Skip to content
Latest
StopAndProtect Shows Why WordPress Sites Are Attack InfrastructureMacSync Stealer Shows Why Behavioral Pivots Beat Rotating DomainsPurpleDelta Shows Why Remote Hiring Is Now an Insider-Risk ControlGitLab GraphQL Flaw Shows Why DevSecOps Platforms Need Emergency Patch RunbooksForminator RCE Shows Why WordPress Plugin Risk Needs Runtime ControlsC2Looper Shows Why GitHub-Based C2 Belongs in Ransomware TriageVMware vCenter Exploitation Shows Why Patching Is Not Incident ClosureRansomware’s Long Tail Means Defenders Need Faster TriageAzure Directory Dumps Show Why Identity Data Is Attack InfrastructureSigned ClickOnce Shows Fake Interviews Are Now a Credential-Theft Delivery SystemDropcatch Domains Show Why Reputation Is Not TrustCaptiveCrunch Shows Why Travel Wi-Fi Is an Identity Attack SurfaceHoneyMyte’s CoolClient Rootkit Shows Why Kernel Visibility MattersJWR Phishing Framework Shows Why MFA Codes Are Now Live Targets

Capability Statement

Bulwark Black LLC, SDVOSB.

A veteran-owned small business building custom software and publishing cyber threat intelligence. We design, build, and then operate the systems we deliver, including the servers underneath them. Work is performed remotely across the United States.

Identifiers

CAGE 17UL6

UEI DVNTWBJ2HMP8

Founded 2025

Status

SDVOSB

SAM Registered

Veteran-owned small business

Solo, owner-operated

Contact

support@bulwarkblack.com

Spokane, WA 99201

Performed

Remote, nationwide

United States

Core Competencies

What we are actually staffed to do.

Five areas, all of them things we do for our own products before we do them for anyone else.

  • Custom software development

    Web and iOS. Multi-tenant SaaS with payments, authentication, client portals, and document workflows. We build the system and then operate it in production rather than handing over a repository and leaving.

  • Cyber threat intelligence

    Daily reporting on threat actors, malware, and active campaigns, with machine-readable indicator and YARA downloads attached to each report for direct use in firewalls and detection tooling.

  • Infrastructure and systems administration

    Linux servers, Nginx, systemd services, Postgres, scheduled backups with tested restores, and email deliverability including SPF, DKIM, and DMARC. Self-hosted rather than resold.

  • Network and site survey

    Wi-Fi and cellular coverage surveys with heatmaps, pass and fail contours, signal scoring, gateway aiming by RSRP and SINR, and client-ready PDF reporting.

  • Proposal development

    In-house. We build SAMscout, our own AI proposal platform, and use it on our own bids.

  • Small business IT and cybersecurity

    Remote support, endpoint and account hardening, platform migrations, and written documentation the client keeps. Delivered across the United States.

Past Performance

Systems running in production right now.

Commercial and internal work rather than federal contract history. Every item is live and can be inspected.

  • Contractor Codex

    Multi-tenant billing and client portal SaaS for service businesses. Quoting from a 240 item library across 24 industries, contracts with e-signature and audit trail, invoicing with recurring billing and a four level dunning ladder, and live card payments. Each tenant runs its own payment account, sending domain, and branding.

    Next.js, Postgres, Stripe Connect · live with paying users

  • SAMscout AI

    Federal proposal platform that turns a SAM.gov opportunity into a reviewable, Shipley-grade draft, with compliance checks against FAR and DFARS clause requirements before drafting begins.

    Web application · live

  • VA Disability Calc & Track

    iOS application published on the App Store for veterans working a disability claim. BVA-accurate combined rating math, over 900 diagnostic codes, and an encrypted document vault. Runs fully offline so claim data never leaves the device.

    SwiftUI, Core Data · App Store

  • Content platform migration

    Migrated roughly 390 published articles off a hosted WordPress installation onto a static site we build and operate, preserving every original URL. Publishing is automated end to end: new reporting is written, indicators are extracted, download files are generated, and the site rebuilds itself.

    Astro static build, Nginx, automated pipeline · bulwarkblack.com

  • Wi-Fi and cellular survey tool

    Field survey application that builds coverage heatmaps from a walked property, scores a site from 0 to 100, and produces a client-ready PDF. Runs entirely on the technician's own machine with no cloud service and no account.

    Python and JavaScript · open source

Differentiators

Why award to a shop this size.

  • We build it and we run it

    The servers our software runs on are ours, and we administer them. There is no subcontracted hosting layer to coordinate with when something breaks at two in the morning.

  • The work is checkable

    Two of our tools are open source and readable line by line. One product is published on the App Store. The threat intelligence publishes publicly on a weekday cadence. Past performance here is not a claim you have to take on faith.

  • Privacy by default where the data warrants it

    The veterans' claim app runs fully offline. The survey tool keeps every reading on the technician's machine. When the data is medical, or belongs to a client's building, it does not go to a third party.

  • Small, senior, and direct

    You work with the person building the system. No account layer, no handoff to a delivery team you have not met.

NAICS

Registered codes.

  • 541512 Computer Systems Design Services
  • 541511 Custom Computer Programming Services
  • 541519 Other Computer Related Services
  • 541330 Engineering Services
  • 541690 Other Scientific and Technical Consulting Services
  • 541990 All Other Professional, Scientific, and Technical Services
  • 811210 Electronic and Precision Equipment Repair and Maintenance

Also registered

  • 334516 Analytical Laboratory Instrument Manufacturing
  • 561612 Security Guards and Patrol Services
  • 425120 Wholesale Trade Agents and Brokers
  • 336611 Ship Building and Repairing

Request

Want it aligned to your solicitation?

Tell us the agency, the vehicle, and the scope you are sourcing. We will send a statement written against your NAICS and your requirement instead of a generic one.

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.