Dark Sky Technology
Dark Sky Technology, a privately held Fort Collins-based firm, sells the Bulletproof Trust SBOM and cyber supply chain risk management platform to U.S. defense, aerospace, medical-device, and critical-infrastructure customers, with deployment options spanning SaaS, on-prem, and air-gapped environments.
- Company typePrivate
- Founded2021
- HeadquartersFort Collins, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Dark Sky Technology does
Dark Sky Technology is a privately held U.S. software company, headquartered in Fort Collins, Colorado, that builds software supply chain risk management (C-SCRM) and SBOM (Software Bill of Materials) tooling for defense, federal civilian, medical device, and critical infrastructure buyers. Its flagship platform, Bulletproof Trust, is composed of three integrated modules — SBOM Vault (generation, storage, validation, and sharing of SBOMs in CycloneDX and SPDX formats), Firewall (policy-based blocking of risky open-source packages at development time across NPM, PyPI, Maven, Cargo, NuGet, and GoLang), and Threat Intelligence (continuous monitoring of 40+ vulnerability databases plus contributor trust and geopolitical risk analysis) — augmented by Bulletproof Code, an ML engine developed under a DARPA Phase II SBIR that translates C/C++ programs into memory-safe Rust. The platform supports four deployment modes (SaaS, private cloud, on-prem, and air-gapped) and integrates with developer toolchains via a Swagger-compliant REST API, a VSCode plugin, GitHub PR automation, and Model Context Protocol (MCP) integration with third-party LLMs.
The company sells through a direct sales-led motion with tiered annual subscriptions (Project, Program, Enterprise), supplemented by a strategic Carahsoft reseller partnership that makes Bulletproof Trust available through federal procurement vehicles including SEWP V, NASPO ValuePoint, and OMNIA Partners. Named customers and references include the U.S. Air Force, U.S. Army, Lockheed Martin, Northrop Grumman, and the FDA. The firm is 100% U.S.-owned and operated by U.S. citizens, with all employees cleared or clearable, and is pre-canned for compliance with FDA Section 524B, EU Cyber Resiliency Act, DoD/NIST SSDF, CMMC, NIST 800-171/53, and IEC 62443.
Leadership comprises founder and president Sandy Ring (former CIA analyst and founder of Pikewerks), CEO Michael Mehlberg (ex-Arxan, Microsemi, Cryptography Research/Rambus, and Star Lab/Wind River), and CFO Michael Ring (U.S. Navy and Intelligence Community background). The company has raised a small non-dilutive $250,000 from the Colorado Advanced Industries Accelerator Program in 2023 and has relied on DARPA SBIR research funding rather than venture capital. With 1-10 employees, Dark Sky Technology is a small, capital-efficient team operating in a category dominated by larger players such as Sonatype, Snyk, and JFrog.
Dark Sky Technology firmographics
Firmographics- Name
- Dark Sky Technology
- Legal name
- Dark Sky Technology, Inc.
- Website
- https://darkskytechnology.com
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Dark Sky Technology, a privately held Fort Collins-based firm, sells the Bulletproof Trust SBOM and cyber supply chain risk management platform to U.S. defense, aerospace, medical-device, and critical-infrastructure customers, with deployment options spanning SaaS, on-prem, and air-gapped environments.
- Ownership category
- akta.pro rank
Dark Sky Technology industry classification
Industry- Product category
- Cyber Supply Chain Risk Management (C-SCRM) Software
- NAICS
- Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Software Supply Chain & Dependency Security (SBOM, Signing) (HDADACAD)
- akta.pro secondary industries
- AI Supply Chain Security & SBOM/Model Provenance (artifacts, lineage) (HDAAAKAG), Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)
Keywords
Where Dark Sky Technology is headquartered
LocationHeadquarters
- HQ city
- Fort Collins
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Dark Sky Technology business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure
Revenue model
- SaaS Subscription: Cloud-hosted instance of Bulletproof Trust with annual subscription billing. All features included (Threat Intelligence, SBOM Vault, Firewall).
- Private Cloud Deployment: Deployment to customer's own AWS or other cloud instance. One-time deployment fee plus recurring subscription.
- On-Prem Deployment: Container, VM, or binary deployment on customer premises. Includes one-time deployment fee plus annual subscription.
- Air-Gapped Deployment: Full functionality deployment for disconnected environments with encrypted storage and restricted access. Annual subscription model.
- Enterprise Licensing: Enterprise-wide deployment across multiple programs and software projects with 12-month annual subscription and full support.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Small project teams building a single application or software subcomponent |
| Subscription | Annual | Large projects consisting of multiple projects, software applications, or software subcomponents rolling up to a larger system |
| Subscription | Annual | Enterprise-wide deployment |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels5 records
Dark Sky Technology product offering
Product offeringCore offering
Dark Sky Technology develops and sells the Bulletproof Trust platform, a Cyber Supply Chain Risk Management (C-SCRM) solution that generates, validates, stores, and manages Software Bills of Materials (SBOMs), enforces open-source package policies via a build-time firewall, and provides continuous vulnerability and contributor-trust monitoring. The platform is offered in SaaS, on-prem, private cloud, and fully air-gapped deployments and is targeted at defense agencies, federal contractors, medical device manufacturers, and critical infrastructure operators. A separate product, Bulletproof Code, uses machine learning to translate C and C++ programs into memory-safe Rust.
Product overview
Dark Sky Technology offers Bulletproof Trust, a unified software supply chain risk management platform comprising three integrated modules: SBOM Vault for secure SBOM generation, storage, validation and sharing; Firewall for package policy enforcement and risk blocking at development time; and Threat Intelligence for continuous vulnerability monitoring and contributor trust analysis. Additionally, Bulletproof Code is a separate ML-powered product that translates C/C++ code to memory-safe Rust. All products support deployment in SaaS, on-prem, private cloud, and air-gapped environments for government and regulated industries.
Differentiator
Problem solved
Functional benefit
Brands
- Bulletproof Trust: SBOM Management and Cyber Supply Chain Risk Management (C-SCRM) software platform for defense and regulated industries.
- Bulletproof Code
Products and services
- Bulletproof Trust Cyber supply chain risk management (C-SCRM) platform providing SBOM generation, vulnerability monitoring, contributor trust analysis, and policy enforcement across the software development lifecycle. Deployed in SaaS, on-prem, private cloud, and air-gapped environments for government agencies and commercial enterprises.
- Bulletproof Trust SBOM Vault Secure SBOM storage, generation, validation, and management platform supporting CycloneDX and SPDX formats with revision control, secure sharing/receiving with suppliers, NTIA compliance validation, and threat intelligence analysis. Sold as part of the Bulletproof Trust subscription.
- Bulletproof Trust Firewall Package firewall that enforces software supply chain trust policies at development time, blocking risky contributors, vulnerable packages, and incompatible licenses before they enter the pipeline. Supports NPM, PyPI, Maven, Cargo, NuGet, GoLang and Linux distributions.
- Bulletproof Trust Threat Intelligence Threat intelligence module providing continuous vulnerability monitoring across 40+ databases, contributor trust analysis, package health scoring, and actionable remediation recommendations to reduce risk.
- Bulletproof Code Machine learning-based tool that automatically translates C and C++ programs into Rust code to eliminate memory safety vulnerabilities. Result of a DARPA Phase II SBIR, fully encapsulated with no internet connection required.
Quantifiable outcome
- Memory-safety vulnerabilities eliminated by translating C/C++ to Rust
- +1 more outcomes
Companies that use Dark Sky Technology
Customer profileNamed customers5 records
Segments6 records
Ideal customer profiles4 records
Dark Sky Technology technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration10 records
AI capability6 records
Feature8 records
Dark Sky Technology partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Carahsoft Technology Corp.coreStrategic partnership making Dark Sky's Bulletproof Trust platform available to government agencies through Carahsoft's reseller network and multiple government procurement contracts including SEWP V, NASPO ValuePoint, and OMNIA Partners. The platform analyzes open source software components and contributors across multiple risk dimensions, monitoring over 30 vulnerability databases to help agencies identify security risks and enforce compliance policies within development pipelines.
Scale indicators6 records
Recent moves6 records
Expansion highlights6 records
Dark Sky Technology competitors and assessment
Company assessmentDirect peers
- Snyk: Snyk is a leading developer security platform that includes software composition analysis, SBOM management, and vulnerability monitoring for open-source dependencies. It directly competes with Bulletproof Trust across the same SCA/SBOM buyer and developer persona.
- ReversingLabs: ReversingLabs provides software supply chain security, malware analysis, and binary/component verification. Its threat-intelligence-led approach to open-source risk parallels Bulletproof Trust's contributor-trust and threat-intelligence modules.
- Sonatype: Sonatype's Nexus platform is a pioneer in software supply chain management, providing SBOM creation, component intelligence, and policy enforcement. It competes head-to-head with Bulletproof Trust in regulated and enterprise DevSecOps use cases.
- Anchore: Anchore provides SBOM generation, vulnerability scanning, and policy-based compliance for containers and software supply chains. Its federal and DoD customer footprint and SBOM-centric product overlap closely with Bulletproof Trust.
- Synopsys Black Duck: Black Duck (now part of Synopsys) offers comprehensive SCA, SBOM, license compliance, and security testing. It targets the same regulated, large-enterprise and defense buyer as Dark Sky Technology's Bulletproof Trust.
- Cycode: Cycode is a software supply chain security platform covering SCA, SBOM, secrets detection, and pipeline security. It targets enterprise DevSecOps teams with comparable positioning to Bulletproof Trust's policy enforcement and SBOM workflows.
Emerging players
- Endor Labs: Endor Labs focuses on software dependency management, reachability analysis, and supply-chain risk reduction for enterprise development teams. Its reachability-based approach is directly comparable to Bulletproof Trust's vulnerability reachability feature.
- Chainguard: Chainguard focuses on hardened, minimal-container base images and software supply chain security. It overlaps with Bulletproof Trust's mission of trust in open-source components, particularly for regulated and federal buyers adopting secure-by-default artifacts.
Broad incumbents
- JFrog: JFrog offers an end-to-end DevSecOps and binary/artifact management platform with built-in SCA and SBOM capabilities. As a broad incumbent, it overlaps with Bulletproof Trust at the supply-chain security layer within larger enterprise and federal estates.
- GitHub Advanced Security: GitHub Advanced Security bundles Dependabot, secret scanning, and code scanning into the GitHub developer workflow. As a broad incumbent and the de facto registry for many government repos, it competes with Bulletproof Trust's GitHub PR automation and SCA workflows.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Dark Sky Technology compliance and trust
Trust signalCompliance8 records
Dark Sky Technology financial estimates
Financial estimateRevenue estimate
Valuation estimate
Dark Sky Technology leadership team
Management profileNumber of profiles
Profiles3 records
Dark Sky Technology funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Dark Sky Technology M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Dark Sky Technology
What does Dark Sky Technology do?
Dark Sky Technology develops and sells the Bulletproof Trust platform, a Cyber Supply Chain Risk Management (C-SCRM) solution that generates, validates, stores, and manages Software Bills of Materials (SBOMs), enforces open-source package policies via a build-time firewall, and provides continuous vulnerability and contributor-trust monitoring. The platform is offered in SaaS, on-prem, private cloud, and fully air-gapped deployments and is targeted at defense agencies, federal contractors, medical device manufacturers, and critical infrastructure operators. A separate product, Bulletproof Code, uses machine learning to translate C and C++ programs into memory-safe Rust.
Is Dark Sky Technology a public or private company?
Dark Sky Technology is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Dark Sky Technology founded?
Dark Sky Technology was founded in 2021. It employs 1 to 10 people.
Where is Dark Sky Technology based?
Dark Sky Technology is headquartered in Fort Collins, United States, in the North America region.
How does Dark Sky Technology make money?
Five revenue lines are on record. SaaS Subscription is the primary driver. The others are private Cloud Deployment, on-Prem Deployment, air-Gapped Deployment and enterprise Licensing.
Who are Dark Sky Technology's main competitors?
Direct peers on record are Snyk, ReversingLabs, Sonatype, Anchore, Synopsys Black Duck and Cycode. Emerging players are Endor Labs and Chainguard. Broad incumbents are JFrog and GitHub Advanced Security.
Does Dark Sky Technology have an API?
Yes. Full-featured Swagger-compliant REST API drives all dashboard functionality, loaded with data on open-source packages and contributors from over a trillion commits. Developers can connect directly to the API to perform all analysis, manage the platform, and integrate with build environments. CLI tools are also included for command-line access.
What industry is Dark Sky Technology in?
Dark Sky Technology's product category is Cyber Supply Chain Risk Management (C-SCRM) Software. Its primary akta.pro industry code is HDADACAD, Software Supply Chain & Dependency Security (SBOM, Signing), with a secondary code of HDAAAKAG, AI Supply Chain Security & SBOM/Model Provenance (artifacts, lineage). Its NAICS code is 54151 and its SIC code is 7371.