SIEM engineering

AZ Cyber Security Solutions is a full-service cyber security firm providing first-rate, world class cyber security solutions. The firm offers breach assessment, malware analysis, security engineering, penetration testing, proactive threat identification, incident response, and cyber security training, serving the Washington DC, Maryland and Virginia metro area.

Application DevelopmentBreach assessmentcontinuous monitoringCyber security trainingdigital forensic analysisincident responsemalware analysispenetration testingPrivacy AssessmentsProactive threat identificationRisk management framework (RMF) executionSection 508 complianceSecurity Assessment and Authorization (A&A)Security compliance auditsSecurity EngineeringThreat huntingvulnerability assessments

Chameleon Technologies is an owner-operated cybersecurity, privacy engineering, and AI assurance firm led by Yarick Tsagoyko with senior engineers Alexander George and Daniel Mirsky. It helps federal and regulated organizations design, automate, and operate secure cloud, SOC, CDM, compliance, and AI environments. Based in Potomac, Maryland, with nationwide delivery.

AI assurancecloud security architecturecompliance automationDetection engineeringdigital forensicsIaC and CI/CD automationincident responseMITRE SAF assessment automationPrivacy engineeringRMF/ATO evidence automationsecure DevSecOpsSOC modernizationthreat detectionZero Trust engineering

Creative Visions, LLC is a cybersecurity-focused small business supporting federal agencies, teaming partners, and commercial organizations with practical solutions for complex security environments. It integrates directly into customer environments to operate, maintain, and improve cybersecurity capabilities across on-premises, hybrid, and cloud infrastructures. It holds SBA 8(a), WOSB, Top Secret FCL, and GSA MAS 54151HACS designations.

cloud and identity securitycontinuous monitoringFISMA reportingincident responseprogram governance and PMO supportRMF and authorization supportsecurity control assessmentsSecurity EngineeringSOC supportthreat analysisvulnerability managementZero Trust-aligned modernization

Crest Security Assurance is a cybersecurity firm providing security services for federal agencies and commercial organizations, covering the full cybersecurity lifecycle from strategy and policy to assessment, authorization, continuous monitoring, and 24x7x365 defense operations. It is an ISO 9001:2015, CMMI-SVC 2, and 8(a) certified small business.

AI/ML GovernanceBlue Team Assessmentscloud securityCyber Threat Emulationdigital forensicsidentity and access managementincident responseInsider Threat analysisnetwork forensicspenetration testingpolicy developmentred team operationsRegulatory Audit SupportRisk Management Framework (RMF) supportSecurity Assessment and Authorization (A&A)Security EngineeringSOC operationsvulnerability managementZero Trust

Cybervisure is a Virginia-based cybersecurity and cloud engineering firm serving U.S. Government agencies, state, and private sector clients. The team brings over a decade of experience supporting DHS, DoD, and intelligence community programs at enterprise scale. They are CMMC Level 2 Self-Assessed and NIST SP 800-171 compliant, and have secured 15,000+ endpoints across DHS CISA's enterprise.

asset intelligence & CMDBcloud security posture managementcloud storage and backupfirewall & segmentationidentity & access managementincident responsemanaged detection and responsenetwork security engineeringSOC optimizationThreat huntingzero-trust network design

Fortis Services One Company (FSOne) builds, secures, and sustains information technology for federal government customers. It is wholly owned by the Kua Nalu Native Hawaiian Foundation, a Native Hawaiian Organization (NHO), and is a certified participant in the SBA 8(a) Business Development Program. FSOne is based in San Antonio, Texas, with nationwide coverage, and delivers software development, network engineering, database administration, and cybersecurity.

Cybersecuritydatabase administrationDISA STIG implementationICAM implementationincident responselegacy system modernizationNetwork engineeringPIV and CAC enforcementprivileged access managementRisk Management Framework executionSCAP and ACAS scanningsoftware development