National Cybersecurity Center of Excellence

What National Cybersecurity Center of Excellence does

The National Cybersecurity Center of Excellence (NCCoE) is a U.S. federal government organization established in 2012 and operated as part of the Applied Cybersecurity Division of the National Institute of Standards and Technology (NIST), within the Department of Commerce. The center is headquartered in Rockville, Maryland at 9700 Great Seneca Highway. Its function is to convene industry, government, and academic collaborators to address real-world cybersecurity challenges through practical, standards-based reference solutions aligned with the NIST Cybersecurity Framework, NIST SP 800 series, and sector-specific guidance. NCCoE operates a collaborative-hub model — not a commercial product business — in which technology vendors contribute hardware, software, and engineering via Cooperative Research and Development Agreements (CRADAs), and outputs are released as free, publicly accessible guidance documents. Research and engineering execution is supported by the National Cybersecurity FFRDC operated by MITRE since 2014.

NCCoE's work is organized across four strategic pillars: Data Protection (post-quantum cryptography migration, CMVP automation, genomic data, mobile driver's license, ransomware profile); Trusted Enterprise (5G cybersecurity, data classification, DevSecOps, zero trust architecture); Artificial Intelligence (Dioptra AI testing platform, autonomous vehicle vision testbed, NLP chatbot, Cyber AI Profile, AI agent identity/authorization); and Resilient Embedded Systems (manufacturing ICS, supply chain assurance, OT asset management, and sector profiles for healthcare, financial services, energy, water/wastewater, manufacturing, transit, and public safety). Outputs include the NIST SP 1800 series practice guides, NISTIRs, Community Profiles, and reference architectures built from commercially available technology. The portfolio currently spans 40 finalized projects with an additional pipeline in comment review, public comment, and draft phases.

The revenue model is government appropriations: NCCoE does not sell products or services, levy licensing fees, or generate commercial revenue. All practice guides, reference architectures, framework profiles, and toolkits are distributed at no cost via nccoe.nist.gov, the NIST CSRC publication portal, NVL Pubs, GovDelivery email, LinkedIn, X, YouTube, and Federal Register notices. The center reaches technology buyers indirectly by influencing procurement standards — federal agencies, critical infrastructure operators, and commercial enterprises adopt NCCoE reference architectures when configuring cybersecurity controls, creating pull-through demand for CRADA-participating vendors.

Name

National Cybersecurity Center of Excellence

Legal name

National Cybersecurity Center of Excellence

Website

https://nccoe.nist.gov

Company type

Private

Founded year

2012

Operating status

Operating

Short description

The National Cybersecurity Center of Excellence (NCCoE) is a U.S. federal government organization within NIST that develops and freely publishes standards-based cybersecurity reference architectures, practice guides, and framework profiles through public-private collaboration with industry, government, and academia across critical infrastructure sectors.

Ownership category

akta.pro rank

Product category

Cybersecurity Standards and Reference Implementations

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Cybersecurity (General) (EDAOAIAB)

akta.pro secondary industries

Application Security & Secure Software (DevSecOps) (EDAOAIAK), Cybersecurity Architecture & Security Integration (BPAEAAAL), Grid Cyber Risk Management, Governance, Compliance & Audit (NERC CIP/IEC 62443) (EUADANAC), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Cybersecurity Learning Platforms (EDAFANAF)

Keywords

• Cybersecurity reference architectures
• NIST cybersecurity practice guides
• Critical infrastructure security
• Zero trust implementation guidance
• Public-private cybersecurity collaboration

Headquarters

HQ city

Rockville

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure

Revenue model

1. Government Appropriated Funding: The NCCoE is part of NIST's Applied Cybersecurity Division, funded through U.S. federal government appropriations. It does not generate commercial revenue. All publications, guidance, and example solutions are provided free of charge to the public.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels9 records

Core offering

The NCCoE develops modular, standards-based cybersecurity example implementations and reference architectures using commercially available technologies, organized across four pillars: Data Protection (post-quantum cryptography, digital identity, CMVP automation, genomic privacy), Trusted Enterprise Infrastructure (5G, DevSecOps, data classification, zero trust), AI Cybersecurity (Dioptra testing platform, Cyber AI Profile, AI agent identity), and Resilient Embedded Systems (ICS/OT security, supply chain, water/wastewater, transit). Deliverables include NIST SP 1800 series practice guides, NISTIR reports, framework profiles, and reference implementations published free of charge to the public.

Product overview

The National Cybersecurity Center of Excellence (NCCoE) is not a commercial product company but rather a collaborative hub operated by NIST that develops modular, standards-based cybersecurity example solutions and publishes practical guidance documents. The organization's work is organized across four strategic pillars: Data Protection (cryptography, identity, privacy-preserving technologies including CMVP automation, genomic data privacy, digital identities/mDL, PETs, post-quantum cryptography, ransomware profile), Trusted Enterprise (5G cybersecurity, data classification, DevSecOps), Artificial Intelligence (autonomous vehicle vision, Cyber AI Profile, Dioptra testing platform, NCCoE Chatbot, AI agent identity/authorization), and Resilient Embedded Systems (manufacturing ICS security, supply chain, OT/IoT security, transit, water utilities). NCCoE publishes freely available NIST Special Publications (SP 1800 series), white papers, internal reports, and framework profiles that organizations can implement using commercially available technology. The center works with technology vendors through CRADA agreements to demonstrate implementations, but these are reference architectures and guidance documents, not commercial products.

Differentiator

Problem solved

Functional benefit

Products and services

• Implementing a Zero Trust Architecture (NIST SP 1800-35) Reference implementations and practice guide for zero trust architectures built according to NIST SP 800-207, demonstrating how organizations can reduce cyber attack risk through commercial product integration. Targeted at enterprise and federal IT security leaders.
• 5G Cybersecurity Reference Architecture Practical solutions and reference architectures that strengthen the security of 5G network components, providing secure cloud-based supporting infrastructure and enabling 5G security features; targets mobile network operators and 5G-using enterprises.
• Secure Software Development (DevSecOps) Practice Guide Demonstrates applied, risk-based approach and recommendations for secure DevOps and software supply chain practices using a DevSecOps toolchain of commercially available products; targets software development organizations and federal agencies.
• Dioptra AI/ML Testing Platform Software test platform for assessing the trustworthy characteristics of AI models, including adversarial machine learning conditions; targets AI developers, researchers, and federal agencies evaluating AI system security.
• Migration to Post-Quantum Cryptography Reference architectures and practices demonstrating migration from quantum-vulnerable public-key cryptography to NIST standardized post-quantum cryptographic algorithms; targets federal agencies, financial institutions, and critical infrastructure operators.
• Digital Identities — Mobile Driver's License (mDL) Accelerates adoption of standards and best practices for mobile driver's licenses, demonstrating real-world business use cases integrating mDLs with commercially available technology; targets government agencies, financial institutions, and identity providers.
• Automation of the NIST Cryptographic Module Validation Program (CMVP) Demonstrates automation tools and practices to improve the efficiency and timeliness of CMVP operations; targets cryptographic module vendors and federal testing programs.
• Supply Chain Assurance Practice Guide (NIST SP 1800-34) Demonstrates methods to verify that internal components of computing devices are genuine and have not been tampered with; targets federal agencies, manufacturers, and supply chain operators.
• Trusted Cloud: Hybrid Cloud IaaS Security (NIST SP 1800-19) Demonstrates how trusted compute pools leveraging hardware roots of trust can secure cloud workloads in hybrid IaaS environments; targets federal agencies and enterprises operating hybrid cloud infrastructure.
• Healthcare Sector Cybersecurity Practice Aids Cybersecurity guidance and example solutions addressing healthcare-specific risks including Picture Archiving and Communication Systems (PACS), Electronic Health Records on mobile devices, telehealth security, and wireless infusion pumps; targets healthcare delivery organizations.
• Financial Services Sector Cybersecurity Practice Aids Demonstrates best practices and standards for mitigating cybersecurity and privacy risks in financial services, covering IT asset management, access rights, privileged accounts, and mobile driver's license integration; targets banks and financial institutions.
• Energy Sector Cybersecurity Practice Aids Guidance and example solutions for utilities and operators of critical energy infrastructure protecting IT and OT systems, including LNG CSF profile, identity and access management, asset management, and situational awareness projects.
• Securing Water and Wastewater Utilities (NIST SP 1800-45) Reference architecture and demonstrations of secure remote access, network segmentation, asset management, and data integrity for water and wastewater utilities of all sizes; targets water and wastewater utility operators.
• Manufacturing Sector Cybersecurity Practice Aids Practical example solutions and community profiles for manufacturing cybersecurity challenges, including supply chain traceability, semiconductor manufacturing CSF profile, incident response and recovery, behavioral anomaly detection, and security segmentation; targets manufacturers and OT operators.
• Transit Cybersecurity Framework (CSF) Community Profile CSF Community Profile helping transit agencies protect critical operations as transit systems increasingly rely on IT and OT technologies; targets public transit agencies and transportation authorities.
• Public Safety/First Responder Cybersecurity Practice Aids Implements standards-based solutions for public safety systems resilience, including ICAM modernization, mobile device biometrics for first responders, IDaaS, identity federation, and MFA for CJIS; targets public safety agencies and first responder organizations.
• Cybersecurity and Privacy of Genomic Data Provides guidelines and resources for enabling secure technology adoption for genomic data, including the Privacy-Enhancing Technologies (PETs) Testbed for evaluating privacy capabilities; targets genomic researchers, healthcare organizations, and federal agencies.
• Autonomous Vehicle Vision Cybersecurity Project Public dataset and testbed for cyber assurance of autonomous vehicles using computer vision, addressing difficult and adversarial road/traffic conditions; targets autonomous vehicle developers, researchers, and federal regulators.
• NCCoE Chatbot (Generative AI Security Project) Generative AI project to support NCCoE operations and to understand the benefits, vulnerabilities, and mitigations of generative AI systems; targets federal agencies deploying generative AI and the broader AI security research community.
• Software and AI Agent Identity and Authorization Concept Paper Draft concept paper exploring identity and authorization controls for AI and software agents capable of autonomous decision-making with limited human supervision; targets federal agencies and enterprises deploying AI agents.
• Cyber AI Profile (NIST CSF Profile for AI) NIST Cybersecurity Framework Profile providing guidance to address the cybersecurity risks related to AI development and use; targets AI developers, deploying organizations, and federal regulators.
• Practical Guidelines for Preventing and Mitigating Ransomware (NIST SP 1800-41) Practical guidelines for preventing and mitigating ransomware attacks based on NIST frameworks; targets enterprises, critical infrastructure operators, and federal agencies.
• Cybersecurity for the Space Domain Cybersecurity guidance for national space assets and commercial space operations, including the Hybrid Satellite Networks Cybersecurity project; targets space operators, defense agencies, and commercial space companies.
• Consumer Data Protection Practice Aids Helps retail and hospitality sectors protect consumer data through Multifactor Authentication for E-Commerce and Securing Property Management Systems projects; targets retailers, hospitality operators, and consumer-facing service providers.

Quantifiable outcome

• 40 finalized practice guides and framework profiles available for free public download
• +1 more outcomes

Named customers7 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability10 records

Feature4 records

Partnerships

14 partnerships are on record, tiered core and flagship.

• 5G Cybersecurity Project CollaboratorscoreTechnology or IntegrationAMI, AT&T, CableLabs, Cisco, Dell Technologies, Intel, Keysight Technologies, MiTAC, Nokia, Palo Alto Networks, and T-Mobile collaborate through CRADA agreements to demonstrate 5G cybersecurity capabilities and develop practical implementation guidance for securing 5G network deployments.
• DevSecOps Project CollaboratorscoreTechnology or IntegrationAMI, Black Duck, CyberArk, Dell Technologies, DigiCert, Endor Labs, Google, IBM, Microsoft, NextLabs, Palo Alto Networks, Resilience Cyber Security, and Sagittal AI signed CRADAs to demonstrate secure software development practices and DevSecOps toolchain implementations.
• Mobile Driver's License (mDL) ConsortiumcoreTechnology or Integration32 organizations including 1Password, AAMVA, Apple, Capital One, DHS S&T, GSA Login.gov, Google, Idemia, JP Morgan Chase, LexisNexis, Microsoft, Okta, OpenID Foundation, PNC Bank, US Bank, Wells Fargo, and Yubico collaborate to accelerate mDL standards and demonstrate real-world use cases for digital identity.
• Trusted Cloud Project CollaboratorscoreTechnology or IntegrationGemalto, Hytrust, RSA, and VMware collaborate to demonstrate trusted cloud solutions for hybrid IaaS environments, showing how trusted compute pools can secure cloud workloads.
• Zero Trust Architecture Project CollaboratorscoreTechnology or Integration24 vendors including Appgate, AWS, Broadcom, F5, Forescout, Google Cloud, Ivanti, Lookout, Mandiant, Microsoft, Omnissa, Palo Alto Networks, Ping Identity, SailPoint, Tenable, Trellix, Zimperium, and Zscaler collaborated to demonstrate end-to-end zero trust architectures.
• Supply Chain Assurance Project CollaboratorscoreTechnology or IntegrationArcher, Dell Technologies, Eclypsium, HP Inc., Hewlett Packard Enterprise, IBM, Intel, and Seagate collaborate to demonstrate methods for verifying computing device component integrity and authenticity throughout the supply chain lifecycle.
• Automation of CMVP Project CollaboratorscoreTechnology or IntegrationAcumen Security, AEGISOLVE, Apple, atsec, AWS, Cisco, Cloudflare, Katalyst, Lightship Security, NXP Semiconductors, and SUSE signed CRADAs to demonstrate automation tools for cryptographic module validation.
• Water/Wastewater Utilities Project CollaboratorscoreTechnology or IntegrationASDWA, Bedrock Systems, CISCO, Cyber 2.0, Denver Water, Dragos, I&C Secure, Q-Net Security, Radiflow, StrongDM, TDI Technologies, US ABB, West Yost, and WSSC Water collaborate on cybersecurity guidance for water sector OT systems and secure remote access.
• National Cybersecurity Excellence Partnership (NCEP) Program PartnersflagshipStrategic or Co-development Partner30+ technology leaders including AWS, Broadcom, Cisco, Cloudflare, CyberArk, Dell, DigiCert, Dragos, F5, Fortinet, Google Cloud, HPE, IBM, Intel, JP Morgan Chase, Microsoft, Motorola Solutions, Palo Alto Networks, Tenable, Thales, Trellix, and Zscaler provide ongoing technical input, equipment, and guest researchers to advance NCCoE cybersecurity projects.
• Department of Homeland Security (DHS)coreStrategic or Co-development PartnerDHS CDM program received NCCoE technical expertise for developing cybersecurity dashboards and federal agency risk reporting capabilities.
• U.S. Air Force Research Laboratory (AFRL)coreStrategic or Co-development PartnerNCCoE collaborated with AFRL to update and accelerate adoption of Cyber Survivability Attributes (CSA) tool incorporating NIST SP 800-160 Volume 2 guidance.
• U.S. Coast GuardcoreStrategic or Co-development PartnerUSCG collaborated with NCCoE and maritime industry to develop Cybersecurity Framework Profiles for Maritime Bulk Liquids Transfer, Offshore Operations, and Passenger Vessel Operations.
• U.S. Department of TransportationcoreStrategic or Co-development PartnerDOT partnered with NCCoE to create Cybersecurity Framework Profile and Privacy Risk Assessment Methodology for Connected Vehicle Environments supporting intelligent transportation systems deployment.
• MITRE (National Cybersecurity FFRDC)flagshipImplementation/ SI/ Consulting PartnerMITRE has operated NIST's National Cybersecurity FFRDC (NCF) since 2014, providing cybersecurity research and development expertise and supporting NCCoE project execution through systems engineering and technical support.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• ENISA (European Union Agency for Cybersecurity): ENISA is the EU's equivalent of NCCoE, producing cybersecurity guidance, frameworks, and sectoral best practices for member states and critical infrastructure. It is the most direct functional counterpart in another jurisdiction, with a similarly non-commercial, public-good model.
• Cybersecurity and Infrastructure Security Agency (CISA): CISA is the U.S. civilian cybersecurity agency that publishes federal guidance, runs the CDM program (which NCCoE supports), and convenes critical-infrastructure stakeholders. It overlaps with NCCoE on federal cybersecurity mandates, zero trust guidance, and sector profiles.
• National Cyber Security Centre (NCSC-UK): NCSC-UK is the UK's national technical authority for cyber threats, issuing frameworks, guidance, and assurance services similar in spirit to NCCoE. Comparable in publishing standards-aligned cybersecurity practice guidance for government and critical infrastructure.
• MITRE Corporation: MITRE operates the National Cybersecurity FFRDC that underpins NCCoE's project execution and also runs CERT/CC and MITRE ATT&CK. It is the closest operational peer — both in directly supporting NCCoE and in producing widely adopted cybersecurity frameworks (ATT&CK, D3FEND, CVE).
• Carnegie Mellon SEI (CERT Division): SEI's CERT Division is a federally funded R&D center focused on cybersecurity, software assurance, and incident response. Like NCCoE, it produces standards-based guidance, coordinates with government and industry, and operates the CVE program.

Broad incumbents

• National Institute of Standards and Technology (NIST): NIST is NCCoE's parent organization and the broader standards body that issues the CSF, SP 800 series, and AI RMF that NCCoE guidance implements. They share mandate, brand, and authoring pipelines, but NIST is the broader incumbent across all measurement science, not just cybersecurity.

Emerging players

• SANS Institute: SANS is a private-sector cybersecurity training and research organization that publishes best-practice guidance, runs the Internet Storm Center, and works on standards-adjacent content. Overlaps with NCCoE on practitioner guidance and educational resources, but operates commercially.
• Center for Internet Security (CIS): CIS publishes the widely adopted CIS Critical Security Controls and operates the MS-ISAC for state/local government. It is a partial peer to NCCoE on translating standards into actionable controls, particularly for critical infrastructure and government.
• Cloud Security Alliance (CSA): CSA is a non-profit that produces widely adopted cloud security guidance (CCM, STAR) and convenes industry stakeholders. Comparable to NCCoE in producing vendor-neutral, community-developed cybersecurity guidance, but focused specifically on cloud and run as a private consortium.

Regional players

• Information Security Forum (ISF): ISF is a global, member-driven organization producing research and frameworks (Standard of Good Practice) used by large enterprises. It is comparable as a non-commercial standards-setting body, but its member-funded model and global remit differ from NCCoE's U.S. federal charter.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/NISTcyber
• YouTubeyoutube.com/nist
• Facebookfacebook.com/NIST
• LinkedInlinkedin.com/company/nist

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about National Cybersecurity Center of Excellence