Tangent Technologies · Federal cyber defense and control verification
Most AI arrives as a license. Ours arrives with engineers.
Tangent runs federal security operations and independently verifies the controls that authorize your systems. Where AI takes work off your analysts, we build it inside your boundary, with a person accountable for every action it takes.
The mission is the curve. Tangent is the line that meets it, takes its heading, and does the work along it, with people who served it before.
What we do
Three jobs, and we are accountable for all three.
Most agencies buy these from three different companies and spend the difference reconciling them. We run them as one function, which is why our findings close instead of circulating.
Cyber defense that does not sleep
Round-the-clock monitoring, detection, threat hunting and incident response, staffed by cleared analysts who stay on the program long enough to know what normal looks like on it.
SOC · Hunt · Incident response
Authorization you can defend
Independent control assessments and full RMF lifecycle support, built to survive the questions an authorizing official actually asks. We verify closure rather than take it on trust, so the package holds up on review.
SCA · RMF · ATO packages
AI that does work, not demos
Forward-deployed engineers building agents against your own tools and data, for the collation and evidence work that burns analyst hours. Not a license, not a reference design, and not tied to one vendor’s model.
Embedded · Model-agnostic
These three are where most programs start. Tangent delivers six service lines in all, adding Cloud & Infrastructure, AI-Enabled IT Service Management and Technical Program Management. See all six →
Built and running
Two systems we built, and the rules they run under.
Both are in production. Both run on the federally approved model a boundary already allows, with their behavior held in version-controlled files the customer owns, governed against the NIST AI Risk Management Framework.
Security operations that explain themselves.
- Autonomous SOC analyst working the queue alongside your team
- Detection-to-hunt loop that closes instead of looping
- Continuous compliance drawn from telemetry, not attestation
- True-coverage vulnerability management
- Evidence custody and an audit chain you can hand to an assessor
Assessments that cite their evidence.
- Composes analyses from scan, capture, log and SBOM evidence
- Every finding traceable back to the source that produced it
- Known-exploited screening against the KEV catalog
- Alert triage, control evidence collection and POA&M tracking
- Drafts for a reviewer to argue with, never decisions
Why Tangent
Four things that are hard to copy.
01Both sides of the equation
We run security operations and we perform independent control verification. Working both sides means we know what an assessor will ask long before the assessment starts, and we build toward that from day one.
02Model-agnostic by design
What we build runs on the approved model your boundary already allows. No vendor lock, no waiting on an authorization for someone else’s platform, and no rebuild when your approved model list changes.
03Human-led, agent-assisted
Agents read, correlate and draft. Your analysts decide. A named person is accountable for every action an agent takes, and high-impact actions route through an approval queue.
04You keep what we build
Agent behavior lives in version-controlled skill files you own and can audit. If we walk away, the capability does not walk out with us.
Federal customers
Where Tangent has delivered.
Scope and duration for each program are in the capability statement, or on the services page.
Why we exist
Veteran-owned is ownership. Hiring veterans is the mission.
Every company in this market lists its set-aside certifications, and those describe who owns the company. What we are actually trying to do is put veterans to work on federal cyber programs and keep them moving up.
Service-disabled veterans leave the military with clearances, operational discipline and a working knowledge of the mission, then compete for jobs against candidates whose resumes read more conventionally. We hire into that gap on purpose, on the programs we already run.
Keeping them is the harder half. We run structured cyber career pathing tied to enterprise certifications, competency-based promotion standards, and a progression that people are actually promoted against.
The marks on the right are issued by other people, not claimed by us. The V3 seal is the one about hiring: Virginia Values Veterans certifies a company on how it recruits, hires and retains veterans, not on who owns it.
How to order
Three paths, and we will tell you the cheapest one.
Including when that means telling you another vehicle is a better fit than ours. We deliver under firm-fixed-price, time-and-materials and IDIQ or BPA call structures.
GSA Multiple Award Schedule
All six Highly Adaptive Cybersecurity Services subcategories, so the security work can be ordered directly without an open-market action.
NASA SEWP VI
For solutions that pair services with product. The ordering guide walks a contracting officer through a request from quote to delivery order.
DHS and SEC vehicles
DHS ADaPTS, the DHS ICE SOC and CSIRC contract, and the SEC ONE IT IDIQ, where we are already a named performer.
Get started
Tell us the mission, not the labor category.
Send a requirement, a scope, or a problem you have not been able to staff. We will tell you where we have done it before, how it would be ordered, and what we would not take on.
