What Tharros does

Tharros (formerly ANALYGENCE), founded in 2010 and headquartered in Fulton, Maryland, is a U.S. federal government-focused cybersecurity company specializing in vulnerability research, coordinated vulnerability disclosure, and mission-critical cyber operations for defense, intelligence, and civilian agencies. The company rebranded from ANALYGENCE to Tharros in February 2026 alongside a venture capital investment from Blue Delta Capital Partners, repositioning its brand around proactive cyber defense.

Tharros's product portfolio centers on three proprietary platforms: VINCE-NT, described as the only federal government-adopted coordinated vulnerability disclosure platform, providing scalable intake, triage, and validation workflows; InquisiTor, an AI-powered penetration testing forward kit built around a custom offline LLM trained on red team TTPs and engineered for air-gapped environments; and Crassus, an open-source Windows vulnerability discovery tool for DLL hijacking and privilege escalation flaws. These tools are layered onto a services portfolio spanning cyber RDT&E, red/blue/green/purple team operations, vulnerability research, RMF/ATO support, and cyber range development, with a research arm (Tharros Labs) feeding the tool roadmap.

Tharros generates revenue almost exclusively through U.S. federal prime contracts and IDIQ task orders on vehicles including GSA MAS, OASIS+, MDA SHIELD ($151B ceiling), SeaPort-NxG, NIST CAPSS ($125M ceiling), and the Polaris SDVOSB JV with CSA Global. Services are billed under federal acquisition frameworks as professional services with multi-year contract cadences, while VINCE-NT and Crassus are distributed open-source as demand-generation assets that pull consulting and integration work. Tharros holds ISO 9001:2015, ISO/IEC 20000-1:2018, and CMMI Maturity Level 3 (Services and Development) certifications, and operates from offices in Fulton, San Antonio, Scottsdale, Hampton, Toms River, and Dahlgren with a workforce of 300+ professionals as of February 2026.

Name

Tharros

Legal name

Tharros

Website

https://tharros.com

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

101–250 employees

Short description

Tharros (formerly ANALYGENCE) is a Fulton, Maryland-based cybersecurity company that delivers vulnerability research, AI-powered penetration testing, and the VINCE-NT coordinated vulnerability disclosure platform exclusively to U.S. federal defense, intelligence, and civilian agencies through prime IDIQ contracts.

Ownership category

akta.pro rank

Product category

Federal Cybersecurity Services

NAICS

Security Systems Services (56162)

akta.pro primary industry

Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)

akta.pro secondary industries

Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), Web Application Security (WAF, RASP) (HDADACAA), Endpoint Deception & Anti-Ransomware (HDADAEAL), Deception Technology & Threat Hunting (HDADAGAI)

Keywords

• Federal cybersecurity services
• Vulnerability research and disclosure
• Penetration testing platforms
• Cyber RDT&E operations
• Government mission cybersecurity

Headquarters

HQ city

Toms River

HQ country

United States

HQ region

North America

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Federal Government Cybersecurity Contracts: Tharros generates revenue primarily through federal government prime contracts and task orders via multiple contract vehicles (GSA MAS, OASIS+, MDA SHIELD, SeaPort-NxG, NIST CAPSS, Polaris JV). Services include cybersecurity assessments, vulnerability research, R&D, test & evaluation, and operational cyber support for defense, intelligence, and civilian agencies.
2. Open-Source Platform and Tool Distribution: VINCE-NT is distributed as an open-source platform with no licensing fees, lowering barriers for CERTs, PSIRTs, and public-sector institutions. While the platform itself is free, it drives demand for Tharros' consulting, integration, and professional services.

Pricing tiers

Go-to-market motion2 records

Distribution channels6 records

Marketing channels5 records

Core offering

Tharros delivers mission-critical cybersecurity services and proprietary tools to U.S. federal government agencies, focusing on vulnerability research, coordinated vulnerability disclosure, penetration testing, and cyber operations. Its product portfolio includes VINCE-NT (the only government-adopted coordinated vulnerability disclosure platform), InquisiTor (an AI-powered penetration testing kit with custom offline LLM for air-gapped environments), and Crassus (an open-source Windows vulnerability discovery tool), delivered alongside cyber RDT&E, red/blue/purple team operations, and RMF/ATO support.

Product overview

Tharros offers a unified cybersecurity platform combining proprietary tools with government-adopted capabilities. The core portfolio includes VINCE-NT (the only federal government-adopted coordinated vulnerability disclosure platform for intake, triage, and validation), InquisiTor (an AI-powered penetration testing forward kit with custom offline LLM for restricted environments), and Crassus (open-source Windows vulnerability discovery tool for DLL hijacking and privilege escalation). These products are complemented by cyber RDT&E services (cyber range development, red & blue team tools, vulnerability research and scoring), cyber operations (penetration testing, reverse engineering, vulnerability scanning, RMF & ATO services, incident response, CSOC, exploit library), and offensive AI toolkits—all unified under Tharros' mission to detect zero-day vulnerabilities before they impact government agencies.

Differentiator

Problem solved

Functional benefit

Brands

• VINCE-NT: World-leading coordinated vulnerability disclosure platform - the only federal government-adopted coordinated vulnerability disclosure platform in the world.
• InquisiTor
• Crassus
• Tharros Labs

Products and services

• VINCE-NT Coordinated Vulnerability Disclosure Platform A scalable, open-source coordinated vulnerability disclosure platform enabling organizations to rapidly conduct intake, triage, and validation of vulnerabilities before they become threats. The only federal government-adopted coordinated vulnerability disclosure platform, built on decades of Tharros vulnerability research experience.
• InquisiTor Penetration Testing Forward Kit An AI-powered penetration testing forward kit that uses a custom offline LLM to guide vulnerability assessments and suggest exploit techniques. Designed for use in restricted and air-gapped environments with no data exfiltration risk, accelerating red team and offensive security engagements for federal clients.
• Crassus Vulnerability Discovery Tool An open-source Windows vulnerability discovery tool that uncovers DLL hijacking and privilege escalation flaws by identifying when unprivileged users can manipulate or modify processes or load libraries, then automatically generating source code for proxy DLLs.
• Cyber Research, Development, Test, and Evaluation (RDT&E) Services Pioneering security solutions enabling federal agencies to advance missions with confidence, including cyber range development, vulnerability research and scoring, and evaluation of emerging threats such as AI-adoption vulnerabilities in critical federal systems.
• Cyber Operations Services Full-spectrum cyber operations partnering with government agencies to advance in the face of threats ranging from everyday incidents to zero-day exploits. Includes red, blue, green, and purple team operations, penetration testing, vulnerability scanning, cyber incident response, malware analysis, reverse engineering, and access to an exploit library containing threats not yet publicly known.
• Cyber Capability Development Services Services that harden systems faster and keep them secure longer, including Risk Management Framework (RMF) and Authorization to Operate (ATO) support, continuous ATO (cATO) monitoring, and integration of proprietary tools like VINCE-NT and InquisiTor into agency mission environments.

Quantifiable outcome

• Ranked No. 1,539 on Inc. 5000 with 283% three-year revenue growth
• +4 more outcomes

Named customers4 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability6 records

Feature5 records

Partnerships

Three partnerships are on record, tiered core.

• Perdigita, LLC (Polaris Joint Venture)coreStrategic or Co-development PartnerPerdigita, LLC is a joint venture between Tharros and CSA Global, LLC operating as the Polaris Multiple Award IDIQ. The joint venture is designated as Service Disabled Veteran Owned Small Business (SDVOSB), has an unlimited contract ceiling, and expires December 1, 2035. It provides Tharros with access to SDVOSB-set-aside contract opportunities in the federal market.
• CSA Global, LLCcoreStrategic or Co-development PartnerCSA Global, LLC partners with Tharros in the Perdigita, LLC joint venture to operate the Polaris Multiple Award IDIQ contract vehicle for federal government cybersecurity opportunities under SDVOSB designation.
• National Institute of Standards and Technology (NIST)coreStrategic or Co-development PartnerTharros (under ANALYGENCE brand) was selected by NIST in 2024 to work on reducing a backlog in the National Vulnerabilities Database and was later awarded follow-on contracts for NVD support and Cybersecurity Framework 2.0 advancement. Also contracted to support the U.S. AI Safety Institute in developing cybersecurity evaluation tasks for frontier AI models.

Scale indicators6 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• SAIC: Federal IT and cybersecurity services prime supporting DoD and federal civilian agencies. Comparable as a holder of major federal IDIQ vehicles with overlapping mission sets in cyber operations and vulnerability research.
• Peraton: Federal services provider focused on national security, cyber, and intelligence community missions. Comparable in customer base (DoD, intelligence) and IDIQ vehicle footprint relevant to Tharros' contract mix.
• CACI International: Federal IT services and national security solutions provider with significant presence in cyber operations, electronic warfare, and intelligence community support — competes for many of the same federal cyber task orders as Tharros.
• Leidos: Major federal systems integrator with a sizable cybersecurity and vulnerability management portfolio serving defense and intelligence clients. Overlaps with Tharros on NIST-adjacent cyber frameworks and defense cyber operations work.
• Parsons Corporation: Federal solutions provider with a growing cybersecurity and critical infrastructure protection portfolio serving defense and intelligence clients. Comparable in federal cyber RDT&E mission overlap.
• Booz Allen Hamilton: Large established federal consulting and cybersecurity services firm with a significant zero-trust, vulnerability research, and cyber operations practice serving DoD, intelligence community, and civilian agencies — overlaps with Tharros' federal cyber mission focus.

Direct peers

• ManTech International: Federal-focused cybersecurity and IT services provider serving defense, intelligence, and federal civilian agencies. Most directly comparable federal cyber peer at similar past-performance depth and IDIQ footprint; acquired by Carlyle in 2022.

Emerging players

• HackerOne: Vulnerability disclosure and bug bounty platform used by federal agencies including the U.S. Department of Defense. Comparable as a vulnerability disclosure platform competitor to Tharros' VINCE-NT, though operating a commercial crowdsourced model versus Tharros' government-adopted self-hosted platform.
• Two Six Technologies: Federal technology services firm specializing in cyber, data analytics, and mission solutions for DoD and intelligence clients. Comparable in scale and federal cyber services focus.
• BlueHalo: Mid-sized federal technology and cybersecurity platform serving national security customers with capabilities in directed energy, cyber, and space. Comparable as a fast-growing federal cyber/scale-up peer pursuing similar acquisition-led growth strategy.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/tharros-cybersecurity

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Subsidiaries1 record

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Tharros