Basstion Forge

Every layer, accounted for.

Control by control. Layer by layer.

Every requirement mapped, owned, and closed in order.

The fort

Defense in depth. Built to hold.

Security programs for government contractors. Websites, apps and IT for the businesses that keep the country running.

Basstion Forge

Defense in depth. Built to hold.

Security programs for government contractors. Websites, apps and IT for the businesses that keep the country running.

01 How it works

Every engagement starts the same way.

Whether you hold a Department of Defense contract or run a shop on Main Street, the first thirty minutes are the same: where you stand, what is coming, what matters first.

01

Briefing

Thirty minutes, no cost. Where you stand, what is coming, what matters first.

Contractors: flow-downs, assessments, open findings. Businesses: the site, the app, the IT that keeps breaking.

02

Plan

A written scope or roadmap with owners, dates and a fixed price. You know the number before you commit.

03

Build or fix

The work done in short, visible steps you can check. Releases you can click through. Controls you can see closing.

04

Keep it running

Monthly leadership, care plans and support, so it stays that way after launch.

02 Who we serve

Two kinds of client. One standard.

Government contractors come to us for a security program that holds up to an assessor. Small businesses and individuals come for a website, an app or an IT setup that just works. Both get the same discipline.

A Government contractors

Bid with a security program behind you.

If you hold or chase Department of Defense work, the clauses already apply to you. We map every control, close every finding and stand next to you when the assessor arrives.

  • ReadinessCMMC Level 1 and Level 2, NIST SP 800-171, DFARS 252.204-7012 flow-downs
  • LeadershipA fractional security chief who owns the program week to week
  • EvidencePolicies, plans of action and the proof an assessor asks for, kept current
  • ResponseIncident playbooks written and rehearsed before the bad day

B Small businesses and individuals

A website, an app or an IT setup that just works.

You need something built, and you need it to hold up. We design and build it with you, launch it, and keep it running, with the same discipline we bring to defense work.

  • WebsitesPhones first, fast, accessible, and designed to bring in the work
  • Apps and web appsPortals, booking, dashboards, mobile apps and automation that do a job
  • IT supportHelp desk, devices, accounts, backups and networks for small offices
  • CareHosting, updates and small changes handled every month

03 Cybersecurity

A report is not a security program.

For contractors who hold or bid on defense work: every control mapped, owned, evidenced and closed, by a security chief who sits on your side of the table.

Explore Cybersecurity

Lead

Fractional security leadership

A security chief on your side of the table, without the full-time salary.

Comply

CMMC and NIST 800-171 readiness

Every control mapped, owned, and evidenced before the assessor arrives.

Fix

Vulnerability and patch programs

Findings scored, assigned, and closed. Every one has an owner.

Prepare

Incident readiness

Playbooks written and rehearsed before the bad day, not during it.

  • NIST CSF 2.0 Govern, Identify, Protect, Detect, Respond, Recover
  • NIST SP 800-171 110 requirements for CUI
  • CMMC Level 1 and Level 2
  • DFARS 252.204-7012 Safeguarding covered defense information
  • FAR 52.204-21 Basic safeguarding
  • NIST SP 800-53 The control catalog underneath
  • NIST IR 8286 Risk tied to the business
  • NIST CSF 2.0 Govern, Identify, Protect, Detect, Respond, Recover
  • NIST SP 800-171 110 requirements for CUI
  • CMMC Level 1 and Level 2
  • DFARS 252.204-7012 Safeguarding covered defense information
  • FAR 52.204-21 Basic safeguarding
  • NIST SP 800-53 The control catalog underneath
  • NIST IR 8286 Risk tied to the business

Your turn

Hold to seal the perimeter.

Five functions, one perimeter. Press and hold the core, and watch each layer close.

Perimeter open

04 Web Development

We build what we ship.

Four products of our own, from the first sketch to the app store. A game, a mobile app, a live web app and an automated trading system. Each one is a job we would do for you.

Explore Web Development

Ember Forge home screen with the Play button, the daily course and Squads
Game · launching soon

Ember Forge

A one-thumb flight game. One daily course for everyone, friend squads, and a run that lasts about as long as a coffee.

Mobile gameDaily contentSocial squads
Radon Tracker comparing three detectors on one chart
iOS and Android · in testing

Radon Tracker

Readings, charts and alerts for home radon detectors. Compare several detectors on one chart and get told when a room needs attention.

iOSAndroidCharts and alerts
Bull Pit race chart and player scorecards, shown with sample data
Web app

Bull Pit

A live leaderboard for trading contests. Players watch the race chart move, and automatic fair-play checks run every minute.

Web appLive dataFair-play checks
Automation

PaperHawk

An automated trading system. It plans each session, places and manages its own trades inside hard risk limits, and an AI analyst reviews every session and writes the notes.

AutomationAutomated tradingAI analystControl room

05 Website Design

You are looking at the demo.

This site was designed, written, filmed and coded here, with no theme and no page builder. Scroll-scrubbed film, drawn lines, a sealed perimeter: the same can be built for you.

How this site was built

Animations

The homepage hero is an 18-second film, scrubbed frame by frame by your scroll wheel. Three more films carry the service pages. Headlines assemble a character at a time, section rules draw themselves in as they reach the screen, and the perimeter seals when you hold it. Nothing autoplays. You drive all of it.

Scrolling speeds

Scroll-driven footage feels wrong when it lurches. Ours follows the wheel through a smoothed easing that closes 14 percent of the remaining gap every frame, so a flick glides and a slow scroll stays pinned to your hand. Every caption has its own entrance window, timed by the flick test: scroll past at speed and the headline still lands whole.

Advanced features

Honest loading: the film streams in behind a progress ring and the page is usable before it finishes. If a device cannot scrub video, 90 still frames cross-fade instead. Phones, portrait tablets and anyone who prefers reduced motion get a still composition with the same copy. Zero trackers. A form that falls back to your email app if the server is down.

Extreme customization

Colors, type, spacing, motion curves and copy all live in one set of design tokens, so the whole site can change character in an afternoon. Every section is hand-written markup, not a block from a library. The footage was generated to the brand palette, graded, and encoded for scrubbing rather than playback. If you can describe the feeling, we can build the page.

18.0shero film, scrubbed by scroll
433frames at 24 fps
90fallback still frames
3service page films
5motion gates
0trackers or templates

06 IT Support

IT that just works, run security first.

Help desk, devices, accounts, backups and networks for small offices, from the team that also runs security programs.

Explore IT Support

Support

Help desk

Email or call when something breaks. Urgent issues go to the front of the queue.

Manage

Devices and accounts

Laptops set up, patched and encrypted. Microsoft 365 or Google Workspace administered for you.

Protect

Backups and recovery

Backups for devices and cloud data, with restores tested on a schedule.

Connect

Network and Wi-Fi

Firewalls, Wi-Fi and remote access set up properly and documented.

07 Straight answers

Before you book.

We are a small shop. Do we really need a security program?

If you hold defense work, the contract clauses already apply to you. Size changes the plan, not the obligation.

Didn't CMMC get paused?

The Phase 2 rollout was paused in July 2026. The existing DFARS requirements were not, and primes still flow them down.

Can you build our website and our app?

Yes, and the same team keeps them running. See the four products we have shipped under Web Development.

We already have an IT provider.

Good. We lead the security program and work alongside them. If you would rather have one team for both, we also provide IT support.

What does it cost?

A fixed monthly fee or a fixed project price, scoped in the briefing. You will know the number before you commit to anything.

08 The core

Start at the core.

Tell us where you stand. We will come back with where to start.

We use what you send only to reply to you. See our privacy policy.