Greypike is a veteran-owned cybersecurity and compliance firm built for small businesses. We help the defense industrial base meet CMMC and NIST SP 800-171 obligations, test their defenses, and stand up the security programs that protect Controlled Unclassified Information (CUI). Most contractors don't need more checklists; they need a partner who owns the program. We scope what's actually in play, surface gaps plainly, and build the documentation, controls, and testing that hold up in a real assessment — work you keep and can use with any vendor, no lock-in. What we do: • CMMC Level 2 readiness & assessment preparation • NIST SP 800-171 (incl. Rev 3) gap analysis and remediation • Penetration testing • Cyber risk assessments • Vulnerability management • System Security Plans (SSPs), POA&Ms, and assessment evidence • Secure enclaves and CUI boundary design • AI security for regulated environments Our approach is credible, precise, and protective: plain-language guidance, honest answers, and no promised outcomes we can't control. Veteran-Owned Small Business · CAGE 9WVS6 · SAM UEI N6CJNGDARFM5 greypike.com