Norwich University Applied Research Institutes

What Norwich University Applied Research Institutes does

Norwich University Applied Research Institutes (NUARI) is a 501(c)(3) nonprofit research and development organization federally chartered in 2002 under legislation sponsored by Sen. Patrick Leahy and affiliated with Norwich University, the oldest private senior military college in the United States. The organization's core offering is the DECIDE® (Distributed Environment for Critical Infrastructure Decision-making Exercises) Platform, a proprietary closed-loop simulation environment that enables geographically distributed teams to war-game coordinated responses to cyber attacks, kinetic events, and natural disasters across critical infrastructure sectors. NUARI also operates a Security Situation Center providing SOC, threat hunting, and information-sharing services, and contributes to the National Cybersecurity Preparedness Consortium (NCPC), which delivers FEMA-certified training courses to state, local, tribal, and territorial communities and critical infrastructure stakeholders nationwide. The organization is governed by a Board of Directors and co-located on the Norwich University campus in Northfield, Vermont, where it is constructing a new 13,000-square-foot Cyber Fusion Research and Development Center.

NUARI's revenue model is dominated by federal government grants and contracts from agencies including the Department of Homeland Security (DHS), Department of Defense (DoD), National Security Agency (NSA), National Institute of Standards and Technology (NIST), and DARPA. Visible multi-year awards include a $2.9M DHS Science and Technology Directorate contract for transportation-sector DECIDE expansion, a $1.6M NSA grant for experiential cybersecurity education, a shared $8M DHS/FEMA grant through the NCPC, a $5.9M DHS S&T award for critical infrastructure platform expansion, $4M for an AI/ML/quantum center, and a $10M DoD grant anchoring the Senior Military College Cyber Institutes program. Additional revenue derives from direct delivery of DECIDE-based cyber exercises to enterprise clients in energy, transportation, financial services, and maritime sectors, free NCPC training courses funded by DHS/FEMA grants, and a small portfolio of fee-based enterprise services (penetration testing via Norwich capstone students, NIST CSF consulting via NUARI SECURE®). Day-to-day operations are run by 11-50 employees supplemented by student interns staffing the SSC, with go-to-market centered on direct federal contracting, consortium-based distribution via NCPC, and event-driven demand generation at conferences such as CYDEF, AUSA, and the Jack Voltaic series.

The customer base spans U.S. federal agencies, state and local governments (including the State of Vermont Security Situation Center and election offices via Cyber Florida), critical infrastructure operators (public power utilities via the American Public Power Association, transportation and maritime organizations), and educational institutions designated as National Centers of Academic Excellence in Cybersecurity. The organization is currently in leadership transition, with Brian S. Bradke, Ph.D. appointed President effective December 1, 2025, succeeding Phil Susmann, who had led NUARI since 2005.

Name

Norwich University Applied Research Institutes

Legal name

Norwich University Applied Research Institutes

Website

https://nuari.org

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

11–50 employees

Short description

NUARI is a 501(c)(3) nonprofit research organization affiliated with Norwich University that builds the DECIDE® distributed cyber-exercise platform, operates a Security Situation Center, and delivers grant-funded FEMA-certified cybersecurity training to federal agencies, critical infrastructure operators, and academic institutions.

Ownership category

akta.pro rank

Product category

Critical Infrastructure Cybersecurity Training and Exercises

NAICS

Other Computer Related Services (541519), Computer Training (611420), Scientific Research and Development Services (5417)

SIC

Services-Prepackaged Software (7372), Services-Computer Processing & Data Preparation (7374), Services-Computer Programming Services (7371)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Network Detection & Response (NDR) (HDADABAI), Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

Keywords

• Distributed cyber exercises
• Critical infrastructure protection
• Cybersecurity training programs
• Security operations center
• Cyber incident response

Headquarters

HQ city

Northfield

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Federal Government Contracts and Grants: NUARI is funded primarily through federal grants and contracts from U.S. Department of Homeland Security (DHS), Department of Defense (DoD), and National Security Agency (NSA). Notable funding includes: $2.9M DHS contract for DECIDE platform expansion (transportation sector), $1.6M NSA grant for experiential cybersecurity education, $5.9M DHS S&T award for critical infrastructure protection platform, $8M DHS/FEMA grant shared with NCPC consortium, $250K NIST award for cybersecurity research, and $4M for AI/machine learning center development.
2. Training and Exercise Services: NUARI provides cybersecurity training and exercises to state, local, tribal, territorial (SLTT) communities and critical infrastructure stakeholders at no cost through grant-funded programs. Training is delivered via the National Cybersecurity Preparedness Consortium (NCPC).

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels7 records

Core offering

NUARI is a 501(c)(3) non-profit research and development organization that delivers distributed cybersecurity simulation exercises through the proprietary DECIDE® Platform, operates a live Security Operations Center (Security Situation Center / SSC), and provides grant-funded cyber preparedness training and consulting to government agencies, critical infrastructure operators, and educational institutions. Its portfolio combines research, evaluation of incident response plans, workforce development, and FEMA-certified NCPC training courses offered through a multi-university consortium.

Product overview

Norwich University Applied Research Institutes (NUARI) offers a portfolio of cybersecurity and defense technology products and services centered around three core offerings: the DECIDE® Platform as the flagship distributed cyber exercise solution, the Security Situation Center (SOC/SSC) providing operational security monitoring and threat hunting services, and NUARI SECURE® encompassing consulting and compliance services. The organization also delivers NCPC training courses including the FEMA-certified AWR-432 course, provides penetration testing through student programs, and participates in the National Cybersecurity Preparedness Consortium. These offerings work together to provide government and enterprise clients with comprehensive cybersecurity preparedness, from exercise-based training through operational security services.

Differentiator

Problem solved

Functional benefit

Brands

• DECIDE® Platform: Distributed Environment for Critical Infrastructure Decision-making Exercises - interactive simulation exercise platform for decision-makers improving coordinated response to cyber-attacks, kinetic events, and other disasters.
• NUARI SOC
• National Cybersecurity Preparedness Consortium (NCPC)
• AWR-432
• NUARI SECURE
• Security Situation Center (SSC)

Products and services

• DECIDE® Platform Distributed Environment for Critical Infrastructure Decision-making Exercises - an interactive simulation exercise platform for decision-makers that improves coordinated response to cyber-attacks, kinetic events, and other disasters through immersive distributed war-gaming scenarios. Used by government agencies and critical infrastructure operators nationwide.
• NUARI SOC (Security Situation Center / SSC) Functional Security Operations Center that monitors State of Vermont networks, conducts threat-hunting missions, and operates State Information Sharing activity. Extends beyond traditional SOC with threat hunting, information sharing, and actionable intelligence development, staffed by professionals and student interns.
• NUARI SECURE® Complement of services including consulting through NIST 800-series and Cybersecurity Framework (CSF), security monitoring, and threat hunting as part of the SOC services. Evaluates organizations' incident response plans to identify gaps and vulnerabilities in cybersecurity, emergency action plans, and strategic/crisis communication response.
• NCPC Training Courses Grant-funded, instructor-led cybersecurity courses delivered through the National Cybersecurity Preparedness Consortium (NCPC), including FEMA-certified courses like AWR-432 Integrating Cyber Hazard Response into Exercise Planning. Offered at no cost to eligible state, local, tribal, and territorial (SLTT) communities and critical infrastructure stakeholders.
• Penetration Testing Services Vulnerability assessments and network penetration testing conducted by Norwich University capstone class students, providing free security evaluations to clients. Leverages student talent pipeline for hands-on security testing engagements.

Quantifiable outcome

• 41 exercises completed in 2022 with 15 energy sector and 13 transportation sector organizations
• +3 more outcomes

Named customers11 records

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature3 records

Partnerships

Eleven partnerships are on record, tiered core and secondary.

• Army Cyber Institute (ACI) at West PointcoreStrategic or Co-development Partner · 23 June 2021Partnership for the Jack Voltaic Conference Series and joint development of exercise automation technology. ACI coordinates Army cyber exercises and collaborates with NUARI on critical infrastructure resilience research.
• DoD Senior Military College Cyber InstitutescoreStrategic or Co-development Partner · 1 October 2020Norwich University is lead institution in consortium of six senior military colleges (Norwich, Virginia Tech, VMI, The Citadel, University of North Georgia, Texas A&M) to grow nation's cybersecurity talent pipeline for DoD. Pilot program launched with $10M DoD grant.
• Meridian Strategic Services Inc.coreStrategic or Co-development PartnerStrategic partnership to help clients prepare for future cybersecurity incidents and complex hazards. Combines Meridian's emergency management and security expertise with NUARI's DECIDE distributed exercise platform to provide realistic crisis management scenarios.
• Cyber Florida (The Florida Center for Cybersecurity)coreStrategic or Co-development PartnerCollaboration focused on advancing mutual goals through joint efforts in research, information sharing, and training initiatives to enhance cybersecurity measures and critical infrastructure resilience, particularly for election security.
• National Cybersecurity Preparedness Consortium (NCPC)coreStrategic or Co-development PartnerUniversity-based collaboration committed to strengthening cybersecurity capacity across the US, its territories, and sovereign Tribal Nations. NUARI delivers grant-funded training through NCPC alongside University of Arkansas CJI, UTSA CIAS, Texas A&M TEEX, and University of Memphis CFIA.
• Georgia Cyber Center (GCC) at Augusta UniversitysecondaryStrategic or Co-development PartnerHosting state-level cyber emergency response exercises using NUARI's DECIDE platform and Jack Voltaic exercise tools. Planning team included GCC, ACI, NUARI, Georgia Technology Authority, Georgia Emergency Management, and private sector partners.
• State of Vermont (Agency of Digital Services)coreStrategic or Co-development PartnerNUARI operates the Security Situation Center (SSC) in cooperation with the State of Vermont CIO and Agency of Digital Services. Monitors state networks, conducts threat-hunting missions, and operates State Information Sharing activity.
• Norwich UniversitycoreStrategic or Co-development PartnerNUARI is affiliated with Norwich University, the oldest private senior military college in the US. The organizations collaborate on research, AI center development, student internships, and joint events. Norwich provides academic infrastructure and student pipeline.
• 52incsecondaryTechnology or IntegrationTechnology partner involved in developing new exercise automation technology in partnership with Army Cyber Institute, NUARI, and Johns Hopkins for the Jack Voltaic Conference Series.
• Johns Hopkins University Applied Physics LaboratorysecondaryTechnology or IntegrationResearch partner in developing new exercise automation technology with Army Cyber Institute, NUARI, and 52inc for the Jack Voltaic Conference Series.
• American Public Power Association (APPA)secondaryStrategic or Co-development PartnerPartnership for annual cybersecurity exercises for public power utilities. NUARI facilitated daylong activities using the DECIDE Platform to help utilities create and strengthen cyber incident response plans.

Scale indicators10 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• SANS Institute: SANS Institute is the dominant commercial provider of cybersecurity training, certifications (GIAC), and cyber range/exercise services worldwide. It competes with NUARI's NCPC training courses and exercise offerings in the broader cybersecurity workforce development market, particularly for federal government and critical infrastructure clients seeking paid professional development programs.
• MITRE Corporation: MITRE operates federally funded R&D centers (FFRDCs) and is a leading developer of frameworks (ATT&CK, ATT&CK for ICS, D3FEND) and cyber exercise/research capabilities used by U.S. government and critical infrastructure operators. MITRE is comparable to NUARI as a non-profit, federally chartered research entity serving national security and critical infrastructure missions with adjacent technology and exercise capabilities.
• CERT Division at Carnegie Mellon University's Software Engineering Institute: The CERT Division is a federally funded R&D center focused on cybersecurity research, incident response, and workforce development, operating from CMU as a university-affiliated program. It is comparable to NUARI for its non-profit research model, federal sponsorship (DHS, DoD), and focus on critical infrastructure resilience, incident response research, and cybersecurity workforce training through programs like the SEI Cyber Workforce Development program.
• Idaho National Laboratory (INL): INL is a Department of Energy national laboratory that leads critical infrastructure and OT/ICS cybersecurity research, including cyber-physical test ranges and exercise programs for the energy sector. INL is highly comparable to NUARI's work on DECIDE® for energy sector exercises, DHS-funded critical infrastructure protection platforms, and OT/ICS cybersecurity training.
• Center for Internet Security (CIS): CIS is a non-profit organization that develops security best practices (CIS Controls, CIS Benchmarks), operates the Multi-State Information Sharing and Analysis Center (MS-ISAC), and delivers cybersecurity training to SLTT governments. CIS is comparable to NUARI as a federally connected non-profit providing SLTT-focused cybersecurity preparedness, training, and threat information sharing services.
• Pacific Northwest National Laboratory (PNNL): PNNL is a Department of Energy national laboratory with significant critical infrastructure cybersecurity, OT/ICS security, and cyber exercise research programs. PNNL is comparable to NUARI for its federally funded critical infrastructure protection research, OT cybersecurity capabilities, and delivery of cybersecurity preparedness programs for the energy and utilities sectors.

Direct peers

• Army Cyber Institute (ACI) at West Point: The Army Cyber Institute is a U.S. Army-funded research institute at West Point that develops cyber education, war-gaming exercises (Jack Voltaic), and critical infrastructure resilience research in partnership with NUARI, 52inc, and Johns Hopkins APL. ACI is a direct peer and partner in co-developing the Jack Voltaic exercise series and distributed cyber exercise methodologies.
• SimSpace Corporation: SimSpace provides a commercial cyber range platform used by government agencies and enterprises to conduct cyber exercises, train SOC teams, and validate security tools. SimSpace competes most directly with NUARI's DECIDE® Platform as a commercial alternative for distributed cyber exercise and training environments in federal and critical infrastructure markets.
• Cyber Florida (Florida Center for Cybersecurity): Cyber Florida is a state-funded cybersecurity center that partners with NUARI for joint research, training, and election security exercises (e.g., Florida county election offices). As a state-level cybersecurity research and training center, it is a close peer and collaboration partner for NUARI's regional cyber preparedness and incident response exercise programs.
• National Cybersecurity Preparedness Consortium partners (University of Arkansas CJI, UTSA CIAS, Texas A&M TEEX, University of Memphis CFIA): These NCPC consortium partners collaborate with NUARI to deliver DHS/FEMA-funded cybersecurity preparedness courses to SLTT communities nationwide. They are direct peer organizations co-developing and co-delivering grant-funded training curricula under the same FEMA Homeland Security National Training and Education Division umbrella.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/the-dod-cyber-institutes

Revenue estimate

Valuation estimate

Number of profiles

Profiles14 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Norwich University Applied Research Institutes