SOCOPERATIONAL
SECCAPABILITIES.MATRIX
DTG00:00:00 UTC
THREATELEVATED
CLRTS / SCI
Index01 Services02 Capabilities03 Doctrine04 Contact05

The credentials our
operators hold.

OSCP
Offensive Security Certified Professional
OSEP
Experienced Penetration Tester
OSED
Exploit Developer
CRTO
Certified Red Team Operator
CRTL
Red Team Lead
GXPN
GIAC Exploit & Pentest
GPEN
GIAC Penetration Tester
GWAPT
Web App Pentest
GCIH
Incident Handler
GCFA
Forensic Analyst
CISSP
Info Systems Security Professional
CCSP
Cloud Security Professional
CISM
Information Security Manager
CISA
Information Systems Auditor
CRISC
Risk & Info Systems Control
CCSK
Cloud Security Knowledge
PNPT
Practical Network Pentest
CEH
Certified Ethical Hacker
AWS
Security Specialty
AZ-500
Azure Security Engineer
GCP
Professional Cloud Security
CKS
Kubernetes Security
PMP
Project Management Professional
ITIL
Service Management

The arsenal we
deploy in the field.

CATEGORY · 01

Offensive Tooling

Custom and commercial frameworks integrated under a unified operator console.

  • + Cobalt Strike
  • + Mythic / Sliver
  • + BloodHound
  • + Impacket
  • + Burp Suite Pro
  • + Caldera
  • + Atomic Red Team
  • + Bespoke C2
CATEGORY · 02

Defensive Stack

EDR, SIEM, SOAR — engineered for detection engineering output and false-positive discipline.

  • + CrowdStrike
  • + SentinelOne
  • + Microsoft XDR
  • + Splunk · Sentinel
  • + Elastic SIEM
  • + Tines · Torq
  • + Sigma · KQL
  • + MISP · OpenCTI
CATEGORY · 03

Cloud Security

CSPM, CWPP, CIEM, and runtime defense across hyperscaler and GovCloud environments.

  • + Wiz
  • + Prisma Cloud
  • + Defender Cloud
  • + Lacework
  • + Aqua · Sysdig
  • + Terraform / OPA
  • + Checkov · Tfsec
  • + Sigstore · Notary
CATEGORY · 04

GRC Platforms

Compliance automation, evidence collection, and continuous attestation tooling.

  • + Drata
  • + Vanta
  • + Secureframe
  • + Hyperproof
  • + RSA Archer
  • + ServiceNow IRM
  • + eMASS
  • + OSCAL Tooling
CATEGORY · 05

Vulnerability Mgmt

Asset-aware, risk-prioritized vulnerability programs with SLA-backed remediation tracking.

  • + Tenable Nessus
  • + Qualys VMDR
  • + Rapid7 InsightVM
  • + Snyk · Mend
  • + Semgrep
  • + Trivy
  • + Defectdojo
  • + Bespoke ASM
CATEGORY · 06

Identity & Access

Identity-first security: PAM, PIM, IGA, and workload identity federation at enterprise scale.

  • + Okta · Entra
  • + CyberArk
  • + BeyondTrust
  • + Ping Identity
  • + SailPoint
  • + HashiCorp Vault
  • + AWS IAM IdC
  • + Azure PIM

Mission environments
we've walked.

SECTOR · 01

Federal Civilian

DHS, Treasury, HHS, GSA, USDA, and additional Cabinet-level agencies.

SECTOR · 02

Defense & DIB

Army, Navy, Air Force, DARPA, and CMMC-mandated defense contractors.

SECTOR · 03

Intelligence Community

Cleared workforce supporting ICD-503 / 705 environments with TS/SCI poly.

SECTOR · 04

Financial Services

Tier-1 banks, broker-dealers, asset managers, and fintech operators.

SECTOR · 05

Healthcare & Life Sci

Health systems, payers, biotech, and clinical trial platform operators.

SECTOR · 06

Energy & Utilities

NERC-CIP regulated utilities, ICS/OT operators, and refining sector.

SECTOR · 07

SaaS & Platform

FedRAMP-pursuing SaaS, AI/ML platforms, and developer infrastructure.

SECTOR · 08

State & Local

State CISOs, municipal IT, public utilities, and StateRAMP candidates.

Pre-positioned for
fast acquisition.

GSA · MAS
Multiple Award Schedule
SIN 54151HACS · Highly Adaptive Cybersecurity Services. Penetration testing, RVA, and incident response services.
SIN 54151HACSRVA
CIO-SP3
NIH IT Acquisition
Government-wide IT services vehicle — accessible to all federal agencies. Task areas 1, 2, 3, 5, 6, 7, 9.
SB TrackTA 1-9
SEWP · V
NASA Solutions for Enterprise
Hardware, software, and product-centric IT services — including cybersecurity tools, cloud services, and integration.
Group AGroup D
8(a) STARS III
Small Business Set-Aside
8(a) GWAC for IT services. Functional Area: Cybersecurity. Direct ordering and competitive task orders.
8(a)FA 1
OASIS+
Best-in-class PSS
Professional services vehicle — Domain 1 (Management Advisory), Domain 4 (Technical & Engineering), Domain 6 (Research & Development).
UnrestrictedSB Pool
Cleared talent · Pre-positioned procurement · Operator-led delivery

Vetted to operate.
Built to scale.