IRS CTO Blue and Red Team Support
Internal Revenue Service (IRS) - Threat Assessment, Vulnerability Assessment, Web Application Security Testing, Secure Code Review, Red Team Operations, Penetration Testing, Vulnerability Scanning Analysis, and Reporting to support the CIO/CTO IT risk decisions.
DHS NPPD CS&C Security Test and Evaluation
Department of Homeland Security (DHS) - New Technology COTS and GOTs product Vulnerability Assessments including: Web Application, Thick-Client Applications, Code Review, Assessment Reporting, and Customer engagement. Limiting attack surface on all products implemented throughout DHS and NPPD.
FBI Security Assessment Support
Federal Bureau of Investigations (FBI) - For all Major Enclaves Crest provided - Continuous Monitoring Enterprise Vulnerability Scanning, Penetration Testing, Red Team Operations, Web and Network Vulnerability Assessment, and Reporting to support Risk Management Framework (RMF), Authority to Operate (ATO), and FISMA efforts. Resulting in corrective actions and mitigation on zero/one-day vulnerabilities as well as know vectors of attack.
OPIC Cybersecurity Engineering Support
Office of Private Overseas Investment Corp (OPIC) - Network Monitoring IDS/IPS, SIEM implementation, Security Engineering, Forensic Reponses (EnCase)/Hunt, Anti-Virus and Host-Base Intrusion, Vulnerability Assessment, Remediation, Web and Network Vulnerability Scanning. Resulting in 50+ attack failures and discovered areas of weakness.
FDIC CUI Assessment
Federal Deposit Insurance Corp - NIST 800-171 Assessment, Penetration Testing, Reporting, On-site Briefings.