Services offered by Nasc Federal.
Work is delivered personally by the principal. Scope and pricing are structured for both fixed-fee engagements and time-and-materials subcontract support.
- 01
Penetration testing
Black-box and gray-box penetration tests of external infrastructure and web applications. Engagements include scoping, active testing, and a written report in the format federal clients expect. Typical length: one to three weeks.
- 02
Vulnerability assessment
Authenticated and unauthenticated assessments with manual validation of critical findings. Deliverables include an executive summary, technical findings, and prioritized remediation.
- 03
Cyber advisory
Security architecture review and hardening guidance for small and mid-sized primes preparing for federal cyber assessments.
- 04
Subcontract labor
Cleared-eligible, OSCP-certified availability for primes filling pentester, security engineer, or cyber operations roles on active federal contracts. Rates and availability on request.
Engagement
Engagements begin with a short scoping call. Fixed-fee work is delivered under a Statement of Work. Subcontract support runs under a standard 1099 Independent Contractor Agreement with mutually-executed Rules of Engagement.
Inquiries: aidan@nascfederal.com