Skip to content
777 Sourcing.

Capability

vulnerability scanning

Suppliers
76
States & provinces
27
Countries
3

76 vulnerability scanning suppliers across 27 states and provinces in 3 countries. Profiles show capabilities, materials, certifications, and facility locations so you can compare shops and build a shortlist.

Suppliers

BOUND PLANET LLC

FARMINGTON, MN

Bound Planet is a cybersecurity firm serving small and mid-sized businesses, helping them protect their data, achieve compliance, and stay ahead of cyber threats. The company specializes in CMMC readiness, cybersecurity assessments, cybersecurity program development, and cybersecurity operations management. It is located in the Twin Cities of Minneapolis and St. Paul and serves clients throughout the United States and Canada.

CMMC readinesscontinuous security monitoringCybersecurity assessmentsincident response planningpenetration testingpolicy developmentsecurity awareness trainingthreat detection and responsethreat hunting

BRACKISH SECURITY LLC

STEVENSVILLE, MD

Brackish Security is an offensive security firm that emulates real attackers against networks, applications, cloud environments, and people, then provides evidence, impact, and remediation guidance. Engagements include penetration testing, red teaming, and attack surface management, with reproducible findings, prioritized remediation, and retests to confirm fixes hold.

AI penetration testingattack surface managementcloud penetration testingconfiguration reviewspenetration testingphysical penetration testingRed Teamingsecure code reviewsocial engineeringwireless penetration testing

CadillacTech Services was formed in 2018 and serves the cybersecurity and technology management needs of the government and private sectors. It provides IT consulting and managed solutions, including cybersecurity, endpoint protection, IT infrastructure management, vCIO/vCTO IT leadership, government consulting, and public/private cloud architecture and hosting. Its teams are staffed 24x7 and it employs 100% US citizens.

backupscloud architecture and hostingdiligent monitoringendpoint protectionImpact analysisIT infrastructure managementITSM ticketingnetwork encryptionpenetration testingremote supportrisk/threat assessmentssystems and configuration analysisvCIO/vCTO IT leadership

Canfield CyberDefense Group (CCG), legally Canfield Consulting Group, LLC, is a Women-Owned Small Business and SBA 8(a) certified company founded January 1, 2013. CCG develops CheckMate, a self-contained cyber-defense security appliance powered by Phen.AI cognitive learning artificial intelligence, providing Zero Trust monitoring, threat detection, and automated response.

automated response and mitigationbehavioral analyticscognitive learning artificial intelligencecybersecurity trainingdeep packet inspectionforensic analysismachine learningpenetration testingtechnical supportthreat huntingZero Trust monitoring

Carolina CloudOps is an AWS-specialized firm based in North Carolina providing fixed-price AWS managed services, fractional CloudOps consulting, and security for small and medium businesses. It offers AWS architecture and cloud migration, FinOps and cost optimization, IAM governance audits, vulnerability scans, and disaster recovery planning.

AWS architectureCloud migrationcontainerization with Docker and ECSdisaster recovery planningFinOps cost optimizationIAM governance auditsinfrastructure as code with Terraform or AWS CloudFormationserverless solutions with Lambda

Chiron (Kai-ron) is a veteran owned company founded in 2004 with offices in Columbia, Maryland, and Augusta, Georgia. Its mission is to empower customers with cutting-edge cyber workforce development, intelligence analysis support, and IT engineering services, dedicated to measured, successful outcomes for clients while promoting professional growth and development of employees.

cyber workforce developmentintelligence analysis supportIT Engineeringnetwork operationsstaffing

CINTEOT INC.

CHAMBERSBURG, PA

Slide We specialize in all things Data & Cyber Security Certified as a HUBZone and Woman-owned Small Business ARE YOU SECURE?TRUSTED BY CYBERSECURITY & STIG COMPLIANCE BIG DATA & DEVELOPMENT SOFTWARE DEVELOPMENT SYSTEMS TESTING CCTV AND ACCESS CONTROLS CONSTRUCTION & FACILITIES SERVICES Cinteot Inc. is a small IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed-circuit television/security cameras and access controls, and construction/facilities.We are a Woman-owned and SBA Certified HUBZone company. LEARN MORE UNRIVALED SUPPORT Significant organizations have trusted us to develop and support their systems. Learn more > MORE THAN CYBERSECURITY We deliver a multitude of services in addition to Cybersecurity. Learn more > CRITICAL CERTIFICATION We’re HUBZone, SBA 8(a) and Woman-owned Small.

Big Data/HADOOP/AnalyticsCCTV and Access Controlscloud securitycomputer forensicsComputer Network Defenseconstruction managementCybersecurityData ScienceIncident responseintrusion detectionnetwork security monitoringsoftware engineeringSTIG Compliance TrainingSystems Testing

CISEVE, INC

BURLINGTON, MA

CISEVE is a Cyber AB Accredited C3PAO specializing in cybersecurity compliance and risk management services within the Department of War (DoW) supply chain. The company is one of the first CMMC C3PAOs and has over 50 years of combined experience. CISEVE is headquartered in Las Vegas, Nevada, with an additional office in Burlington, Massachusetts.

certification preparationCMMC assessmentsdocument reviewFISMA assessmentgap analysisICS assessmentsISO consultingmock assessmentspenetration testing

Collins Alliance Group (CAG), LLC is an IT Consulting Firm headquartered in National Harbor, Maryland, formed in 2007. It specializes in Advanced IT Solutions, Cybersecurity & Enterprise Technology Services, delivering systems administration, cloud computing & AI, operational cybersecurity, CUI enclave design, enterprise software automation, high performance computing, data assurance, logistics, data warehouse engineering, DevSecOps, and data storage engineering to commercial and government sectors.

Artificial Intelligenceautomationcloud computingCMMC Level 2 Pre-AssessmentCUI enclave designCybersecuritydatabase administrationData engineeringDevSecOpshigh-performance computingIT staffingLogistics Integrationpenetration testingRMF/ATO supportsystems administration

COMMON CYBER LLC

WINTER GARDEN, FL

Common Cyber helps defense contractors and federal programs design and build secure environments, prove they meet requirements, and sustain them for national security work. It provides CMMC and NIST SP 800-171 readiness, RMF and ATO support, security engineering, and Cross Domain Solution execution. Common Cyber is an SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and is not a C3PAO.

ATO supportAuditingCMMC readiness and scope assessmentcontinuous monitoringCross Domain Solution executionevidence maintenancemanaged complianceNIST SP 800-171 readinesspatch managementRMF supportsecure system designSecurity EngineeringSIEM integration

ComTech Specialists is a managed IT services provider founded in 2008 by owner Jon Panz, who began his technology career in 1998. The company works primarily with financial firms, including accounting practices, wealth management offices, bookkeeping and payroll firms, and tax professionals, providing IT support, security, cloud, and compliance services.

asset trackingAzure cloud managementBackup and recoveryCybersecurityendpoint detection and responsefirewall configurationHelp desk supportIT complianceManaged It ServicesMicrosoft 365 managementnetwork designpatch managementPhishing simulationsprocurementsecurity awareness training

Computer Forensic Services (CFS) is a Minneapolis, MN digital forensics firm with over 120 years of combined forensic experience. CFS provides digital forensic analyses, litigation support, advisory and consultation, and has analyzed 20,000+ devices across 2,600+ court cases. The team includes former state/federal law enforcement personnel and serves as a court-appointed neutral in complex litigation.

cloud forensicsdisk forensicselectronic discoveryemail forensicsevidence collection and preservationexpert witness testimonyIncident responseinternet forensicsmobile forensicsnetwork forensicspenetration testingsecurity assessmentssocial engineering simulationstraining and education

CONTROLCASE

FAIRFAX, VA

ControlCase, LLC is a United States based company headquartered in Fairfax, Virginia, with locations in North America, Europe, Latin America, Asia/Pacific, Australia and the Middle East. It is a provider of Compliance as a Service (CaaS), IT certifications, continuous compliance and cybersecurity services, supporting over 60 frameworks including PCI DSS, ISO 27001, HITRUST, SOC 2, GDPR, HIPAA, FedRAMP and CMMC.

application security reviewscertification assessmentscode reviewscompliance auditingevidence collection automationlog monitoringmanaged compliance solutionspenetration testing

CORGEVITY LLC

AUBURN, WA

Corgevity is a cybersecurity company specializing in comprehensive solutions to fortify businesses against cyber threats. It offers cybersecurity gap analysis, penetration testing, vulnerability scans, System Security Plan (SSP) preparation, POA&M services, Supplier Performance Risk System (SPRS) services, information security policy creation, customized training, and auditing. It also helps organizations map NIST 800-171r2 progress to CMMC 2.0 and offers an affordable cybersecurity appliance for small business and home user networks.

CMMC 2.0 compliancecompliance auditingcybersecurity gap analysisNIST 800-171r2 mappingpenetration testingsecurity training

Corner Bowl Software Corporation provides cost-effective security software and compliance training, including SIEM, vulnerability scanning, server monitoring, auditing software and compliance training for IT. Its products include Corner Bowl Server Manager, SCAP Vulnerability Scanner, Cloud SIEM and cloud-based uptime monitoring services.

Active Directory auditingapplication monitoringautomation and remote executioncompliance trainingevent log managementfile integrity monitoringintrusion detection and preventionlog collection and monitoringnetwork monitoringSCAP compliance checkingserver monitoringSIEMsyslog managementuser behavior analyticswebsite monitoring

CPP ASSOCIATES, INC

CLINTON, NJ

CPP Associates, Inc. is an IT services company that delivers secure, reliable, and scalable IT infrastructure for businesses operating on-premises, in the cloud, or in hybrid environments. It provides managed IT services, professional services and implementations, and IT strategy and consulting, including its InVision Managed Services offering with 24/7 monitoring and support. The company was co-founded in 2008 and serves classified and mission-critical environments.

24/7 monitoringbackup and disaster recoveryCloud migrationfirewall managementHelp desk supportimplementation servicesincident detection and responseIT consultingManaged It ServicesMicrosoft 365 administrationnetwork monitoringpatch managementVPN support

CUBELLE CONSULTING LLC

ARLINGTON, VA

Cubelle Consulting is a team of information security practitioners offering senior-level cybersecurity advisory to help organizations assess cybersecurity risk, close security and compliance gaps, and operate mature security programs without the overhead of a full-time CISO hire. They serve industries including software, manufacturing, utilities, and regulated environments such as CJIS, DoD, and NIST RMF programs.

framework assessmentincident response and disaster recovery testinginternal auditpenetration testingrisk assessmentsecurity assessmentSecurity implementationsecurity program management

CYBER 360 SERVICES LLC

MOORESVILLE, NC

Cyber 360 Services helps organizations modernize securely by combining pragmatic cybersecurity, cloud-native IT, and audit-ready compliance programs. The company offers two pillars of service: cybersecurity (Zero Trust, penetration testing, compliance, incident response, cloud security, SOC) and IT services (cloud architecture, DevSecOps, Kubernetes, IaC, data platforms, service desk). It operates with a 360° coverage model across 9+ cybersecurity practices and 9+ IT service domains, with 2 U.S. locations.

application developmentcloud architecturecompliance mapping (NIST CSF, ISO 27001, CIS)CSPMDevSecOpsIncident responseinfrastructure as codeKubernetesMFA/SSO/RBAC/PAMpenetration testingRed TeamingService DeskSIEM/SOAR operationsSOC managementthreat modelingweb developmentzero trust architecture

Cyber Castellum is a cybersecurity consulting firm founded in 2018 that specializes in identifying security vulnerabilities in an organization's technology landscape. It helps organizations meet compliance requirements and build resilience against evolving threats, serving public sector and enterprise clients across industries including technology, government, healthcare, education, and financial services.

code reviewscompliance supportDevSecOpspenetration testingPhishing simulationssecurity assessmentssecurity awareness trainingthird-party external auditsweb application security assessments

CYBERFORCEQ LLC

PLYMOUTH, MI

CyberForce|Q is a cybersecurity services company that provides professional resources 24x7 to support organizations' cybersecurity program advancement. Since 1995 it has served as a partner for clients, offering process improvement, automation, and measurable results through a collective model where participants share strategies and collaborate on strategic initiatives.

24x7x365 security monitoringaudits & compliancefirewall managementIncident responsepenetration testingrisk assessmentssecurity awareness trainingSIEM managementtechnology designvirtual CISO

CYBERNETICA AS

TALLINN, Tallinn

Cybernetica is an Estonian technology company that develops mission-critical systems for e-governance and defence based on in-house R&D. It describes itself as an architect of e-Estonia and has roots in the Institute of Cybernetics established at the Academy of Sciences in the 1960s. Its solutions have reached more than 35 countries, and it has developed technologies such as Timestamping for digital signatures, X-Road, Internet Voting, e-Customs and e-Tax.

capacity buildingcloud security testingconsultingpentestingR&Dred teamssoftware developmentsystem integrationturn-key solutionsuse-case discovery

CYBERSECWAVE LLC

SAN ANTONIO, TX

CyberSecWave is a Cybersecurity Consulting firm headquartered in San Antonio, TX, providing Cybersecurity, Project Management services and Microsoft solutions for government and commercial clients. It is a Service-Disabled Veteran Owned Small Business, Women Owned Small Business and Minority Owned Small Business. Services include RMF A&A, governance and compliance, threat and vulnerability management, IV&V, risk management and continuous monitoring, and cloud migration.

Cloud migrationgovernance & complianceincident response planningIndependent Verification & Validation (IV&V)patch managementpenetration testingpolicy developmentproject managementrisk management & continuous monitoringRMF A&AThreat Vulnerability Management

CYBERVAULT SYSTEMS LLC

MADISONVILLE, LA

CyberVault Systems LLC provides independent cybersecurity assessment, risk management and oversight services. It evaluates controls, documents risk and advises leadership, working alongside internal teams and managed service providers to turn findings into a practical, accountable security program. Leadership brings over 30 years of experience including former CISO and IT Audit Director roles, with CISSP, CISA and CISM credentials.

compliance evidence documentationcontrol mappingCybersecurity AssessmentHIPAA SRA assistanceincident response planningMSP oversightpenetration testingrisk managementSecurity auditsSOC 1 & SOC 2 audit readinessvCISO advisory

CYFLARE SECURITY INC

WEST SENECA, NY

Cyflare delivers SOC, MDR stack, and compliance evidence so service providers can scale cybersecurity across clients. It provides 24/7 detection and response across cloud, endpoint, identity, email, and network through its Cyflare ONE platform and SOC, serving MSPs, resellers, SMBs, and enterprises.

24/7 SOC monitoringalert triageautomated patchingcompliance readinessescalation and responseincident response planningpenetration testingtabletop exercisesvirtual patching

Related capabilities

Other processes offered by the shops that list vulnerability scanning.

Browse all capabilities