AI Development and Automation
Production AI tools for compliance, assessment, and workflow automation. PRISM and SCORE are field-tested prototypes, not hypothetical concepts.
View capabilityService-Disabled Veteran-Owned Small Business
Compliance moves atthe speed of paperwork.We're changing that.
Kastle Solutions builds AI tooling that reads policy, maps controls, and scores assessments — backed by practitioner-led DoD cybersecurity and SBIR proposal work out of Colorado Springs.
SDVOSB
SBA-certified, veteran-owned
TS/SCI
Cleared personnel on staff
CMMC L2
Self-assessment complete
ITAR
Eligible by structure
2
Working prototypes under SBIR research
What We Do
Expertise where compliance meets code
From assessment to automation to proposal writing, we deliver across the full lifecycle of DoD compliance and innovation.
SBIR Proposal Development
End-to-end technical volume writing for DoD SBIR Phase I and Phase II. We have an active prototype (PRISM) and practitioners who live inside the problem space.
View capabilityCMMC and Cybersecurity
Practitioner-led CMMC Level 2 readiness, CUI enclave provisioning, and RMF support for DoD contractors and subcontractors.
View capabilityPrototype Tooling
Two prototypes. One pipeline.
PRISM and SCORE were built under active SBIR research and run against real artifacts today. Available for licensing, teaming, and subcontractor integration.
PRISM
Policy-driven RMF Automation
PRISM maps organizational policies to NIST SP 800-53 controls and generates structured RMF artifacts. It converts prose policy documents into machine-readable control mappings and reduces documentation burden across the assessment lifecycle.
- Automated control mapping from policy documents
- RMF artifact generation (SSP, SAR, POA&M templates)
- FastAPI backend with React interface
- PostgreSQL audit trail, Docker-deployable
SCORE
Assessment Scoring Engine
SCORE automates the numeric scoring of security assessments against NIST 800-53 and CMMC frameworks. It produces auditable, reproducible scores that replace manual spreadsheet-based analysis.
- Framework-aligned scoring (800-53, CMMC, DISA STIGs)
- Auditable evidence chain per scored control
- Exportable reports in DoD-standard formats
- Integrates with the PRISM RMF pipeline
Proof, Not Promises
What the tooling actually does
We're a small firm. Our credibility is working software and practitioner scar tissue — here's what that means concretely.
Prose → 800-53
PRISM turns policy documents into control mappings.
Feed PRISM an organizational policy document and it produces structured NIST SP 800-53 control mappings plus SSP, SAR, and POA&M scaffolding — work that is otherwise done by hand, control by control.
See the AI capability110
We ran our own CMMC gauntlet first.
Kastle completed its own CMMC Level 2 self-assessment across all 110 NIST SP 800-171 practices before offering readiness services. Every artifact we ask clients to produce, we have produced for ourselves.
See the readiness processSCA
Practitioner-led, not advisory-only.
Kastle brings hands-on Security Control Assessor experience to every engagement. We produce the evidence, remediate the gaps, and document the controls — we don't just point at them.
Talk to a practitionerPartner With Us
Subcontracting and teaming
We work as a teaming partner, subcontractor, or co-PI on DoD contracts, GWACs, and SBIR efforts.
TS/SCI Personnel
Active TS/SCI clearance on staff. Eligible for classified environments and SCIFs.
ITAR Eligible
No foreign nationals on current efforts. ITAR-compliant by structure.
CMMC Level 2
Self-assessment complete. Suitable for CUI handling as a subcontractor.
Veteran-Owned
An SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and Veteran-Owned Small Business (VOSB). Satisfies small business subcontracting goals.
AI and Cyber Expertise
Production ML, NLP, FastAPI, RMF, SCA practice on staff. Technical depth as a teaming partner.
Senior Advisory Bench
PCAST-level senior advisor available for high-visibility bids.
Contracting Identity
SAM.gov and NAICS
UEI
SNK5GVPFH5K4
CAGE
162S0
SAM.gov
Active
Entity Type
LLC
541511Custom Computer Programming Services
541512Computer Systems Design Services
541690Other Scientific and Technical Consulting
541715R&D in Computer Science
Bring a working prototype to your next bid.
Teaming, subcontracting, CMMC readiness, or SBIR development — we respond within one business day.