CMMC assessment

ArCybr is an accredited C3PAO (Third-Party CMMC Auditing Firm) that provides auditing services and guidance to help organizations achieve DFARS and CMMC Level 2 requirements. Founded in 2021 by CEO Claudine Adams as a woman-owned business, ArCybr was certified as a C3PAO in December 2022 by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC).

Defensive Cyber Operationsgap analysisinformation security governancemock assessmentspatching and scanningpenetration testingpolicy creation and implementationrisk managementrisk management framework supportvulnerability management

Cavalier Consulting is a Veteran owned cybersecurity consultancy firm, providing tailored vulnerability assessment, penetration testing, digital investigative, and compliance oriented services. They are Certified CMMC Assessors and help with CMMC needs.

compliance servicesdigital investigationspenetration testingVulnerability assessment

CiaberTech, LLC is a small business dedicated to cybersecurity for the Defense Industrial Base, government agencies, and agency contractors. It understands cybersecurity for both information technology (IT) and operational technology (OT/ICS), and also offers project management and industrial control system consulting. Staff hold certifications including CMMC Provisional Assessor, CMMC Practitioner, CISSP, PMP, and PMI-ACP.

Atlassian Tools integrationCMMC consultingDeltek Cobra integrationEPICS Control System developmentindustrial control system consultingNIST framework compliancepenetration testingPrimavera P6 integrationproject management

CyberPunX is a cybersecurity firm whose team of experts identifies vulnerabilities and engineers security solutions including encryption algorithms and intrusion detection systems. It offers immersive training programs and workshops, Insider Threat program assessment and guidance, CMMC readiness and assessment services, and tailored AI solutions for organizational challenges. The company was founded by former corporate leaders who shifted to protecting and defending organizations.

AI solution designCybersecurityencryptionInsider Threat program assessmentintrusion detectionOSINTpenetration testingrisk managementtraining and workshops

Defense Vision Industries helps defense contractors understand, implement, and demonstrate compliance with CMMC requirements, offering CMMC readiness and assessment services through a digital interface.

CMMC readinesscompliance implementation

Fortreum is a Top 5 FedRAMP 3PAO, Cyber-AB authorized CMMC C3PAO, and ANAB-accredited ISO certification body founded in 2020 by Michael Carter and James Leach. The company delivers independent assessment and advisory services across compliance frameworks including FedRAMP, CMMC, SOC 1 & 2, ISO 27001, HIPAA, PCI DSS, and GovRAMP, backed by its patented AI-native compliance automation platform (KOVR/XRAMP).

cloud penetration testingcompliance automationcontinuous monitoringFedRAMP assessmentgap analysisHIPAA assessmentsISO 27001 certificationPCI DSS assessmentpenetration testingred team exercisesSOC 1 & 2 audits

Kieri Solutions is an authorized C3PAO providing CMMC 2.0 compliance solutions for defense contractors. The company offers CMMC Level 1 and Level 2 consulting, NIST SP 800-171 consulting, CMMC gap analysis, and official CMMC Level 2 assessments. Its team of certified CMMC assessors averages 21 years of cybersecurity experience, and the company passed its own CMMC Level 2 assessment with DIBCAC and has completed 50+ assessments since CMMC went live.

CMMC consultingcompliance documentationgap analysisnetwork architecture blueprintsNIST 800-171 consulting

Koniag Cyber provides value-added reseller (VAR), managed IT services (MSP), and managed security services (MSSP) for mid-market and public sector teams. It secures the full lifecycle of technology: the hardware organizations buy, the systems it helps run, and the defenses that guard them. It is part of the Koniag family of companies, an Alaska Native regional corporation, and was born from Koniag Government Services.

AppSecC3PAO Level 2 assessmentcontinuous compliance (CAMO)Cybersecurity Assessmentendpoint telemetryIncident responseIT hardware and software procurementlifecycle and asset managementManaged It Servicesmanaged security servicesOT/ICS securitySIEM optimizationstaging and configuration