped deployment. It was designed by a federa

APIaudit loggingdocument ingestionentity extractionfull-text searchOCRon-premise deploymentpolicy-based authorizationrelationship mapping

PQC is being rolled out across the My ID product family. View our roadmap → × Try: PIV FIDO2 NIS2 passwordless Yubi Key ← Close Products ▾ My ID CMS, Entra ID + Yubi Key My ID Product Family → My ID CMS ▾ Overview My ID CMS Enterprise My ID CMS PIV My ID Authenticate My ID MFA My ID PSM ▾ Overview AD Audit (free) Password Breach Data API My ID Secure Vault Technical Integrations Deployment Options Technical Features CMS Architecture & API MFA Auth Server & WSAPI PSM Policy & Breach DB Secure Vault Key Archival Resources All Use Cases Datasheets My ID CMS + Entra + Yubi Key Solutions ▾ Federal-ready: FIPS 201 / PIV By Use Case → PIV / HSPD-12 NIS2 Privileged Access Yubi Key Management Swissbit Management IDEMIA Management One Span Management By Deployment → On-Premise Cloud / Hybrid Air-Gapped / Classified Mobile Identity By Standard → FIPS 201 / PIV NIS2 NIST SP 800-63B CJIS Security.

breached password screeningFIDO2 passkey managementHSM-backed key protectionkey escrow and recoveryon-premise, cloud and hybrid deploymentPIV and PIV-I credential issuancePKI credential lifecycle managementpost-quantum cryptography (ML-DSA, ML-KEM)smart card issuance

Ionate is an application modernization company founded in 2016 that uses proprietary AI/ML to migrate legacy systems such as Mainframe, COBOL, AS/400, Oracle, and Fujitsu to cloud-native microservices with 100% business parity, typically in 3-6 months. The company reports 500M+ lines of legacy code modernized and 50+ enterprise clients across banking, insurance, government, healthcare, and logistics.

AI/ML code conversionapplication modernizationCI/CD pipeline orchestrationCOBOL modernizationKubernetes orchestrationlegacy system migration to cloud-native microservicesmainframe modernizationpredictive analyticstest generationZero Trust security

Juno Innovations makes Orion, customer-hosted compute orchestration software for GPU infrastructure, HPC workloads and compute environments on-premises or in your own cloud account. Orion turns servers, hypervisors, and cloud VMs into one unified compute plane where users launch desktops, notebooks, VMs, and apps from a browser in 60 to 90 seconds. It is built to run air-gapped and is installed inside your own network.

Crossplane EC2 provisioningfleet analyticsGPU time-slicingLDAP/SSO identity integrationOpenTelemetry metricsplugin installation via TerraVM management via KubeVirtworkload scheduling