DevSecOps

Craft Designs, Inc. (CDI) is a Woman Owned Small Business located in Huntsville, Alabama specializing in safety critical/mission essential software solutions for defense, aerospace, industrial automation, medical systems, and information assurance. Incorporated in 1998, CDI is appraised at CMMI-DEV ML3 and holds ISO 9001 / AS 9100D certification.

3D model designARINC 615A/665 data loader developmentconfiguration managementDO-178C development up to DAL Aembedded systems programmingfuzz testingmodeling and simulationquality assurancereal-time data acquisitionsoftware developmentstructural coverage analysisverification and validationvideo production

Creative Development Group (CDG) is an SBA 8(a) certified Small Disadvantaged Business providing digital services for the public sector. Its mission is to create user-centered, accessible, and secure digital solutions that improve citizen experiences, aligning with the United States Digital Services playbook. Since 2018 CDG has supported DHS USCIS technical transformation, USDA FPAC transformation efforts, and modernization of the Department of Treasury's TTB systems.

agile developmentAI/MLbusiness process re-engineeringcloud adoptionDigital modernizationhuman-centered designplatform solutions

100% Native American–owned Family of Companies DNI features SBA 8(a) and HUBZone certified companies providing diverse, high-quality services & support to federal and commercial clients Work With Us WHO WE ARE The DNI family consists of 100% tribally-owned companies featuring SBA 8(a) certified and HUBZone companies operating as federally recognized prime contractors providing state-of-the-art enterprise IT services, cybersecurity services, research and development, construction, management, medical imaging, and professional services to federal and commercial clients. Headquartered in Oklahoma City, Oklahoma, DNI operates in over 30 states, has corporate offices in the Washington, D.C. metropolitan area and serves customers outside the continental U.S (OCONUS). About DNI OUR SERVICES Information Technology Cutting edge, mission-critical technology and computer related services for.

cloud installation/migrationcustom software developmentCybersecuritydesign/buildelectrical & telecommunicationsenterprise ITgeneral constructionHVAC & plumbingmodular constructionphysical securityprogram managementsteel fabrication

Crest Data is an AI-first product engineering and technology solutions provider offering security, observability, AI and ML, workflow automation, cloud, and data analytics solutions. The company reports 175+ global customers, 5000+ projects delivered, 60% cost savings, and 1000+ talented professionals, and partners with AWS, Google, ServiceNow, Datadog, Dynatrace, and Microsoft.

AI & MLCI/CDcloud infrastructureData AnalyticsDevOpsenterprise integrationsIaCManaged SOC operationsmigrationsMLOpsobservabilityProduct EngineeringsecuritySREworkflow automation

Crystal Technology provides IT services focused on business agility, artificial intelligence, cybersecurity, and data center services. Offerings include IT agility assessment and roadmaps, legacy system modernization, cloud-native and serverless architecture, machine learning model development, RPA implementation, and disaster recovery as a service.

cloud-native & serverless architecturecontainerizationCybersecuritydisaster recoveryIT agility assessmentLegacy system modernizationmachine learning model developmentmulti-cloud orchestrationRPA implementation

CTEC (Cybermedia Technologies, LLC) provides IT modernization, cloud and cybersecurity, and workforce training services to federal agencies. For more than 25 years, civil, national security and defense agencies have trusted CTEC to advance agency missions, accelerate digital transformation and ensure technology adoption. CTEC offers full-stack, end-to-end digital and IT modernization services, cloud migration, cybersecurity, and custom learning and development solutions.

agile software developmentAI and Machine LearningBreach Attack SimulationCI/CDCloud migrationCybersecurityeLearning developmenthuman-centered designInstructional DesignIT ModernizationLMS integrationpenetration testingprototypingsimulation-based trainingStaff augmentationUI/UX design

CTIS, Inc. is a Women Owned Small Business (WOSB) based in Rockville, Maryland with over 30 years of experience delivering Health IT solutions to clients in support of clinical trials and research. Founded in 1988 by Raj Shah, CTIS designs and implements innovative Health IT (HIT) solutions, specializing in clinical informatics for the National Institutes of Health (NIH), including the National Cancer Institute, NHLBI, and NIAID.

AI/MLClinical trial informaticscloud computingData ServicesHealth data standardsHealth ITIT infrastructure securityIT ModernizationPrivacy and security solutionsSafety reporting & monitoring

Cumulus Consulting is a veteran-owned, SDVOSB-certified technology consultancy delivering cloud architecture, DevSecOps, and AI integration to commercial and federal clients.

AI integrationcloud architecture

CWN (Carnwennan) is a strategic technology and consulting partner located in the DC Metropolitan area of Northern Virginia. It delivers enterprise solutions, cybersecurity, cloud development, DevSecOps, data solutions, AI and advanced analytics, and business consulting, helping organizations with digital transformation and secure-by-design practices.

AI and advanced analyticsBusiness consultingcloud developmentCybersecuritydata solutionsDigital transformation

Cyber 360 Services helps organizations modernize securely by combining pragmatic cybersecurity, cloud-native IT, and audit-ready compliance programs. The company offers two pillars of service: cybersecurity (Zero Trust, penetration testing, compliance, incident response, cloud security, SOC) and IT services (cloud architecture, DevSecOps, Kubernetes, IaC, data platforms, service desk). It operates with a 360° coverage model across 9+ cybersecurity practices and 9+ IT service domains, with 2 U.S. locations.

application developmentcloud architecturecompliance mapping (NIST CSF, ISO 27001, CIS)CSPMIncident responseinfrastructure as codeKubernetesMFA/SSO/RBAC/PAMpenetration testingRed TeamingService DeskSIEM/SOAR operationsSOC managementthreat modelingvulnerability scanningweb developmentzero trust architecture

Cyber B.A.T. Inc. is a Service-Disabled Veteran-Owned Small Business (SDVOSB) providing high quality engineering and consulting services to government customers and industry partners. It supports the government contracting and defense industry with cybersecurity, systems engineering, software, cloud and high performance computing, project management, acquisitions and logistics, and technical and proposal writing.

acquisitions and logistics consultingcloud and high performance computingComputer Network Operations/ExploitationCybersecurity assessmentsdigital signal processingfull-stack software engineeringoffensive and defensive cyber operationsproject managementSystems Engineeringtechnical and proposal writingtraining course development and instruction

Cyber Castellum is a cybersecurity consulting firm founded in 2018 that specializes in identifying security vulnerabilities in an organization's technology landscape. It helps organizations meet compliance requirements and build resilience against evolving threats, serving public sector and enterprise clients across industries including technology, government, healthcare, education, and financial services.

code reviewscompliance supportpenetration testingPhishing simulationssecurity assessmentssecurity awareness trainingthird-party external auditsvulnerability scanningweb application security assessments

Cyber Defense Technologies (CDT) is a Service-Disabled Veteran-Owned Small Business established in 2010 that provides full-spectrum cyber defense services and mission-proven products to the Department of War, Special Operations, the Intelligence Community, federal, state and local agencies, and commercial and critical infrastructure organizations. Services span offensive security, compliance and authorization, security engineering, AI/ML, and threat detection and response.

A&AATOclassified network engineeringCMMC readinessembedded system protectionFedRAMP readinessNIST SP 800-171penetration testingpurple teamingQuantum ReadinessRed Teamingreverse engineeringRMFsecure developmentSecurity Engineeringsource code analysisSTIG implementationsystem hardeningVulnerability Research

Cyberock provides cybersecurity services including enterprise security architecture, vulnerability and risk assessment, threat research, and implementation of enterprise security policy and standards. Its mission is helping organizations build resilient software applications to prevent malicious cyber attacks.

enterprise security architectureRuntime Application Self-Protection (RASP)security policy implementationthreat researchvulnerability and risk assessmentWeb Application Firewall (WAF) analysis

CyberSynthesis LLC delivers cybersecurity, cloud security, and IT services to government, defense, finance, healthcare, and small business sectors. Founded in 2023, the certified team provides scalable, compliant solutions aligned with NIST, RMF, FedRAMP, and DoD standards, specializing in Zero Trust architecture, threat detection, and secure cloud integration. It is a Service Disabled Veteran Owned Small Business (SDVOSB) based in New Hampshire, USA.

cloud architecture designCloud migrationCMMC consultingcompliance consultingdisaster recovery planningIncident responseIT infrastructure managementNetwork engineeringpenetration testingRisk Management Framework (RMF) implementationSecurity auditsSystems IntegrationThreat assessmentvirtual CISOvulnerability managementzero trust architecture

CybertLabs provides cybersecurity services focused on compliance excellence, including managed security, penetration testing, and cloud protection. Based in Plano, TX, the company helps clients nationwide meet standards like NIST 800-53, CMMC, and FedRAMP. Its team blends regulatory expertise with technical skill to deliver proactive, scalable security across cloud and on-prem environments.

cloud protectioncompliance frameworks (NIST 800-53, CMMC, FedRAMP)continuous monitoringendpoint protectionmanaged securitypenetration testingPKIRMF automationzero trust

CyberWorx is a SBA Certified Women-Owned Small business (WOSB) established in 2008 and based in San Diego, CA, focused on providing expert cybersecurity and technology consulting services. CyberWorx has supported highly technical efforts over the past 15 years providing lead architecture and systems engineering support to federal government and commercial customers, with senior staff averaging over 20+ years of experience.

AI & Data Engineeringcloud computingcompliance assessment & remediationCybersecurity consultingendpoint protection, detection & responselead architectureSystems Engineeringvulnerability and patch managementZero Trust security

CYBREX delivers cyber, cloud and AI talent and solutions for federal and commercial organizations. Through an AI-enabled consultant network of vetted cyber professionals, it provides managed services, cyber consulting, project-based delivery, and cyber staffing, including cleared professionals for government initiatives.

application securityBackup & Disaster RecoveryCloud Migration & ModernizationCybersecurityCyber staffingFinOpsIncident response / SIEMinfrastructure as codeMalware forensicsNetwork engineering & SD-WANpenetration testingSOARSOC engineering & managementthreat huntingvCISO advisory

Cybros, LLC is an SBA-verified Service-Disabled Veteran Owned Small Business (SDVOSB) and Minority Business Enterprise (MBE) delivering Information Security Program Management and modernized Cloud Security solutions to public and commercial sectors through its Cybros Fusion Center, a hybrid MSSP operated in accordance with NIST 800-53.

cloud securityCyber Range trainingdata loss preventionIncident responsemanaged detection and responsemanaged SIEMpenetration testingSecurity Automation & Orchestrationsecurity operations center as a servicethreat huntingvulnerability management

Cyburity is a Huntsville, Alabama-based cybersecurity, IT, and compliance company founded in 2017. It is a CMMC Level 2 certified MSP and ESP serving the Defense Industrial Base, federal agencies, healthcare providers, and commercial teams, offering managed IT, offensive and defensive cybersecurity, compliance, AI services, and software development.

AI integrationblue teamingclassified systems supportCMMC compliance consultingdigital forensicsIncident responsemanaged ITpenetration testingRed TeamingSIEM monitoringsoftware developmenttechnology resalethreat hunting

cyDaptiv Solutions, Inc. is a Bethesda, Maryland based firm specializing in Risk Management & Compliance and Cyber Security Solutions. Founded in 2014, the company focuses on cyber security engineering and technical expertise, pairing cyber security professionals with PMP certified project managers to serve federal clients at home and overseas. It holds ISO 9001:2015 and ISO 27001:2022 certifications.

Ansible automationAWS GovCloud migrationCI/CD pipelinesCloud migrationconfiguration managementcontainer technology evaluationdatabase managementIT supportnetwork analysispenetration testingperformance testingrisk assessmentsRMF Assessment and AuthorizationStaff augmentationsystem and network engineeringthreat monitoringvulnerability management

CYDEO Federal is a service-disabled veteran-owned small business (SDVOSB) that develops and modernizes government software and implements AI with human gates on irreversible actions. It reports a seven-year production estate including a case-management platform, a payment system with exactly-once processing, a learning platform, and a data warehouse. The firm has modernized its estate from a single server to Kubernetes and from ten microservices to three serverless systems.

accessibility testingAI implementation and governanceAPI-first platformsautomated regression testingcase managementCloud migrationcustom software developmentcyber range labsData Migrationinfrastructure as codelegacy modernizationpaymentsperformance testingreplatformingrequirements-to-tests traceabilityscheduled automationworkforce development

Cynest builds and integrates modular technology solutions, connecting components so businesses of any size can operate, scale, and grow. It offers hands-on consulting, self-service solution packages, and fully managed hosting. A veteran-owned, SAM.gov registered business with background in systems engineering, DevSecOps, cloud-native architecture, and AI infrastructure.

AI infrastructurecloud-native architectureconsultingmanaged hostingSystems Engineeringtechnical integration

CyOne, Inc. is a defense technology company comprised of cyber security specialists, software development engineers, intelligence analysts, and technological consultants whose experience spans multiple intelligence and engineering domains within the DoD. CyOne has developed the proprietary, modular, web-based COTS product line Wide-area ISR Discovery (WISRD), which supports Army and Joint intelligence, targeting, and battle management operations.

agile developmentapplication developmentCyber securitydatabase engineeringintelligence process integrationRisk Management Framework (RMF) implementationsoftware developmentSystems Engineeringworkflow development