Red Teaming

ClearFocus Technologies provides advanced cybersecurity solutions supporting Security Engineering, Security Operations, and Security Assessments, augmented by capabilities including Cyber Hunt, Cyber Deception, Adversary Emulation, Digital Forensics, Threat Analytics, and Industrial Control Systems (ICS) Cybersecurity. It supports both government and commercial enterprises and is an SBA Certified HUBZone small business founded in 2012. It has been appraised at CMMI Maturity Level 3 for Development and Services.

Adversary EmulationAI-Enabled Reverse EngineeringAI Infrastructure EngineeringCounter-Adversarial AICyber DeceptionCyber Huntdigital forensicsICS/SCADA SecurityNext Gen SOCpenetration testingPhishing Exercisessecurity assessmentsSecurity Engineeringsecurity operationsSIEMSOARthreat analyticsvulnerability assessments

ClearPoint Aero helps organizations detect unauthorized drones, understand airspace vulnerabilities, and prepare their teams to respond to incursions. The company takes a vendor-neutral, operator-led approach, bringing technology, procedures, and personnel together around an operation. It is veteran-led, FAA Part 107 certified, flies Blue UAS Cleared platforms, and is NDAA-compliant. It offers national coverage with a Utah headquarters.

aerial data processingairspace awarenesscounter-UAS operationsdrone detection and monitoringforensicsinspectionsmappingsurveillancetable-top exercisestrainingvulnerability assessments

COACT is a Service Disabled Veteran Owned Small Business founded in 1990 that provides cybersecurity and compliance services for government and commercial clients. It is accredited as a FedRAMP 3PAO and GovRAMP 3PAO and operates an ISO 9001:2015 quality system. Services include compliance support for FISMA, FedRAMP, GovRAMP, LADMF, NIST SP 800-171, and CMMC, along with penetration testing, software development, and operational support.

ACAB assessments for LADMFcontinuous monitoringDocumentation developmentFedRAMP 3PAO assessmentsgap analysisGovRAMP 3PAO assessmentspenetration testingrisk assessmentsecurity engineering and control implementationsocial engineering testingsoftware developmentSystem Administrationvulnerability assessments

Cordillera Applications Group is a research and analysis firm focused on resilience and risk management, guiding institutions through uncertainty via data-driven risk management, training, and strategic analysis. Its services include urban public safety, geopolitical intelligence, capability experimentation, and future warfare design and innovation. Clients include governments, corporate organizations, and NGOs in North America, Europe, Latin America, and Africa.

Capability Developmentconcept development and experimentationdata collection and analysismodelling and simulationpredictive modelingprogramme managementstrategic analysistechnology analysistrainingwargaming

Cyber 360 Services helps organizations modernize securely by combining pragmatic cybersecurity, cloud-native IT, and audit-ready compliance programs. The company offers two pillars of service: cybersecurity (Zero Trust, penetration testing, compliance, incident response, cloud security, SOC) and IT services (cloud architecture, DevSecOps, Kubernetes, IaC, data platforms, service desk). It operates with a 360° coverage model across 9+ cybersecurity practices and 9+ IT service domains, with 2 U.S. locations.

application developmentcloud architecturecompliance mapping (NIST CSF, ISO 27001, CIS)CSPMDevSecOpsIncident responseinfrastructure as codeKubernetesMFA/SSO/RBAC/PAMpenetration testingService DeskSIEM/SOAR operationsSOC managementthreat modelingvulnerability scanningweb developmentzero trust architecture

CYBER CIC assists proactive leaders in making informed, risk-based decisions to protect their organizations. They work directly with business owners, IT partners and insurance providers, and also help reactive leaders make crisis decisions. Their specialties include strategic advisors/fractional CISOs, cyber risk assessments, business-specific cybersecurity training, and policy, plans, and process reviews.

business intelligencecomputer and cell phone forensicsCyber risk assessmentscybersecurity trainingfractional CISO servicespenetration testingpolicy and process reviewsreputation assurancetabletop exercisesvulnerability assessments

CyberCile combines ethical hacking, security validation, and independent verification to help organizations find exploitable risk, fix what matters, and produce evidence they can stand behind. Led by founder and ethical hacker Cecile Mengue, the company offers human-led adversarial testing, remediation validation, and security assurance across critical systems, with financial technology security experience.

AI security and governancecode reviewpenetration testingremediation validationsecurity advisorySECURITY ASSURANCE

Cyber Defense Technologies (CDT) is a Service-Disabled Veteran-Owned Small Business established in 2010 that provides full-spectrum cyber defense services and mission-proven products to the Department of War, Special Operations, the Intelligence Community, federal, state and local agencies, and commercial and critical infrastructure organizations. Services span offensive security, compliance and authorization, security engineering, AI/ML, and threat detection and response.

A&AATOclassified network engineeringCMMC readinessDevSecOpsembedded system protectionFedRAMP readinessNIST SP 800-171penetration testingpurple teamingQuantum Readinessreverse engineeringRMFsecure developmentSecurity Engineeringsource code analysisSTIG implementationsystem hardeningVulnerability Research

Cyburity is a Huntsville, Alabama-based cybersecurity, IT, and compliance company founded in 2017. It is a CMMC Level 2 certified MSP and ESP serving the Defense Industrial Base, federal agencies, healthcare providers, and commercial teams, offering managed IT, offensive and defensive cybersecurity, compliance, AI services, and software development.

AI integrationblue teamingclassified systems supportCMMC compliance consultingDevSecOpsdigital forensicsIncident responsemanaged ITpenetration testingSIEM monitoringsoftware developmenttechnology resalethreat hunting

Cyinfos, incorporated in 2019, is a service disabled veteran-owned small business located in Glenn Dale, Maryland. Led by President and CEO Donovan I. Oubre, a retired military cybersecurity specialist with 25+ years of industry experience, the company specializes in cybersecurity solutions including ping & traceroute testing and red teaming, serving local, state, and federal government agencies.

cybersecurity engineeringping & traceroute testingtest and evaluation

DATTATRON provides secure, standards-based 5G and emerging 6G solutions with expertise in cloud-native 5G Core and Open RAN architectures. It offers Mobile Threat Defense (MTD) solutions including real-time threat analysis, threat intelligence, malware detection, and secure communications, with roots in R&D of Internet of Robotic Things (IoRT) and xIoT technologies.

5G Core SBA implementationcontinuous monitoringedge-integrated user plane optimizationend-to-end encryptionIncident responsenetwork slicingO-RAN-compliant Open RAN integrationrisk assessmentthreat modelingzero-trust design

Dynamo AI provides an enterprise platform for AI test, evaluation, guardrails, and observability, helping organizations identify, measure, and mitigate risks in generative and agentic AI. Its products include DynamoGuard guardrails and AgentWarden for securing AI agents, serving regulated industries such as financial services, insurance, and defense.

agentic AI security evaluationAI observabilityAI risk evaluationautomated stress testinghallucination detectionreal-time guardrails

Eagle Aerie Inc. has been in flight since 2014, providing access to a balance of extensive industry and government technical and programmatic leadership experience to assist industry and government organizations in advancing their individual objectives. The company was founded by David "DH" Hamilton, who spent 40 years participating in and leading ground and flight tests, Air Defense, defense and intelligence community Red Teaming, and leading development and production of complex and classified programs.

development and production oversightground and flight testingprogram management

Echelon Risk + Cyber is an award-winning risk and cybersecurity consulting firm providing vCISO and MSSP leadership for mid-market organizations, aligned with compliance across regulated industries. The firm offers managed security services, offensive security and adversary simulation, defensive security and hardening, risk advisory and GRC, and AI risk and security, serving industries including financial services, higher education, healthcare, technology and SaaS, and the Defense Industrial Base.

AI governanceBusiness continuity and disaster recoveryCompliance Readiness AssessmentsCybersecurity awareness trainingGRCincident response planningmanaged security servicespenetration testingpurple teamingrisk assessmentsSecurity Team as a Servicetabletop exercisesthreat huntingvCISOvulnerability management

Exploit Strike LLC is a cybersecurity professional services firm focused on securing infrastructures, systems, networks, and applications. It offers offensive, collaborative, and defensive security services, and its Exploit Shield product hunts credentials, tokens, and configs leaked on public developer platforms such as GitHub and Docker Hub.

adversary simulationDetection engineeringleak hunting on developer platformsOSINTpenetration testingpurple teamingreverse engineeringsecurity program developmentSOC advisoryvCISO consulting

FinalSec provides advanced cybersecurity consulting services designed to protect organizations from evolving digital threats, serving the Washington DC Metro Area and beyond. Its offerings include proactive risk assessments, continuous threat monitoring, and tailored risk management to keep businesses resilient and secure.

cloud testingDefensive Cyber Operationsdigital forensicsIncident responseIoT/Hardware Assessmentspenetration testingpurple teamingsocial engineeringsoftware securitysupply chain risk managementthreat huntingvulnerability assessments

Finite State provides an AI-native Product Security OS for connected devices, automating security and compliance workflows grounded in real product artifacts. Its platform covers threat modeling, SBOM generation from firmware, binaries, and source code, reachability analysis, VEX, and traceable compliance reporting aligned to frameworks such as EU CRA, FDA cybersecurity guidance, and NIST. It also offers practitioner-led product security services including regulatory readiness, pentesting, and certification accelerators.

binary analysiscompliance reportingfirmware analysispentestingreachability analysisSBOM generationsource code analysisthreat modelingvulnerability triage

Fortified Health Security provides tailored cybersecurity solutions for healthcare organizations, ensuring patient data protection and regulatory compliance. It is an MSSP partner for healthcare systems in the U.S. and across the globe, offering Advisory and Threat Defense services with a 24/7 Threat Defense center and dedicated security analysts.

24/7 SOCAttack surface monitoringIncident responseManaged connected medical device securityManaged endpoint detection and responseManaged phishing servicesManaged security awareness trainingmanaged SIEMManaged XDRpenetration testingsecurity risk assessmentsthird-party risk managementvirtual CISO servicesVulnerability threat management

or contact@fyrmassociates.com About Us Overview FYRM Associates is an information security and cyber security professional services organization that specializes in security analysis, testing, and training. Founded in 2008, FYRM has offered custom consulting services that help organizations with their information security and cyber security initiatives. Experience FYRM’s consultants average over a decade of experience, are highly skilled and well respected in the information security industry. Our technical team has information security experience with Fortune 500 companies, Federal Agencies and small and medium-sized businesses. No matter the size of your organization, with FYRM Associates you can have information security and cyber security initiatives completed correctly, quickly and within budget. Copyright 2008-2025 FYRM Associates, Inc.

application securityaudit supportcompliance consultingpenetration testingPurple Teamrisk assessmentssecure coding trainingsocial engineering

Greysys LLC is a small information security focused research and development company based in Maryland. It offers cyber-focused services to public and private sector agencies and companies with advanced cyber security needs, with engineers experienced in offensive and defensive tactics, techniques, and procedures.

anti-reversing and code protectionsattack reconstructionCNO software developmentcode reviewcomputer and network security assessmentdefensive analyticsfuzzinghost and network forensicsintrusion and malware analysiskernel development and debuggingpenetration testingproof of concept developmentrapid prototypingsoftware reverse engineeringsource code analysistechnical trainingthreat modeling

Guest Associates Inc. (GAI) provides strategic business development, consulting and marketing support services to companies seeking business with the Department of Defense, NASA, and other government agencies and commercial companies in the aviation and aerospace sectors. Founded in 1977 by Fred K. Guest, the company is headquartered in Huntsville, Alabama, with regional offices near major DOD and NASA installations and representation in London and Tel Aviv. Clients have been awarded an average of $70 million in contracts annually.

AS and ISO qualification procedures and certificationcompetition and historical pricing analysisdestructive testingengineering support servicesfirst article testing (FAT)Lean and Six Sigma analysismarket research and analysismerger and acquisition negotiationnew product development and placementnon-destructive testing (NDT)proposal strategy and developmentprototypingrequirements identification, assessment and qualificationstrategic marketing plan developmentsubcontracting and joint venture assistancetechnical data review and analysis including ITARtest planning

Helios Global, Inc. is a decentralized team of generalists and specialists drawn from public and private sector backgrounds, providing counter-subversion, risk management, and investigative services. The company aims to gain competitive advantage for clients through insight and foresight, navigating challenges such as international incidents, information warfare, data breaches, and high-value business transactions.

background checksdue diligenceequity chain mappinginvestigationsregulatory compliance analysisreputational risk assessmentsresearch and analysisvendor and partner screeningvetting

Hewani Data delivers human-verified data for AI teams, providing end-to-end data annotation, validation, and ML/GenAI engineering. The work is done by a full-time, trained team hired and trained from East African talent, rather than crowdsourced workers. Services span annotation, QA, analytics, and ML system design, with project management run from San Jose, California and a delivery hub in Nairobi, Kenya.

3D point-cloud labelinganalytics & data sciencedata cleaning & structuringdata validation & QADevOps supportfractional CDAOGenAI system designimage annotationimage & instance segmentationML proofs of conceptmodel evaluationprompt & response evaluationRLHF & preference rankingtext & NLP annotationvideo annotation

HiddenLayer provides an AI security platform that secures agentic, generative, and predictive AI applications across the entire lifecycle. Its platform offers AI Discovery, AI Supply Chain Security, AI Attack Simulation, and AI Runtime Security, backed by patented technology and adversarial AI research. The company serves roles such as CISOs, AI leaders, and application developers, and industries including financial services, technology, US federal government, and healthcare.

Agent Harness SecurityAgentic SecurityAI Attack SimulationAI DiscoveryAI GuardrailsAI Runtime SecurityAI Supply Chain SecurityModel Scanning