What eResilience does

eResilience is a cybersecurity and compliance services firm headquartered in Honolulu, Hawaii, operating as a commercial division of defense integrator Referentia Systems Incorporated. The company serves the U.S. Defense Industrial Base, providing DoD contractors with solutions to achieve and maintain DFARS 252.204-7012 compliance and prepare for CMMC certification. Its core technology is a proprietary Enclave architecture originally developed for the DoD to enable secure cross-domain information exchange between classification levels; eResilience commercializes this NSA-vetted approach as the foundation for protecting Covered Defense Information and other sensitive data.

The company's product portfolio centers on three offerings: DFARS as a Service (DFARSaaS), a managed-service subscription delivering full compliance with all 110 NIST 800-171 security controls via enclave implementation, continuous monitoring, policies, and SIEM-style logging; the Supply-chain Portal (eSP), a dual-sided software platform providing primes with supply-chain compliance visibility and subcontractors with self-assessment and reporting tools; and Status Assessment Services ranging from self-guided questionnaires to deep due-diligence audits staffed by CAP-certified cybersecurity experts. A discounted Small Business Special tier extends the offering to qualifying contractors with fewer than 150 employees. Pricing is quote-based across multi-year enterprise contracts, annual subscriptions, and small-business packages.

Go-to-market is enterprise field sales targeting primes and subcontractors, supplemented by thought-leadership content, NCMA partnership channels, and webinars produced with the Cyber Collaboration Center. In April 2025, eResilience achieved CMMC C3PAO authorization from CyberAB, making it the first and only C3PAO in Hawaii and the broader Asia-Pacific region and one of only 63 worldwide, materially expanding its ability to monetize official third-party certification assessments in support of INDOPACOM-aligned defense operations.

Name

eResilience

Legal name

Referentia Systems Incorporated

Website

https://eresilience.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

eResilience, a division of Referentia Systems, provides DFARS 7012 and CMMC cybersecurity compliance services to DoD contractors using proprietary NSA-vetted Enclave technology, and holds exclusive C3PAO authorization across Hawaii and Asia-Pacific.

Ownership category

akta.pro rank

Product category

Cybersecurity Compliance Software

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)

akta.pro primary industry

Enterprise Risk Management (ERM) (HDADAIAC)

akta.pro secondary industry

Enterprise Risk Management (ERM) Advisory (BPAHAFAA)

Keywords

• DFARS compliance services
• CMMC certification platform
• Defense cybersecurity
• Enclave security technology
• Supply chain cyber risk

Headquarters

HQ city

Honolulu

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. DFARS as a Service (DFARSaaS): Managed service providing complete DFARS 252.204-7012 compliance on a subscription/recurring basis. Includes enclave implementation, policies, procedures, monitoring, assessments, and continuous compliance management.
2. Supply-chain Portal (eSP): Software platform subscription for managing supply chain cyber risk. Provides dashboard visibility for primes and self-assessment tools for subcontractors.
3. Assessment Services: Expert assistance with compliance assessment including gap analysis, SSP reviews, compliance audits, self-assessment questionnaires, and due diligence to confirm DFARS compliance implementation.
4. Small Business Specials: Deeply discounted compliance packages for qualifying small businesses (fewer than 150 employees) to accelerate path to DFARS 7012 compliance.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels6 records

Core offering

eResilience provides DFARS/CMMC cybersecurity compliance as a managed service (DFARSaaS) for Department of Defense contractors, combining a proprietary Enclave Technology platform with CAP-certified cyber expertise. Its offerings include a Supply-chain Portal (eSP) for ongoing cyber risk management, Status Assessment Services for gap analysis, and a Small Business Special package for smaller defense suppliers. The company is a candidate C3PAO for CMMC third-party assessments.

Product overview

eResilience is a division of Referentia Systems offering a suite of cybersecurity and DFARS compliance solutions for DoD contractors. The core portfolio consists of DFARS as a Service (DFARSaaS) built on proprietary NSA-vetted Enclave technology for achieving full DFARS 252.204-7012 compliance, the Supply-chain Portal (eSP) providing supply chain risk management dashboards for primes and self-assessment tools for subcontractors, and Status Assessment Services for compliance verification. All offerings leverage the company's patented Enclave technology that was originally developed for DoD cross-domain information assurance. A Small Business Special provides discounted packages for qualifying contractors with fewer than 150 employees.

Differentiator

Problem solved

Functional benefit

Brands

• DFARS as a Service (DFARSaaS): Complete DFARS 7012 compliance solution on a managed service basis, based on NSA-vetted Enclave technology.
• Supply-chain Portal (eSP)

Products and services

• DFARS as a Service (DFARSaaS) A managed service for Department of Defense contractors and subcontractors that delivers DFARS 252.204-7012 compliance using eResilience's proprietary Enclave Technology and CAP-certified cybersecurity expertise. It is designed for organizations that need to achieve and maintain NIST 800-171 controls and qualify for CMMC certification without building compliant infrastructure independently.
• Supply-chain Portal (eSP) A subscription-based SaaS portal that provides ongoing DFARS compliance and supply-chain cyber risk management for defense contractors and their subcontractors. It enables central management of cyber risk across the supplier base and supports continuous compliance with DoD cybersecurity requirements.
• Status Assessment Services A professional services offering that assesses an organization's current DFARS compliance posture, identifies gaps against NIST 800-171, and provides a remediation roadmap. It is intended for defense contractors seeking to understand their baseline compliance before implementing DFARSaaS or pursuing CMMC certification.
• Small Business Special A subscription-based packaged offering tailored for small defense contractors (under approximately 150 employees) that need to meet DFARS compliance requirements. It is designed to lower the cost and complexity barrier for smaller suppliers in the Defense Industrial Base.

Quantifiable outcome

• Faster and less expensive compliance compared to developing capabilities from scratch
• +1 more outcomes

Named customers2 records

Segments3 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Three partnerships are on record, tiered core and major.

• CMMC Accreditation Body (CyberAB)coreImplementation/ SI/ Consulting Partner · 8 April 2025The CMMC Accreditation Body (CyberAB) officially authorized Referentia Systems Incorporated (eResilience division) as one of only 63 C3PAOs worldwide and the only C3PAO in the Asia-Pacific region. This authorization enables eResilience to conduct official third-party certification assessments to validate compliance with federal cybersecurity regulations.
• Cyber Collaboration CentermajorStrategic or Co-development PartnerNon-profit organization partnered with eResilience to produce more than 25 thought leadership CMMC cyber compliance webinars reaching more than 10,000 registrants across the Defense Industrial Base.
• National Contract Management Association (NCMA)majorGTM or Marketing PartnereResilience provides expertise to DoD prime contractors and their supply chains through special sessions at NCMA World Congress events. Articles published in Contract Management magazine covering supply chain cyber risk management.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Kratos Defense & Security Solutions: Kratos is a large defense contractor providing cybersecurity, secure networking, and C5ISR solutions to DoD and intelligence customers. Comparable to eResilience's NSA-vetted defense cyber posture but at vastly larger scale and broader portfolio.
• ManTech International: ManTech is a large defense IT and cybersecurity services provider serving DoD and intelligence agencies. Overlaps with eResilience's DoD cybersecurity focus and serves the same DIB customer base, but at substantially greater scale.
• Deltek: Deltek is a leading ERP and project-based software provider for government contractors and the DIB, with deep integrations into defense contract compliance workflows. Comparable to eResilience's ERP-adjacent enterprise offerings for prime contractors.

Direct peers

• A-LIGN: A-LIGN is a cybersecurity and compliance firm authorized as a C3PAO, providing CMMC and FedRAMP assessments alongside managed compliance services. Directly comparable as a CMMC-credentialed assessor with a similar DIB customer base.
• SecureStrux: SecureStrux is a CMMC-credentialed cybersecurity firm providing DFARS/NIST 800-171 compliance, RPO services, and continuous monitoring for defense contractors. Direct peer in the C3PAO/RPO consulting ecosystem.
• Schellman & Co. Schellman is a cybersecurity assessment and attestation firm operating as a C3PAO for CMMC and providing FedRAMP, SOC, and ISO services. Comparable to eResilience's assessment arm serving regulated federal contractors.
• Peak InfoSec: Peak InfoSec is a CMMC-credentialed assessment and consulting firm and C3PAO providing official CMMC Level 2 assessments to DIB organizations. Directly comparable as a fellow C3PAO serving defense contractors.
• Summit 7: Summit 7 is a CMMC-focused managed cybersecurity and compliance provider serving defense contractors with Microsoft 365 GCC High implementations. Closely comparable to eResilience's DFARSaaS-managed compliance model for DIB subcontractors.
• Coalfire: Coalfire is a cybersecurity advisory and assessment firm providing CMMC, FedRAMP, and DFARS compliance services to the defense industrial base. Directly comparable to eResilience as a C3PAO candidate delivering federal cybersecurity compliance assessments and managed services.

Emerging players

• PreVeil: PreVeil is an encrypted file-sharing and email platform purpose-built for CMMC and NIST 800-171 compliance for defense contractors. Comparable to eResilience's Enclave technology as a security architecture solution for DIB compliance.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about eResilience