supply chain security

Aarno Labs is an MIT-founded computer security research lab founded in 2015 by MIT researchers. The team of experts in formal methods, program analysis, and dynamic instrumentation focuses on retrofitting security on legacy systems and devices, vulnerability discovery, high-assurance binary patching, and supply-chain protection. They have received 14 DoD, DARPA, and ARPA-H research grants with combined funding over $35M.

AI/MLbinary patchingdynamic analysisdynamic instrumentationformal methodsprogram analysisruntime protectionsoftware correctnessstatic analysisvulnerability discoveryvulnerability remediation

Apona offers four security products for teams that build software, embedded systems, and SMB clients: Labrador (SAST, SCA, and supply-chain security), Penzzer (dynamic fuzzing for medical devices, IoT firmware, and CAN bus/embedded targets), Safe Intelligence (agentless EASM and dark-web credential monitoring for SMBs), and Safe Password (shared-account credential management). Products are sold through a partner channel for MSSPs, AppSec consultancies, security VARs, and GSIs.

dark-web credential monitoringdynamic fuzzingexternal attack surface management (EASM)partner/channel programSBOM generationshared-account credential managementsoftware composition analysis (SCA)static application security testing (SAST)

Ask McConnell, LLC is a converged security services company in Dallas-Fort Worth, Texas, led by Principal Jim McConnell. It integrates physical security, cybersecurity, executive protection, investigations, and supply chain security, providing operational support, program management, training, and strategic advisory services for internal security teams.

crisis response planningEvent securityExecutive protection program managementfield operationsgovernance assessmentsInsider Threat Program designM&A/divestiture securityPhysical security vulnerability assessmentSecurity consultingSecurity metrics and program evaluationSecurity operations center designStaff augmentationTraining and tabletop exercises

Clutch Labs is a product development company that works with hardware-focused companies to create new intellectual property and move ideas from concept through full-scale mass production. They serve startups at all stages and Fortune 100 companies. Their specialty is complex electrical/mechanical co-design, and they have designed new manufacturing processes, built pilot-scale factories, and shipped products in multiple markets. They have authored/co-authored patents in areas including optical communications, authentication, cryptography, energy harvestin

At-Scale ProductionComponent selectioncustom PCB designdesign for manufacturingFirmware development in C/C++FPGA gateware development in Verilog/VHDLhardware designIoT integrationmanufacturingMechanical co-designpower systemsprototypingRuggedized solutions for extreme environmentssignal processing

Hopper Consulting (HC) is a family-owned, certified Service-Disabled Veteran-Owned Small Business (SDVOSB) delivering professional services to defense and federal civilian agencies in strategic planning, communications, logistics, supply chain security, analytics, and digital transformation. HC also offers Business Development and capture support to government contracting firms, providing full spectrum opportunity life cycle management with training classes, BD and capture services, and product templates.

business development and capture supportDigital transformationlogisticspredictive analyticsstrategic communicationsstrategic-planningtraining

iCES Corporation, founded in 2007 and based in McLean, VA, is an SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) that helps federal agencies and commercial enterprises develop, secure, and modernize complex systems through Agentic AI, cybersecurity, digital engineering (MBSE), and resiliency. It combines AI, cybersecurity, data science, and advanced systems engineering, from research and development through architecture, integration, and lifecycle support.

Agentic AIAI-enabled SOCAIOpscontinuous ATOdata fabricdata meshData ScienceDevSecOpsFedRAMP 20xFinOpshybrid/multi-cloudLLMOpsManaged It ServicesMBSE with SysML v2platform engineeringpost-quantum readinessRAGsatellite ground systemszero trust