Security and trust
A real security pedigree, described honestly
We lead with a genuine federal Zero Trust background and SDVOSB status, and we state plainly what we have not yet attained.
Security and trust
An honest security posture
We lead with a real federal security pedigree and state everything else, including what we have not yet attained, plainly.
Federal Zero Trust pedigree
Founded by a USAF veteran and former federal security architect (CISM, CGEIT) with roughly two decades across federal security programs.
SDVOSB
Service-Disabled Veteran-Owned Small Business, a genuine federal-procurement credential.
AWS migration in progress
Infrastructure is moving to AWS; we describe status honestly rather than overclaiming.
SOC 2 Type 2 targeted
Targeted, not yet attested. We will not claim an attestation we do not hold.
Practices
How we handle evidence and access
Least-privilege by default
Access is scoped to what a task requires, consistent with a Zero Trust architecture the founder has implemented across federal programs.
Source-hashed evidence
Every document in an evidence package is tied to a hash of its source, so integrity is verifiable and tampering is detectable.
Deterministic, reproducible outputs
The same inputs produce the same evidence package, which is what makes an audit trail defensible under later scrutiny.
Honest status reporting
We describe our infrastructure and compliance posture as it is, including work in progress, rather than overclaiming.
What we do not claim
No attestation we don't hold
SOC 2 Type 2 is targeted, not yet attested. Our AWS migration is in progress. We are pre-revenue and building with a small number of design partners. When we achieve an attestation, we will publish it with its report; until then, we rely on our federal security pedigree and disciplined practices, stated honestly.
See your group's IDR footprint
Get a free, one-page scorecard of your group's public federal IDR history, delivered within 2 business days. Public CMS history only; not advice.