Cromulence

What Cromulence does

Cromulence LLC is a US cybersecurity services company founded in 2014 in Melbourne, Florida, by members of the Legitimate Business Syndicate—the team that organized DEF CON Capture the Flag from 2013 to 2017. The company delivers full-spectrum cyber services to the US Department of Defense, the intelligence community, and select commercial clients, organized around four capability areas: Full Spectrum Cyber (vulnerability research, reverse engineering, cyber tool development, red teaming), Advanced Technology and Research (innovation under DARPA programs including CHESS, CFAR, Cyber Grand Challenge, and HACCS), Cyber Competitions (end-to-end design, environment, content, logistics, and hosting), and Engineering Services. Its core technology assets are Hog, a QEMU-based full-system emulation engine with a custom plugin framework supporting Python, C, and C++, and Lounge/Jetbridge, an asynchronous Capture-the-Flag challenge infrastructure. The company is best known operationally for designing and hosting the Hack-A-Sat satellite hacking competition on behalf of the US Air Force and Defense Digital Service.

The firm operates as a small-business government contractor with 11-50 employees, generating revenue primarily through professional services contracts with DoD and federal R&D agencies. Pricing is not publicly disclosed, and all distribution runs through direct government procurement vehicles. The company's defensible position rests on founder pedigree, cleared offensive-cyber talent, and accumulated intellectual property in emulation tooling and competition infrastructure. In July 2024, Parsons Corporation announced the acquisition of BlackSignal Technologies alongside Cromulence, integrating the business into a larger defense prime with a broader contract footprint.

Name

Cromulence

Legal name

Cromulence LLC

Website

https://cromulence.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

11–50 employees

Short description

Cromulence is a US small-business cybersecurity services firm founded in 2014 that delivers vulnerability research, reverse engineering, cyber competition design, and DARPA-aligned R&D to the US Air Force, Defense Digital Service, Air Force Research Laboratory, and DARPA. It developed the Hog emulation engine and hosts the Hack-A-Sat satellite hacking competition.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Penetration Testing & Red Teaming (BPAKAHAF)

Keywords

• Cybersecurity services
• Vulnerability research
• Reverse engineering
• Cyber competitions
• Defense contracting

Headquarters

HQ city

Melbourne

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Government Contract Engineering Services: Cromulence provides cybersecurity engineering services to DoD and other government agencies including vulnerability research, reverse engineering, and cyber operations development.
2. Cyber Competition Services: Design, development, and hosting of cyber competitions for government and commercial clients including CTF events, Hack-A-Sat, and Cyber Grand Challenge.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Cromulence delivers cybersecurity research, engineering, and competition services to the U.S. Department of Defense and federal agencies, including vulnerability research, reverse engineering, cyber tool development, and red teaming. It also designs, builds, and hosts end-to-end cyber competitions (e.g., Hack-A-Sat, Cyber Grand Challenge) and develops proprietary tooling such as the Hog QEMU-based full-system emulation engine for vulnerability analysis.

Product overview

Cromulence is a cybersecurity services company founded in 2014 that offers a portfolio of products and services. The company provides Full Spectrum Cyber solutions (Vulnerability Research, Reverse Engineering, Emulation Technologies, Cyber Operations), Advanced Technology and Research services (including DARPA program participation), Cyber Competitions (end-to-end design, hosting, and content), and Engineering Services (Cyber Tool Development, Red Teaming). Key products include Hack-A-Sat (satellite hacking competition), Hog (QEMU-based full system emulation engine for analysis and introspection), and the Lounge/Jetbridge asynchronous challenge infrastructure. The company was acquired by Parsons Corporation in 2024.

Differentiator

Problem solved

Functional benefit

Brands

• Hack-A-Sat: A satellite hacking contest run by the US Air Force and Defense Digital Service. Cromulence team was responsible for much of the contest design and hosting.
• Hog

Products and services

• Full Spectrum Cyber Develops full spectrum cyber solutions for the Department of Defense including tools development, technology architecture, vulnerability research, and reverse engineering across a wide variety of platforms.
• Advanced Technology and Research Takes fundamental research breakthroughs and turns them into applied, practical solutions for defense and government clients, with innovation history across DARPA programs including CHESS, CFAR, Cyber Grand Challenge, and HACCS.
• Cyber Competitions End-to-end cyber competition services including design, environment, content, logistics, and hosting for government and commercial clients. Examples include Hack-A-Sat, Cyber Grand Challenge, and DEF CON Capture the Flag.
• Engineering Services Cyber tool development, reverse engineering and vulnerability research, and cyber red teaming services for DoD and commercial clients.
• Hog An engine for full system emulation, system introspection, and rapid state analysis, based on QEMU with a proprietary rapid analysis system, plugin framework supporting Python/C/C++, full system debugging with GDB-like syntax, OS inspection, application fuzzing, and a Qt-based user interface. Used for vulnerability research and reverse engineering.
• Hack-A-Sat A satellite hacking contest co-developed with the US Air Force and Defense Digital Service, comprising online qualifiers, a final event with mock satellites on a custom-built carousel, and challenge infrastructure (Lounge/Jetbridge) for asynchronous submissions in isolated containers. Challenges include ground station crypto vulnerabilities, flight software bugs, RISC-V ROP chains, webserver attacks, data mining, and on-orbit science missions.

Named customers4 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Four partnerships are on record, tiered core.

• US Air ForcecoreStrategic or Co-development PartnerCromulence works with the US Air Force to develop and host the Hack-A-Sat competition, a satellite hacking contest designed to improve cybersecurity in space systems. The company was responsible for much of the Hack-A-Sat 2020 qualifiers and finals events.
• Defense Digital ServicecoreStrategic or Co-development PartnerCo-developed Hack-A-Sat competition with Defense Digital Service to provide the hacking community access to satellite systems for learning about vulnerabilities before adversaries can exploit them.
• DARPAcoreStrategic or Co-development PartnerCromulence participates in multiple DARPA programs including CHESS (Computers and Humans Exploring Software Security), CFAR (Cyber Fault-tolerant Attack Recovery), CGC (Cyber Grand Challenge), and HACCS (Harnessing Autonomy for Countering Cyberadversary Systems). Also developed Hog platform under DARPA programs.
• Air Force Research LaboratorycoreStrategic or Co-development PartnerCollaborated with Air Force Research Laboratory over months to successfully host the Hack-A-Sat competition at DEF CON 28 Safe Mode.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• SAIC: Major federal IT and cyber services contractor serving DoD and intelligence agencies. Offers overlapping offensive cyber, vulnerability research, and cyber operations support as part of a broader portfolio competing for similar contract vehicles.
• Parsons Corporation: Acquirer of Cromulence's affiliated entity (BlackSignal Technologies) in 2024 and a major defense prime with significant cyber, space, and intelligence capabilities. Operates in adjacent cybersecurity services, particularly for DoD, where Cromulence now resides as a unit.
• ManTech International: Defense contractor with a dedicated cyber operations and cybersecurity services line serving DoD customers; comparable in customer mix and mission scope to Cromulence's federal defense cyber focus at larger scale.
• Booz Allen Hamilton: Large federal services contractor with a sizable cyber practice including vulnerability research, red team operations, and cyber talent programs for DoD and intelligence community - comparable offerings but at much greater scale and breadth than Cromulence.
• Leidos: Large defense and intelligence IT services prime with substantial cyber security, vulnerability research, and red-teaming capabilities. Competes with Cromulence on adjacent DoD cyber programs and now has them as a Parsons-owned competitor through that consolidation.

Direct peers

• Trail of Bits: Private cybersecurity R&D firm focused on vulnerability research, reverse engineering, and offensive security tooling - direct overlap with Cromulence's Full Spectrum Cyber offering and overall positioning as a boutique elite cyber research house.
• Bishop Fox: Elite boutique cybersecurity consultancy known for offensive security, red teaming, and vulnerability research across government and commercial clients. Directly comparable service profile to Cromulence's red-team and vulnerability-research offerings.
• Battelle Memorial Institute: Nonprofit applied R&D organization running cyber range and security research programs for federal clients, with comparable vulnerability research and cyber experimentation capabilities targeting DoD and intelligence community buyers.
• Galois: R&D firm specializing in formal methods, high-assurance software, and DARPA-funded cybersecurity research. Highly comparable in the DARPA-program-driven research services model and DoD customer base that Cromulence also serves.

Emerging players

• GrammaTech: Commercial vendor of static analysis and binary analysis tools used in vulnerability research and software assurance. Highly comparable technology overlap with Hog's static/binary analysis use cases, though operating on a product rather than services model.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• GitHubgithub.com/cromulencellc
• LinkedInlinkedin.com/company/cromulence-llc
• Xx.com/CromulenceLLC

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cromulence