Macher

[ 05 ]MacherCapabilities

Capability statement

Cryptographic inventory, post-quantum migration and security engineering for federal agencies, federal contractors and healthcare.

Company data

Registration details appear here as soon as SAM.gov validation completes.

Business size
Small business
UEI
Registration in progress
CAGE code
Registration in progress
Location
Texas
  • 541512Computer Systems Design Services (primary NAICS)
  • 541519Other Computer Related Services
  • 541690Other Scientific and Technical Consulting Services
  • DJ01IT and Telecom: Security and Compliance Support Services (PSC)

Core competencies

Cryptography

Post-quantum migration

  • Automated cryptographic inventory delivered as a CycloneDX CBOM
  • Runtime handshake analysis in Kubernetes with eBPF (tooling in development)
  • Migration planning aligned to EO 14412, OMB M-26-15 and NIST IR 8547
  • Vendor readiness against CISA's post-quantum product categories
Security engineering

Cloud, compliance and software

  • Cloud and Kubernetes security, zero trust and workload identity
  • NIST SP 800-53 and 800-171 control mapping and evidence
  • HIPAA security risk analysis
  • Full-stack application and software supply chain review
  • AI-assisted legacy code review on in-environment models

Key personnel

  • SY, member and principal engineerCloud, AI and security infrastructure engineer with about a decade across federal, healthcare and large-scale cloud environments. Kubernetes, eBPF and zero-trust specialist. Sets the technical approach behind our tooling and findings.
  • VM, director of daily operationsHands-on engineer who runs day-to-day operations from scheduling to delivery. Seasoned across front end and back end; builds the reporting, interfaces and monitoring platform behind client deliverables.

Differentiators

  • Direct quantum-safe testing

    Our own TLS handshake test for X25519MLKEM768 on every endpoint, independent of the scanning machine's TLS library.

  • Vendor readiness included

    Which products support post-quantum algorithms and which do not yet, so procurement can act.

  • In-house tooling

    Our own scanner, tested against planted cryptography before every release, producing CycloneDX output.

  • Reproducible evidence

    Every finding traces to a tool result and a run manifest an assessor can check.

Past performance

Macher is a new firm. Methodology documentation and sample reports produced on public open-source systems are available on request.

Teaming and briefings

We work as a specialist subcontractor to primes, and respond to sources-sought notices and RFIs on post-quantum migration.

Book a briefing