vulnerability management

Evalv IQ LLC is Louisiana's first minority female-owned, full-service cybersecurity, AI, and technology consulting firm, headquartered in New Orleans. It provides AI solutions and IT services alongside proactive strategies to manage cybersecurity risks, serving both public and private sectors. The firm has secured more than $50 million in economic gateways and offers tailored managed security aligned to its clients' mission and compliance requirements.

24/7 threat monitoringAI strategy developmentaudit supportcompliance frameworksData Protectionexposure managementincident response planningIT infrastructure managementManaged Cybersecurity Servicesnetwork securityrisk quantificationsecurity awareness training

Fast Computers is a managed IT services provider (MSP) serving small and mid-sized businesses, offering complete IT management and cybersecurity solutions. The company states it has thrived helping SMBs control IT costs and eliminate unexpected IT disruptions for more than 25 years, and describes over 20 years of experience. It is a Blue Diamond Datto Partner and its president sits on Datto's partner advisory board.

Azure Virtual Desktop deploymentbackup and disaster recoverycloud securitycybersecurity auditshardware procurementManaged It ServicesMicrosoft 365 managementnetwork monitoringRemote and on-site tech support

FEDFORTRESS is a woman-owned and service-disabled veteran-owned small business supporting federal agencies and their partners. It brings together cybersecurity, IT infrastructure, physical security, and custom software to solve federal mission problems, delivering implementation, processes, and documentation needed for authorization and accreditation decisions.

accreditation coordinationcontrol implementationcustom software developmentRMF and ATO supportSCIF planning and implementation supportsecure network designSTIGssystem hardeningvirtualization

FJ5 Solutions is an IT consulting firm based in San Antonio, Texas, offering comprehensive IT consulting services to businesses of all sizes. With over 30 years of experience in cybersecurity, computer networking, and wireless engineering, the team helps CIOs and their teams optimize technology infrastructure and improve security posture.

business intelligenceCloud Solutions Design and ImplementationComputer Networkingcustomer experience designCybersecurityData Analyticsdata warehousingdigital strategyIncident responseIT strategythreat intelligencewireless engineering

FlashIntell Inc. is a small business dedicated to supporting federal, state, and local agencies with mission-driven cybersecurity services. It provides tailored security governance and compliance, security assessments, risk management, and continuous monitoring to help partners meet evolving security standards, reduce risk, and protect critical systems and data.

Business Continuity & Disaster Recovery Managementcloud securitycontinuous monitoringIncident responseNIST Risk Management Framework (RMF)penetration testingPOA&M managementPolicy managementrisk assessmentSecurity Assessment & Authorization (SA&A)Security Governance & Compliance

Fleet Device Management Inc. is the open-core company behind the leading open-source device management platform for Apple, Linux, Windows, Android, and more. Fleet enrolls millions of laptops and servers and is popular with enterprise IT and security teams. It is an all-remote company with 70+ team members across four continents and nine time zones, founded in November 2020 by Zach Wasserman and CEO Mike McNeil.

AI governanceAPI automationdevice management (MDM)endpoint telemetryGitOps / infrastructure as codeOS updatespatch managementpolicy automationself servicezero-touch onboarding

Forsyte IT Solutions is a cybersecurity provider offering managed security services and its flagship Microsoft-native platform, Guardian 365. Guardian 365 delivers 24x7x365 SOC monitoring, managed detection and response, threat hunting, incident response, identity protection, and continuous posture improvement. Forsyte serves higher education, K-12 education, state and local government, healthcare, nonprofits, and commercial organizations.

Identity and Access SecurityIncident responsemanaged detection and responseMicrosoft Defender XDR deploymentMicrosoft Entra identity securityMicrosoft Purview data protectionMicrosoft Sentinel managementpenetration testingsecurity assessmentssecurity operations center monitoringthreat huntingZero Trust strategy

Fortek Cybersolutions LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded and led by Jorge Zapata, a U.S. Marine Corps combat veteran and Purple Heart recipient. Fortek supports government agencies, prime contractors, and mission-focused organizations by reducing operational friction through compliance activities, technology operations, and stakeholder coordination, including cybersecurity, cloud and infrastructure administration, systems and network support, IT service management, and help desk operations.

automation-enabled workflowscloud and infrastructure administrationcompliance-oriented documentationcybersecurity activitiesHelp desk operationsIT service managementmodernization initiativesnetwork monitoring and administrationPOA&M managementSSP activitiessystems administrationsystems and network supportTier I / Tier II support

Fortidm Technologies LLC, founded in 2005, is a Princeton, NJ based professional service IT systems integration and management consulting firm delivering cybersecurity, compliance and cloud solutions for commercial and government clients. It is a contract holder of GSA MAS Schedule 70 and GSA Highly Adaptable Cyber Security Services (HACS).

Cloud migrationcompliance managementdata backup and recoveryIncident responseIT consultingnetwork design and implementationpenetration testingrisk assessmentSIEM/MSSP

Fortress Information Security is an AI-powered risk management company defending critical infrastructure and government agencies against cyber threats. It provides a platform for cyber supply chain risk management (C-SCRM), third-party risk management, vulnerability management, software supply chain security, and GRC/CIP compliance, combining AI agents with human analyst validation. It serves eight of the top ten U.S. investor-owned utilities and multiple U.S. military branches.

AI-powered risk managementexposure managementforward deployed engineersGRC and NERC CIP complianceManaged ServicesSBOM and HBOM analysissupply chain risk managementthird-party risk management

FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management. The company provides tools to scan packages, containers, SBOMs, binaries, and snippets, helping organizations reduce legal and IP risk, consolidate vulnerability management, comply with regulatory reporting, and keep software dependencies updated. FOSSA also offers fossabot, which automatically reviews dependency updates for breaking changes and code impact.

automated policy enforcementdependency scanningguided remediationLicense complianceSBOM generationsoftware composition analysis

Foxguard provides cyber security software and services and custom computing solutions. Its Cyberwatch platform covers asset consolidation, vulnerability management, compliance management, and patch management/deployment, with expertise in NERC CIP, NEI/Nuclear, and NIST CSF. It also designs, builds, integrates, and supports custom compute products including ruggedized, small form factor, workstation, and rack solutions. It is backed by parent company Framatome and serves more than 700 customers.

asset consolidationbuild and integrationcompliance managementconsulting and designfield services and installationpatch managementprecision manufacturingprototypingsupply chain sourcingsupport and optimizationsystem testing and validation

Foxhole Technology is an employee-owned, Service-Disabled Veteran-Owned Small Business founded in 2007 as an IT Engineering firm. It provides cybersecurity, software development, systems engineering, and test & evaluation solutions to federal civilian and defense agencies and commercial clients.

AI/MLArchitecture/Infrastructure ModernizationBig Data and Data Sciencecloud optimizationcybersecurity engineeringDevSecOpsIncident responsepenetration testingresearch and developmentreverse engineeringSOC operationsSoftware/Application DevelopmentSystems & Network EngineeringTest & EvaluationThreat Hunt and Forensics

FRSecure is an information security company that builds better security cultures and programs for organizations. It offers services including Virtual CISO, incident response, risk assessment, penetration testing, vulnerability management, and compliance preparation, and states it does not sell third-party products.

attack simulationCloud Security AssessmentCMMCgap assessmentIncident responsePCI DSS QSApenetration testingPurple Teamrisk assessmentSOC 2 audit preparationsocial engineeringtabletop exercisesvendor risk managementvirtual CISOvulnerability scanning

Fusion Advanced Technology, LLC is a cybersecurity and IT services company based in Laurel, Maryland, founded by Gloria Fenwick. It provides cybersecurity services including security assessment and authorization, security testing and auditing, risk assessment and management, security architecture design, incident response, vulnerability management, governance risk and compliance, endpoint security, cloud security, encryption, and program and project management. The company serves the Department of Defense, the Intelligence Community, and state and local

cloud securityCybersecurity Advisory and ServicesCybersecurity Program & Project ManagementEncryption and Data Protectionendpoint securitygovernance risk and complianceIncident response and managementnetwork and system administrationrisk assessment and managementsecurity architecture designSecurity Assessment and Authorization (A&A)Security Testing and Auditing

Generation IX is a managed IT service provider serving small and mid-sized businesses in Los Angeles, Orange County and the Bay Area since 1996. It provides managed IT, co-managed IT, help desk support, cloud and Microsoft 365, network and infrastructure, backup and disaster recovery, Mac and Apple support, and managed security including 24/7 monitoring, MDR, email security, vulnerability management and incident response. It also offers IT strategy and vCIO/vCISO services, compliance support and AI consulting.

24/7 SOC/SIEM monitoringAI consultingbackup and disaster recoveryCloud migrationco-managed ITcompliance supportemail securityHelp desk supportIncident responseIT staff augmentationMac and Apple supportmanaged detection and responseManaged It ServicesMicrosoft 365 managementnetwork and infrastructure managementpenetration testingrisk assessmentvCIOvCISO

Gold Assured Consulting LLC is a cybersecurity consulting firm based in Chicago, IL, USA. It helps organizations safeguard their digital assets through tailored cybersecurity consulting services, assessing risks, enhancing system defenses, and ensuring compliance requirements are met. Its professionals provide vulnerability management, incident response planning, and security assessments.

compliancecontrol testinggovernance and policy developmentincident response planningrisk assessmentsecurity assessments

Go Security Pro is a cybersecurity consulting firm based in Tulsa, Oklahoma, that helps enterprise leaders reduce risk and run their business with confidence. Founded in early 2019 by CEO Geoff Wilson and co-founder Susan Wilson, the firm takes a people-and-processes-first approach, digging into operational vulnerabilities and recommending strategies and tactics for lasting results.

compliance and GRC advisoryCybersecurity consultingpenetration testingrisk assessmentsvirtual CISO

GRAVICOM LLC is a company focused on Cyber Security, Risk Management, and Engineering Services, providing products and services for Government and Commercial customers. It is a Navy Qualified Validator (NQV) and USMC Validator company offering senior Information Assurance professionals to build, populate, validate, and maintain Risk Management Framework (RMF) packages. It has 10+ years of corporate experience operating as a Software Support Activity (SSA) for Navy afloat systems and provides Information Security Systems Engineering for DoD Enterprise sys

ACASAssessment and Authorization (A&A)Automation and Solutions EngineeringComputer Aided Drafting and SimulationComputer Network DefenseeMASSinformation assurancePatent Protection and Intellectual Propertyprocess controlProgrammable Logic Controllers (PLCs)Risk Management Framework (RMF)roboticsSCAPSTIGsSystems Integration

Grindstone is an innovative, Minority Owned Small Business specializing in providing cutting-edge cybersecurity solutions to businesses and government agencies in the Mid-Atlantic region. It uses industry best practices and proven approaches to mature clients' cybersecurity programs into risk-based, flexible, and secure programs, transforming IT and cybersecurity into key business enablers.

continuous monitoringFISMA compliance supportGRChybrid cloud securityremediationrisk management framework assessment and authorizationsecurity project managementvulnerability scanning

Handy Enterprise LLC provides federal cybersecurity, cloud security, governance, risk, compliance, and authorization support. The company helps federal and commercial organizations assess risk, strengthen security posture, maintain compliance, and move critical missions forward. It is a Woman-Owned Small Business located in Frederick, Maryland, with 15+ years of federal cybersecurity experience.

AI governance readinesscloud security architectureconfiguration managementcontinuous monitoringcybersecurity advisoryFISMA complianceidentity & privileged access managementincident handlingRMF & ATO lifecycle supportsecurity operationsSIEM operationstrainingZero Trust readiness

Harper Consulting is a cybersecurity and IT consulting firm serving government and private sectors. Founded in 2012 by Maurice Harper, it delivers tailored cybersecurity, information assurance, audit compliance, and project management services, helping organizations reduce risk and meet security standards.

asset managementaudit complianceCybersecurityframework complianceinformation assurancepenetration testingproject managementsystems and network engineeringthreat modelingweb application security testing

Indigo Arc is a consulting and cloud solutions company specializing in the design, development and implementation of highly available and secure solutions for government and commercial clients. Founded in 2004, it offers consulting services and turn-key cloud-based solutions, with teams of solution architects, computer engineers, software engineers and business specialists.

application refactoringcloud migration strategy and implementationcontainerization and microservicesCybersecurityData engineeringDisaster recovery and business continuitymachine learning and AImodel-based systems engineeringNetwork engineeringpenetration testingReliability-Centered MaintenanceSite reliability engineeringsoftware developmentSystems Engineeringsystems integration and development

Infinite Syber is a cybersecurity company that provides end-to-end security solutions to protect businesses from cyber threats. Its services include penetration testing, vulnerability management, incident response, digital forensics, secure code testing, data privacy solutions, and blockchain network security. The company aims to transform cybersecurity from a defensive necessity into a strategic advantage.

blockchain securitydigital forensicsIncident responsenetwork security architecturepenetration testingsecure code testingsecurity assessmentsecurity trainingstatic and dynamic code analysis