threat modeling

AegisOrion LLC is a cybersecurity and engineering company servicing Government, Financial, Industrial Control Systems, and Corporate organizations. It builds resilience-first cybersecurity for space-ground links, embedded platforms, and high-assurance enterprise networks, protecting data across its full lifecycle. The company offers cybersecurity systems reviews, vulnerability analysis, threat intelligence, threat modeling, cryptographic systems engineering, RF/wireless penetration testing, custom application development, and procurement support.

application developmentcryptographic systems engineeringcybersecurity engineeringprocurement supportRF/wireless penetration testingSecurity architecture reviewvulnerability analysis

AIIT Systems provides security consulting and AI security software, including security code review, security architecture review and threat modeling, virtual/fractional CISO services, attack and penetration testing, cloud security, social engineering and phishing assessments, and security frameworks.

cloud securitypenetration testingSecurity architecture reviewSecurity code reviewSecurity consultingSocial engineering and phishing assessmentsVirtual/fractional CISO

Akumen, Inc. is an IT services and consulting firm dedicated to empowering federal agencies with innovative IT solutions that strengthen public safety and national security. It is an 8(a) Certified Small Disadvantaged Business (SDB) and a participant in the SBA's Mentor-Protégé Program, offering services including DevSecOps, cloud, data analytics, cybersecurity, emerging technologies, and digital platforms.

AICI/CD securityCloud migrationcloud securityCybersecuritydata integrationData Sciencedata visualizationDevSecOpsgovernance risk and compliancemachine learningsecure coding training

AlphaVerify is a compliance and AI governance consulting firm based in Champaign, IL, serving defense contractors and regulated technology companies nationwide. It helps clients meet CMMC, FedRAMP, SOC 2, ISO 27001, GDPR, HIPAA, and AI governance requirements, backed by 25+ years of hands-on infrastructure and identity work. It also offers fractional CTO engagements.

AI governance advisoryarchitecture reviewassessment and certification prepcompliance consultingFractional CTOgap analysispenetration test coordinationpolicy and control design

Virtual Guardian is a U.S.-based cybersecurity VAR and integrator built by leaders behind security firms including NaviLogic, AmeriNet, Accuvant, and FishNet Security. It is a wholly owned, independently operated subsidiary of ESi Technologies, providing risk assessments, offensive testing, compliance programs, vendor risk programs, and enterprise security and AI-ready network architecture.

compliance gap analysisNetwork architecturepenetration testingphysical assessmentremediation roadmappingrisk assessmentssecurity architecturesocial engineeringvendor risk managementvulnerability scanning

Aquia Inc. is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that helps federal agencies and state governments modernize systems and processes. Since 2021 it has delivered cloud, cybersecurity, AI, data engineering, design, DevSecOps, and software engineering services, and was named the 2024 SDVOSB of the Year by the Department of Health and Human Services.

AI strategy and use case identificationCI/CD pipeline implementationcloud migration and optimizationContainerization and orchestrationcontinuous ATOdata pipeline design and operationsgenerative AI platform developmentLegacy system modernizationmachine learning development and deploymentpenetration testingpurple teamingsoftware engineeringUX/UI Designvulnerability management and remediationzero trust strategy and implementation

Ardus Technologies is a joint-venture cybersecurity firm founded by Solvitur Systems and ClearFocus Technologies. It offers cybersecurity and IT services including risk management, incident response, compliance, security operations, security engineering, security assessments, privacy and data protection, cyber threat intelligence, cloud modernization, and program and project management, delivered by certified professionals from both founding companies.

application modernizationCloud migrationcloud-native developmentcompliancecybersecurity risk managementCyber Threat Intelligencedata classificationIncident responseIT auditpenetration testingprivacy impact assessmentsprogram and project managementsecurity code reviewsSecurity Engineeringsecurity operationsvulnerability assessments

Assured Information Security (AIS) delivers cyber, SIGINT, and cross-domain solutions for the U.S. Department of Defense and federal intelligence agencies. Founded as a software company focused on Air Force and DoD cyber technology research, AIS provides products and services including AI/ML red teaming, secure product consulting, threat modeling, and CSfC solutions. The company is an NSA CSfC Trusted Integrator and has achieved CMMC Level 2 certification.

advanced researchAI/ML Red TeamingC5ISRCSfC SolutionsCyber Operationsmission solutionsSecure Product ConsultingTrusted Systems

Atredis Partners is a 100% worker-owned, research-driven information security firm offering customized security assessments and consulting. The company provides application security, AI and machine learning security, cloud and infrastructure security, embedded and hardware security, OCP SAFE assessments, adversarial services and penetration testing, and risk and advisory services. It has delivered public security research on products from Google, Microsoft, Lenovo, Motorola, Samsung and HTC, and received four research grants from DARPA.

binary analysishardware and firmware reverse engineeringpenetration testingprotocol analysisRed Teamingreverse engineeringsecurity assessmentsvCISO advisoryVulnerability Research

Ayva Networks is a locally owned, independent, not-for-profit initiative providing next-generation wireless and fiber internet access to mountain communities of Boulder County, Colorado. It is run by technical enthusiasts and engineers and is part of Cloudflare's Project Pangea Initiative. It also offers specialized networking and enterprise security services.

compliance reviewsdesign auditsFiber Internetground-station operationsNetwork architecturesecurity architecturewireless internet

Bawn, Inc. is a cybersecurity and cyber risk engineering firm built by former FBI cyber agents. It helps organizations prevent attacks, reduce exposure, and prepare for incidents through risk assessment, security strategy, mitigation, vCISO services, incident response planning, and managed IT services.

24/7 monitoringcompliance guidancedata backupincident response planningManaged It Servicesmulti-factor authenticationpatch managementrisk assessmentsecurity strategy developmentvCISOVPN servicesVulnerability assessment

Blue Cloak, LLC is a cybersecurity and systems engineering company based in Chantilly, Virginia. It delivers cybersecurity solutions and high-fidelity cybersecurity infrastructure, including customizable mobile cyber ranges and advanced systems engineering, enabling defense and enterprise teams to execute scenarios in electronic warfare, multi-vector threat modeling, and strategic information operations.

compliance auditsCybersecurityelectronic warfareInformation Operationsnetwork emulationpenetration testingSystems Engineeringtactical cyber trainingtest and evaluationValidation and Verificationvulnerability assessments

Bold Type is a U.S.-based, ISO 13485-certified engineering firm that develops FDA-compliant medical device electronics and software. Its integrated team covers embedded firmware, wireless systems, mobile and cloud apps, electronics design, and cybersecurity, supported by medical device veterans, cybersecurity experts, and AI-assisted development. Its CyberMed division provides threat modeling, penetration testing, and post-market cybersecurity management.

antenna designBLEcellular (LTE-M, NB-IoT)cloud infrastructurecybersecurity engineeringElectronics Designembedded software developmentFDA submission supportIEC 62304 lifecycle processesISO 13485 documentationmobile app developmentPCB designpenetration testingrapid prototypingrisk managementSBOM generationUsability engineeringWi-Fiwireless systems design

Brightline Solutions delivers enterprise-grade software engineering, cloud development, and AI-enabled automation to government clients. Founded after its founder led large-scale software initiatives at Amazon and other technology firms, the company aims to bring enterprise-level quality and modern engineering practices to all levels of government. It is located in Oklahoma City, OK and serves clients nationwide.

Agile/SAFe process coachingAI workflow orchestrationautomated reportingBusiness dashboardsCI/CD pipelinesCloud optimization and migrationCustom process automationData analysis and model integrationData pipeline implementationFull-stack web and platform developmentInfrastructure as Code (IaC)legacy modernizationLLM-powered automationpenetration testingSecure code analysisSecurity auditstechnical architecture guidance

CANIDS LLC is a premier provider of advanced cybersecurity and wireless engineering services. Led by a Doctor of Engineering candidate with over 30 years of experience in the Intelligence Community and U.S. Army Cyber Operations, the company specializes in the security of RF environments and the deployment of hardened 5G infrastructures. It is a Veteran-Owned Small Business Enterprise (VSBE).

5G LAN design and hardeningcloud-native securityDefensive Cyber OperationsDevSecOpsRF signal analysisrogue AP mitigationwireless auditswireless site surveys

Capstone Security is an independent information security consulting firm founded in 2000. For more than twenty-five years it has helped clients protect critical data, harden applications, maintain compliance, and reduce overall risk, serving federal agencies and enterprises across industries including healthcare, financial services, retail, energy, technology, and hospitality. Every engagement is senior-led, with no products sold and no vendor commissions.

CI/CD pipeline securitycloud architectureCloud migrationcontainer & Kubernetes securitycontrol reviewsgap analysisincident response supportinfrastructure as code securitypenetration testingpolicy developmentrisk assessmentsecrets managementsecure code reviewsecurity awareness trainingsocial engineeringSystems IntegrationVulnerability assessmentwireless security assessment

Certus Cybersecurity is a provider of product security services that helps organizations secure their software and hardware, including emerging technologies. It serves Fortune 100 enterprises, global law firms, and high-growth businesses worldwide, pairing deep technical expertise with automation and manual testing.

adversarial testingcloud configuration reviewcloud penetration testingCloud Security Assessmentcontinuous monitoringdevice design reviewdevice penetration testingfirmware analysishardware security testingmanaged detection and responsepenetration testingprivacy-leakage analysissecure code reviewsecurity trainingthreat hunting

Crossconnect is an on-demand IT solution partner specializing in IT support for mid-sized enterprises. It resolves complex IT issues, handles emergencies, fills knowledge gaps, and provides professional and co-managed services with 24x7 support. The company holds certifications such as CCIE, PCNSE, and MCSE and is a Palo Alto Networks Certified Professional Services Partner Specialization (CPSP).

Backups and disaster recoverycloud networking designfirewall managementload balancingnetwork access control deploymentpenetration testingrouting and switchingSASE implementationTerraform infrastructure-as-codevirtualizationwireless

Cyber 360 Services helps organizations modernize securely by combining pragmatic cybersecurity, cloud-native IT, and audit-ready compliance programs. The company offers two pillars of service: cybersecurity (Zero Trust, penetration testing, compliance, incident response, cloud security, SOC) and IT services (cloud architecture, DevSecOps, Kubernetes, IaC, data platforms, service desk). It operates with a 360° coverage model across 9+ cybersecurity practices and 9+ IT service domains, with 2 U.S. locations.

application developmentcloud architecturecompliance mapping (NIST CSF, ISO 27001, CIS)CSPMDevSecOpsIncident responseinfrastructure as codeKubernetesMFA/SSO/RBAC/PAMpenetration testingRed TeamingService DeskSIEM/SOAR operationsSOC managementvulnerability scanningweb developmentzero trust architecture

The Cybersecurity Risk Foundation provides research and resources for cybersecurity professionals, including frameworks, policy guides, safeguards, and an online assessment tool to help manage and mitigate risks. Its offerings include the CRF Governance & Risk Model, Threat Taxonomy, Maturity Model, Third Party Risk Model, Audit Framework, and Business Intelligence Model, plus a unified library of cybersecurity controls mapped to 90+ standards and frameworks.

cybersecurity governance and risk modelingcybersecurity researchcybersecurity risk assessmentsmaturity assessmentonline assessment toolpolicy templates

Cytense Inc. is a defense contractor delivering integrated cybersecurity, artificial intelligence, systems engineering, and model-based systems engineering (MBSE) solutions for the Department of Defense and Intelligence Community. The company brings technical expertise in embedded systems security, threat modeling, and AI/ML-driven capabilities, and partners with government and defense organizations from compliance and accreditation to advanced system design.

AI/ML workflow developmentArtificial Intelligencecompliance and accreditationCybersecurityDigital Engineeringembedded systems securityModel-Based Systems Engineering (MBSE)software engineeringSystems Engineeringtraining

DarkHorse Information Security is a cybersecurity consulting firm founded by experienced security professionals. It helps businesses defend against digital threats through penetration testing, security audits, incident response, blockchain security, access controls, and custom software development, tailored to each organization's risks. The firm also offers the HADES Scanner, a metadata forensics engine with malware detection and MITRE ATT&CK mapping.

blockchain securitycode reviewcustom software developmentforensic investigationidentity and access managementIncident responsepenetration testingSecurity auditssmart contract audits

DATTATRON provides secure, standards-based 5G and emerging 6G solutions with expertise in cloud-native 5G Core and Open RAN architectures. It offers Mobile Threat Defense (MTD) solutions including real-time threat analysis, threat intelligence, malware detection, and secure communications, with roots in R&D of Internet of Robotic Things (IoRT) and xIoT technologies.

5G Core SBA implementationcontinuous monitoringedge-integrated user plane optimizationend-to-end encryptionIncident responsenetwork slicingO-RAN-compliant Open RAN integrationRed Teamingrisk assessmentzero-trust design

Decision Point Security performs cybersecurity Independent Verification and Validation (IV&V) Test and Evaluation (T&E), and risk assessments. The company specializes in ensuring cybersecurity systems and processes function securely and comply with industry standards and regulations, providing independent, objective assessments to U.S. Government agencies, commercial businesses, and public services. It was founded by David Davis and Casey Cook, a team of experienced cybersecurity professionals.

Incidence response planningIndependent Verification and Validation (IV&V)penetration testingRisk AnalysisSecurity audits and compliance assessmentstabletop exercisesTest and Evaluation (T&E)Vulnerability assessment