audit logging

Adaptt builds the evidence and control plane that lets defense programs adopt AI inside disconnected enclaves. Its first module, Ratify, assesses policies and system evidence against NIST SP 800-53 and 800-171 on a single workstation inside the boundary with no external network egress, with every finding cited to its source and every decision made by a named person. Adaptt is building a platform for the secure software lifecycle.

AI assessment against NIST SP 800-53 and 800-171air-gapped/network-none operation with egress guardbehavioral equivalence checkslocal model serving on workstation-class hardwarepolicy enginerole-based accessstatic analysistest adequacy scoringworkflow engine

Aembit is an identity and access management platform for AI agents and non-human workloads. It verifies agent and workload identities, evaluates access policy and runtime context, and issues short-lived credentials so agents can reach enterprise systems without stored secrets. It provides a single control plane for enforcing and auditing access across clouds, SaaS, and on-premise data centers, with instant revocation.

conditional access based on security posture, geography, and timecredential isolationidentity verificationinstant access revocationOAuth 2.1 authorization for MCP clientsruntime policy enforcementsecretless accessshort-lived credential issuancetoken exchange

Aether Dynamics AI builds compliance, cybersecurity, and decision-support infrastructure for commercial space operators. Its three integrated platforms are ClearSky (launch operations: safety reporting, vulnerability intelligence, SBOM compliance, mission risk), AetherSat (in-orbit operations: constellation health, collision avoidance, space weather, maneuver authorization), and Aether BARYCENTER (ITAR-compliant relativistic UTC-to-LTC time conversion for US lunar programs). Based in Santa Rosa, California; SAM.gov active with CAGE 14J48.

collision detection and conjunction screening (SGP4)compliance mapping (FAA, EAR, ITAR, DoD)confidential safety reportingconstellation telemetry and health monitoringcontainerized microservices architecturecyber defense and mission-risk monitoringmaneuver simulation and authorizationrelativistic time conversion (UTC to LTC)SBOM compliance and launch attestationspace weather monitoringvulnerability intelligence and CVE scoring

Althea is a voice-first, multi-agent agentic AI platform purpose-built for healthcare, automating patient access, care coordination, and adherence for specialty care. Its AI agents handle benefit verification, prior authorization, financial assistance, patient onboarding, refill reminders, and pharmacy coordination across voice, SMS, email, and mobile channels, with HIPAA and SOC 2 compliance, audit trails, and PHI minimization.

adherence and refill managementBenefit verificationEHR/CRM/payer portal integrationHIPAA and SOC 2 complianceHuman-in-the-loop escalationlarge language modelsmulti-agent orchestrationmultilingual supportnatural language processingpatient onboardingprior authorization automationspeech AIvoice-first AI agents

ALTiQ AI Solutions LLC is an Olympia, WA-based company delivering AI assistants, identity management, cloud consulting, and compliance-ready modernization for SMBs, enterprises, and government. Its AURA Business Assistant provides 24/7 AI chat, lead capture, and knowledge base search, while the Autofill Engine pre-populates forms and documents. It is a SAM-registered contractor with UEI LUQZKG98JD68 and CAGE 15R60, and holds OMWBE SBE and King County SCS certifications.

agentic RAG chatbotsAI automation and chatbotsAzure/AWS architecture and migrationCI/CD pipelinesDevOps transformationFastAPI microservicesFOIA supportinfrastructure as codeintelligent process automationJava/Spring applicationsJira integrationMFARBACRecords managementSCIM provisioningsecure API developmentsecure SDLCSSO/SAML/OIDC integration

Arcade is the actions runtime for enterprise AI agents, providing a single control point to enforce, execute, and govern every action between agents and the systems they reach. It handles authentication against the customer's identity provider, delegates authorization so agents act as their users, and enforces policies in the path of every action. The company is SOC 2 compliant and offers cloud, on-prem, air-gapped, or hybrid deployment.

agent authorizationcustom tool development in Python/JavaScriptevalsMCP gatewaypolicy enforcementtoken lifecycle managementtool execution

iCrimeFighter is a cloud-enabled Digital Evidence Management System (DEMS) for law enforcement agencies, prosecuting attorneys, and county agencies to collect, store, and share digital evidence. It provides web-based administration software, mobile field capture, and desktop upload features that automatically transfer files to the cloud, replacing physical media like DVDs and USB drives.

AI-powered video transcriptionbody-worn camera integrationchain-of-custody trackingcloud evidence storagedesktop bulk file transferelectronic discoverymobile evidence captureRMS/CAD integrationsecure link sharingvideo/audio redaction

Auracore Dynamics Inc. provides a unified, production-grade platform for organizations to build and operate intelligent systems with control over their data, compute, and AI workloads across on-premises, cloud, and hybrid environments. Its suite covers the operational lifecycle from zero-touch infrastructure provisioning to distributed AI inference, with data residency controls, multi-tenant isolation, and audit trails.

AI inferenceAI request routingautomated certificate authority / PKIdistributed workload orchestrationdocument retrievalInfrastructure provisioningmodel fine-tuningmulti-tenant isolation

Blackwire Labs provides trusted AI for cybersecurity, delivering expertise for GRC, training and simulation, and threat and vulnerability management. Its multi-agent architecture pairs AI analysis with expert-validated cybersecurity knowledge, with collaboration from the Cybersecurity Community of Excellence (CCOE), UDA Network, and Wiley. The platform offers enterprise-grade security including RBAC, MFA, and audit logging, plus API access and multilingual capabilities.

AI agentsAPI integrationGRCMFAmulti-agent architecturemultilingual supportRBACsource evaluationThreat and Vulnerability Managementtraining and simulation

Blaze provides a no-code platform for building HIPAA-compliant healthcare apps, internal tools, and automated workflows. Its platform includes a visual drag-and-drop app builder, Blaze A.I., a HIPAA-compliant no-code database, EHR/EMR integrations, multi-environment deployment, user permissions and audit logs, and workflow automation. Blaze is HIPAA-compliant, SOC 2 Type II, and HITRUST e1 certified.

2FAAI agentsAPI integrationEHR/EMR integratione-prescribingFHIR supportmulti-environment deploymentno-code app buildingrole-based permissionsSSOworkflow automation

Agency Chat provides an auditable AI assistant for government agencies, grounded in official sources using Retrieval Augmented Generation (RAG). Every answer cites its source and the assistant refuses when answers aren't supported. Interactions are captured to an agency-owned audit log and delivered monthly as CPRA/FOIA-ready reports, with a public transparency dashboard. It supports 72+ languages, voice input/output, and WCAG 2.1 AA / Section 508 accessibility.

automatic translation (72+ languages)document indexingRetrieval-Augmented Generation (RAG)speech-to-texttext-to-speechWCAG 2.1 AA / Section 508 accessibilitywebsite crawling

Casebook provides configurable human services software for government agencies, nonprofits, and social service providers. Its cloud-based platform covers intake, case management, case notes, field documentation, reporting, and analytics, and is used across child, youth and family services, tribal and First Nations programs, victim services, police and public safety social work, and workforce programs.

automated workflowscase managementcustomizable formsemail into casemobile and cloud accessno-code configurationreporting and analyticsrole-based security

CipherTEA provides an API-first data security platform that unifies field-level encryption, role-based access control, and automated key management. Its products include Integrated Encryption for application-layer encryption, Foundation KMS for centralized key management, TEA-Pot Secret Storage for encrypted secrets, and Access Control for role-based authorization. The platform is designed to keep sensitive data secured and unreadable even in a breach, with identity-level audit trails for PCI and SOC 2 compliance.

API integrationapplication-layer encryptionautomated key managementDocker deploymentencrypted secrets managementfield-level encryptionkey rotation, versioning, and revocationrole-based access controlSDK installation

Credal is an enterprise platform where teams build and govern MCP servers with curated context, tools, and cost-to-accuracy evals per workflow. It acts as an MCP gateway between agents and systems, letting teams query company data from Claude, ChatGPT, Cursor, Slack, or their own apps with permissions, guardrails, and auditing built in.

agent buildingAPI and SDK accesscost-to-accuracy evalsdeployment in secure cloud or own VPChuman-in-the-loop approvalsMCP server governancepermission inheritance and syncing

Cyphlens is a security platform built to verify that a human, not an AI agent, is present at every login and every file access. Its products run on a patented engine called Lenscryption that performs a physical, optical challenge no software agent can complete, requiring a registered physical device to decrypt content. The company reports 8 patents (4 granted, 4 filed) and states its technology is adopted by the DoD, Fortune 15, and enterprises handling sensitive data.

device-bound decryptiongranular permission controlsidentity verificationphysical optical challenge authenticationrevocable post-distribution accesstime-bound access controls

Dellinger Software Solutions LLC is a Pennsylvania-based small business providing secure, scalable software development and application modernization services for government and enterprise organizations. With over 25 years of experience, it specializes in modernizing legacy systems to Microsoft .NET platforms, building reliable web applications, and supporting mission-critical platforms in regulated, high-stakes environments including DoD STIG-controlled environments.

application modernizationCI/CD pipeline implementation using JenkinsEntity Framework CoreLegacy system modernizationMicrosoft Power PlatformOAuth2 and OpenID Connect token-based securityOkta and Azure AD integrationsOracle and SQL Server data accessPL/SQL developmentSonarQube and WebInspect remediationstatic and dynamic security scanning remediationunit, integration, and component testingweb application development

ClearRecord is automated file retention and secure deletion software for regulated industries. It runs as a lightweight Windows service on workstations, silently monitoring files, enforcing retention policies, and securely deleting aged files per NIST SP 800-88 while generating tamper-evident audit logs and compliance-ready destruction certificates. It operates entirely on-premises with no cloud upload, supports air-gapped networks, and is managed via a browser-based admin dashboard on the LAN.

destruction certificate generationfile retention policy enforcementGroup Policy deploymenton-premises/air-gapped operationrole-based access controlsecure file deletionSSD and HDD handling detection

DocPlace Corporation provides DocPlace, an AI-native Document Management System (DMS) that helps businesses create, collaborate, share, store, and sign documents. It offers automatic document classification, smart tagging and metadata extraction, version control, AI-powered search and Q&A, workflow automation, built-in eSignature, and form/template building, available in the cloud or on-prem.

AI document classificationAPI integrationscloud or on-prem deploymenteSignatureform and template buildingsemantic search and AI Q&Asmart tagging and metadata extractionversion controlworkflow automation

EnduraData, Inc. develops EDpCloud, enterprise Linux file replication and Windows/UNIX data replication software. Founded in 2006 and led by A. El Haddi, the company provides real-time, byte-level delta replication with AES-256 encryption and TLS 1.3, serving federal agencies, healthcare providers, financial institutions, and global media organizations. EDpCloud is written in C and compiled natively for Linux, Windows, AIX, Solaris, FreeBSD, OpenBSD, and macOS.

AES-256 encryptionbidirectional replicationbyte-level delta replicationcheckpoint/restartC-native cross-platform engineeringdata integrity verificationmany-to-one replicationone-to-many replicationreal-time file replicationrole-based access controlTLS 1.3

Foxpass provides cloud-native network access security products, including Cloud RADIUS, Cloud PKI, and Cloud LDAP. Its Cloud RADIUS and Cloud PKI enable identity- and certificate-based authentication for Wi-Fi and VPN connections without hardware or local servers, while Cloud LDAP is a hosted directory service supporting VPNs, legacy apps, and system logins. The company states it is trusted by over 500 engineering and IT teams and offers SOC 2 Type II, ISO/IEC 27001:2022, and HIPAA-ready compliance.

certificate-based authenticationdevice posture-based access controldirectory syncidentity-based authenticationSCEP enrollmentWi-Fi and VPN access controlX.509 certificate issuance and managementZero-trust network access

iDatapro is an Information Technology Solutions Provider based in Pearl River, NY, formed by IT professionals with combined industry experience of over 40 years. It provides technical project management, data analytics and big data solutions, and a CMMC Assessment Readiness Implementation Program helping Defense Industrial Base contractors achieve audit-ready compliance aligned to CMMC 2.0 and NIST SP 800-171.

big dataCMMC readinessData AnalyticsDefenderendpoint hardeninggap and risk assessmentGCC High implementationidentity and access managementIntunemock assessmentsNIST 800-171 compliancePurviewremediationSSP and policy developmenttechnical project management

inDirectIT is a federal CUI security and NIST SP 800-171 engineering firm. It designs, builds, documents, and operates NIST SP 800-171 environments across CMMC, federal cloud, and agency-specific requirements, and holds its own CMMC Level 2 certification (32 CFR Part 170) with 110/110 controls in its assessed environment.

Azure Government engineeringCMMC readiness and assessment preparationDefenderEntra IDevidence collectionIntunemanaged complianceMicrosoft 365 GCC High engineeringmock assessmentNIST SP 800-171 implementationPurviewSSP and POA&M developmentWDAC

Ingestigate is a document search, entity graphing, and investigation platform that ingests hundreds of mixed-format files (1,000+ file types including PDFs, Excel, images, parquet, and ORC) and makes them searchable and viewable. It uses local AI to automatically extract entities such as people, organizations, emails, phone numbers, and crypto wallet addresses and maps them on a live relationship graph. The platform offers sub-millisecond search, OCR, policy-based access control, and SaaS, on-premise, or air-gapped deployment. It was designed by a federa

air-gapped deploymentAPIdocument ingestionentity extractionfull-text searchOCRon-premise deploymentpolicy-based authorizationrelationship mapping

ISWIZ AI builds ontology-powered AI systems that model a business's operations as structured knowledge before deploying agents that act on it. Founded in San Antonio, TX, the company serves regulated industries including law, accounting, commercial real estate, manufacturing, surgical, dental, and retail, with deployments of Claude Teams, Microsoft Copilot, and local LLM inference on NVIDIA DGX Spark Grace Blackwell.

air-gapped inferenceAPI integrationClaude Teams deploymentknowledge modelinglocal LLM inferenceLoRA adapter trainingMicrosoft Copilot integrationmulti-agent orchestrationon-premise fine-tuningontology designworkflow automation