DARK WOLF SOLUTIONS, LLC — Department of Defense SBIR Phase II: AF191-011

Description

Dark Wolf Solutions proposes a Penetration Testing as a Service Open Source (PTaaS-OS) solution that utilizes open source technologies to combine security frameworks, such as NIST Risk Management Framework (RMF) and Payment Card Industry (PCI), with software automation and machine learning to integrate active security control testing into the IT Enterprise and the Agile DevOps development process. As part of a Continuous ATO process, to support the requirement for ongoing authorization, a manual security evaluation to validate security controls can be performed. Once completed, the results of that test will be modeled into an automation engine that can replay that test at will, thus addressing the issue of penetration testing at large scale.  PTaaS will also be a key component of an Agile DevSecOps Software Factory where it can be utilized to automatically run penetration testing plays against applications prior to production deployment.  Given the sheer volume of Air Force projects which need to go through the accreditation process to receive ATO or retain their current ATO, a more cost effective and less manpower intensive solution is required. We believe PTaaS-OS solves these problems while addressing the overarching need.