Assessment Literacy Plus Engineering Fluency
Grivium understands RMF, SARs, ATO, C-ATO, control evidence, GitLab, Fortify, SonarQube, Trivy, Kubernetes, cloud findings, SBOMs, and developer workflows.
About Grivium
Grivium Technologies is a San Diego small business founded to help government teams move securely from policy to production.
Architecture means shaping systems so they can be authorized, operated, and improved with confidence. Engineering means turning controls, findings, and risk decisions into practical implementation paths. Compliance means interpreting security requirements and mission constraints clearly.
Grivium understands RMF, SARs, ATO, C-ATO, control evidence, GitLab, Fortify, SonarQube, Trivy, Kubernetes, cloud findings, SBOMs, and developer workflows.
Grivium works with product and platform teams to close findings, answer developer questions, support exception paths, and translate cyber requirements into delivery work.
Hands-on experience evaluating AI and LLM tools for accredited environments, including usage, supply-chain, SBOM, boundary, and risk considerations. Grivium also uses AI in its own delivery, with a security professional reviewing every deliverable.
Kessel Run experience with CDS, NCDSMO, Raise the Bar, diode, and AutoDeploy-related advisory support.
Greg Haase is a Product Security SME, Cloud Security Architect, and DevSecOps lead with more than 20 years securing federal civilian and DoD mission systems.
U.S. Federal Courts cloud hosting, USAF Kessel Run, USN NIWC Pacific Shark Cage, and USSF Kobayashi Maru classified space operations.
Grivium can support focused prime work or specialized cyber/AppSec teammate roles.