Skip to content
777 Sourcing.

Capability

vulnerability scanning

Suppliers
76
States & provinces
27
Countries
3

76 vulnerability scanning suppliers across 27 states and provinces in 3 countries. Profiles show capabilities, materials, certifications, and facility locations so you can compare shops and build a shortlist.

Suppliers

DAVID CAIL

FORT WORTH, TX

BARIM Enterprises was founded by Navy veterans who have dedicated their careers to protecting companies from current and emerging cyber security threats. They conduct thorough cyber security health checks and are a global team of cyber security experts and IT Security specialists.

governance and compliance reviewIncident responsepenetration testingrisk assessmentsecurity health checksTechnical Writingtraining

SecPoint® is a Danish-owned European cybersecurity vendor providing vulnerability scanning, UTM firewall protection, cloud scanning, Dark Web Search, Safe DNS, RBL toxic IP blocking and authorized WiFi penetration testing. The company states 1997 cybersecurity experience, 146,000+ vulnerability signatures, 34 technical scan profiles and customers/partners in 140+ countries, with real human support options.

anti-spamcloud/SaaS scanningDark Web Searchemail server protectionIPSSafe DNS filteringUTM firewall protectionVPNwhite-label reportingWiFi penetration testing

DEER BROOK CONSULTING, INC.

NORTH YARMOUTH, ME

Deer Brook Consulting delivers innovative, effective, and sustainable technology solutions tailored to organizations in higher education, healthcare, finance, and government. Services include Anthology Student & Finance solutions, Dynamics ERP modernization, AI and automation, cybersecurity, advisory, HIPAA Security Risk Assessments, and CMMC services.

AI and automationchange managementcloud implementationCMMC readiness gap assessmentCRM implementationERP modernizationHIPAA security risk assessmentsincident response tabletop exercisesIT auditsLMS configurationNIST cybersecurity framework assessmentorganizational developmentpenetration testingPower Platform workflow designsecurity awareness trainingSIS implementationvCISO services

DEFENSE UNICORNS, INC.

COLORADO SPRINGS, CO

Defense Unicorns delivers secure, scalable, vendor-lock-free software deployment solutions for mission-critical environments, helping the Department of War, system integrators, and mission teams accelerate software delivery without compromising security or compliance. Its UDS platform is an airgap-native software delivery platform purpose-built for military systems, with products including UDS Platform, UDS Fleet, and UDS Enterprise.

airgap software deliverycompliance automationcontinuous ATO supportDevSecOpsforward deployed engineeringsoftware factory

D&O Security Solutions LLC (DOSS) is a Professional Services company specializing in Information Security, located in Stafford, VA. It supports the federal government and commercial organizations with cyber security services, offering a top-down holistic approach to information security management through review of current processes and customized solutions. DOSS is a Woman-Owned (WOSB) and Service-Disabled Veteran-Owned Small Business (SDVOSB) and a GSA 8(a) STARS III GWAC industry partner.

Cloud Management & SecurityCyber Threat Analysis and MonitoringFISMA Compliance & ReportingIncident Response Plans and Cyber Huntinginformation securityIT Program ManagementPenetration Testing & Social Engineeringrisk vulnerability assessmentsSecurity Operations Center (SOC) Services

DueNorth Security LLC provides independent information security risk assessments and advisory services conducted by certified information security professionals. Assessments map to recognized frameworks such as NIST CSF, HIPAA, and others, and include a one-year plan to improve security and remediate risk. The company also offers compliance and audit readiness consulting.

audit readinessemployee trainingpenetration testingpolicy creationrisk remediationSecurity consultingsecurity risk assessmentsocial engineering testing

D'vine Media Solutions LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) providing cybersecurity, risk management, and cloud security consulting for federal agencies, defense organizations, and commercial enterprises. Led by a CISSP, CISM, PMP, and CEH-certified professional with 21+ years of IT and information security experience, the company has led RMF and ISSE efforts across more than 30 DoD systems.

Assessment & Authorization (A&A)Cloud Security & Vulnerability AnalysisContinuous Monitoring & Threat AssessmentInformation Systems Security Engineering (ISSE)IT Program / Availability ManagementRisk Management Framework (RMF)Security Control Assessment & ComplianceSystems Integration & Secure Architecture Designthreat correlation

ECN IT Solutions provides managed IT services for small businesses with 15-80 employees, currently serving Arizona and Southern California. Services include help desk support, cybersecurity, backup and disaster recovery, Microsoft 365 support, IT strategy and professional services, and cloud services. ECN specializes in CMMC Compliance and NIST 800-171 implementation for defense contractors and is scheduled for CMMC assessment to become one of the first CMMC accredited MSPs in Arizona.

audit preparation and supportbackup and disaster recoverycloud servicesCMMC compliancecontinuous monitoringCybersecurityHelp desk supportManaged It ServicesMicrosoft 365 supportNIST 800-171 implementationonsite and offsite replicationpatch managementpenetration testingsecurity awareness training

ERETMIS INC

BRONX, NY

Eretmis Inc. is an I.T. and cybersecurity company based in New York City. It is a certified Payment Card Industry (PCI) Qualified Security Assessor (QSA) company and is SDVOSB certified by the United States Veterans Affairs and NYC MWBE certified by New York City. Eretmis provides information security and cybersecurity consulting services to Federal and State agencies, corporate organizations, retail merchants, healthcare facilities, financial companies, health insurance companies, and educational institutions.

compliance consultingCybersecurity awareness trainingPCI DSS auditsphishing campaign assessmentQualified Security Assessor (QSA) servicesrisk and vulnerability assessmentvalidated architecture design review

ETRANSERVICES CORP.

STAFFORD, VA

eTRANSERVICES Corp. is a provider of enterprise transformational services to Federal agencies, state, local, and commercial markets. Its core competencies include Systems Engineering, Information Technology, Cybersecurity, Cloud Services, and Business Services, delivered through a process-driven, repeatable methodology aligned with ISO and CMMI standards.

business servicesCloud Engineeringcloud servicesCybersecurityData ScienceIncident responseInformation Technologylogistics supportpenetration testingprofessional trainingprogram managementRisk Management Frameworksoftware engineeringSystems Engineering

EVOLUTION NETWORKS

CINCINNATI, OH

Evolution Networks provides managed IT services, cybersecurity services, technology consulting, voice services, and internet service to businesses, non-profits, and government organizations. They work with over 400 technology vendors and suppliers to find solutions for their clients.

asset managementDevOps Managementendpoint securityhelp deskIncident Response PlansIntrusion Detection ServicesMalware & Threat Detectionmanaged firewallsmanaged SOCMonitoring & Managementmulti-cloud managementpenetration testingproject managementSecurity and Risk Audits and AssessmentsSourcing & PurchasingTechnology Lifecyclethreat intelligenceuser trainingvendor management

EWAY CORP

JOHNSTON, IA

eWay Corp is a Managed WebOps and Cloud Infrastructure partner for the public sector, founded in 2005. It designs, builds, migrates, and operates CMS platforms and cloud infrastructure for government agencies, universities, nonprofits, and healthcare organizations as a continuous, SLA-driven managed service spanning cloud, CMS, and applications.

24/7 monitoring and incident responseaccessibility audits and remediationAPI developmentapplication development and integrationscloud & infrastructure managementCMS platform deploymentdisaster recoverylegacy modernizationperformance optimizationsecurity patchingSSO and identity integration

Exemplary Cyber Consultants is a veteran-owned cybersecurity firm serving the Defense Industrial Base, government agencies, and regulated industries. It provides managed security, CMMC readiness and assessment, Microsoft licensing and cloud integration, threat intelligence, and compliance advisory built on Zero Trust principles.

24/7 SOC monitoringAzure Government deploymentCMMC consultingdigital forensicsIncident responsemanaged EDR/XDRMicrosoft CSP resellingmock assessmentspenetration testingPOA&M managementPower Platform automationsecurity awareness trainingSPRS score reviewSSP developmentzero trust architecture

FBR FEDERAL LLC

BATTLE GROUND, WA

FBR Federal LLC delivers mission-critical Managed Security Services (MSSP) tailored exclusively for federal contractors, ensuring compliance, resilience, and data integrity against advanced persistent threats. The company is a small business providing managed cybersecurity solutions designed to meet stringent federal requirements and protect sensitive information.

compliance and governance (NIST, CMMC, DFARS, FedRAMP)identity governanceIncident responseManaged Detection & Response (MDR)multi-factor authentication (MFA)patch managementpenetration testingPrivileged Access Management (PAM)secure cloud integrationsecurity awareness trainingSOC monitoringthreat hunting

FraterIT Enterprises is a Chicago-based security and compliance advisory firm serving small and mid-size businesses in regulated industries. It provides fractional vCISO leadership, security risk assessments, and compliance programs for HIPAA, PCI DSS, SOC 2, and ISO 27001, and is MBE, DBE, and BEP certified.

audit readiness reviewcloud security advisoryfractional vCISO leadershipGRC and compliance programsincident response planningsecurity awareness trainingsecurity risk assessmentvendor risk management

FRSECURE LLC

EDINA, MN

FRSecure is an information security company that builds better security cultures and programs for organizations. It offers services including Virtual CISO, incident response, risk assessment, penetration testing, vulnerability management, and compliance preparation, and states it does not sell third-party products.

attack simulationCloud Security AssessmentCMMCgap assessmentIncident responsePCI DSS QSApenetration testingPurple Teamrisk assessmentSOC 2 audit preparationsocial engineeringtabletop exercisesvendor risk managementvirtual CISOvulnerability management

GenialArchitect operates The Forges, a cybersecurity platform that unifies 12 integrated cybersecurity services into one platform, built by intelligence operators.

forensicsGRCoffensive securitySIEMSOC operationstraining

GLOBAL COMPUTER CORP

PORT JEFFERSON, NY

GCS (Global Computer Systems) is a New York-based managed IT and cybersecurity provider serving small and mid-sized organizations nationwide. It offers managed IT, cybersecurity, cloud and infrastructure, vCTO/vCISO advisory, compliance, AI readiness, and backup and recovery services, with fully managed or co-managed engagement models.

Backup and recoverydevice managementemail securityendpoint detection and responsehelp deskincident response planningmanaged ITMFAMicrosoft 365 and Azure managementmigrationsmonitoringnetworkingpatch managementprivate cloudsecurity awareness trainingZero Trust access

GRADIENT CYBER LLC

SOUTHLAKE, TX

Gradient Cyber provides Managed Extended Detection and Response (MXDR) designed for mid-market organizations, powered by its Quorum AI platform and a 24x7 human-led SOC. Quorum AI runs an 8-stage detection and response pipeline that normalizes, enriches, correlates, and acts on telemetry from endpoint, network, cloud, identity, and SaaS sources, with detections mapped to the MITRE ATT&CK framework.

24x7 human-led SOCdual-engine detection (rule-based plus behavioral anomaly detection)Incident responseMITRE ATT&CK mappingOCSF normalizationpenetration testingQuorum AI 8-stage detection and response pipelinesecurity awareness trainingthreat intelligence integrationvCISO advisory

GRINDSTONE PBC

PHILADELPHIA, PA

Grindstone is an innovative, Minority Owned Small Business specializing in providing cutting-edge cybersecurity solutions to businesses and government agencies in the Mid-Atlantic region. It uses industry best practices and proven approaches to mature clients' cybersecurity programs into risk-based, flexible, and secure programs, transforming IT and cybersecurity into key business enablers.

continuous monitoringFISMA compliance supportGRChybrid cloud securityremediationrisk management framework assessment and authorizationsecurity project managementvulnerability management

HUDSON INFOSEC, LLC

POUGHKEEPSIE, NY

Hudson Infosec is a U.S.-based cybersecurity company in Hudson Valley, New York, offering two U.S.-developed products: Ayewo, an automated vulnerability scanning and compliance reporting scanner node, and HSEC Sentinel, a next-generation SIEM with cryptographically verified event intelligence and AI agent prompt logging. It also provides AI-powered penetration testing and full cybersecurity audits.

AI agent prompt loggingcompliance reportingcybersecurity auditspenetration testingSCADA/ICS assessmentSIEM event verificationwireless scanning

INCEPTUS CYBERSECURITY

CAPE CORAL, FL

Inceptus is a cybersecurity and managed IT services provider (X-MSP) that focuses on reducing cyber risk and protecting brand reputation. It delivers modern IT, 24/7 security operations, and strategic guidance, combining military-grade cyber defenses, advanced data analytics, threat intelligence, and elite analysts with experience in the Intelligence Community, DoD, Federal Government, and Fortune 500 companies. It serves small and mid-sized businesses, distributed enterprises, financial institutions, government contractors, and high net worth individual

24/7 SOC monitoringcompliance servicesdigital forensics and incident responseendpoint detection and responseManaged It Servicespenetration testingsecurity assessmentssecurity awareness trainingSOAR automationthreat huntingvCISO services

Inteledge Digital Solutions provides end-to-end cybersecurity and compliance services for defense contractors and federal agencies operating in regulated environments. It builds the IDS Agentic Cybersecurity Platform, where specialized AI agents automate compliance, vulnerability management, and security operations, and offers RMF/ATO support, CMMC preparation, security assessments, security awareness training, and vulnerability management.

AI-powered compliance automationCloud Security AssessmentCMMC preparationconfiguration auditseMASS managementOSCAL-compliant exportpenetration testingphishing simulationRMF & ATO compliancesecurity awareness training

IRONGATE SYSTEMS LLC

WEST FRANKFORT, IL

Irongate Systems is a WOSB-certified, woman-owned small business providing security-first IT, AI, and consulting services for government contractors and regulated organizations. It offers CMMC, NIST 800-171, FedRAMP, and HIPAA compliance support, managed IT services, AI agents and automation, backup integrity and recovery, and is an authorized Dell master distributor.

AI agent deploymentattack-surface reductionBackup and recoverycompliance gap assessmentsendpoint baselinesincident response planningleast-privilege accessManaged It ServicesMFA enforcementnetwork segmentationpatch managementPOA&M managementremote deploymentremote maintenanceSSP development

Related capabilities

Other processes offered by the shops that list vulnerability scanning.

Browse all capabilities