Grammatech, Inc.

Grammatech, Inc., an Ithaca, New York-based small business, develops software security analysis tools, firmware analysis capabilities, and programming language migration technologies, competing as a prime contractor across 206 awards (100% of recent portfolio) predominantly in full-and-open federal R&D and defense modernization programs, with no characteristic set-aside footprint.

The company's core capability set spans application security testing, static and dynamic code analysis, binary rewriting, automated malware analysis, and C++ to Rust assisted migration. Representative prime work includes a $1.9 million SBIR Phase II contract from the Defense Advanced Research Projects Agency (DARPA) awarded December 2, 2024, for "REAFFIRM: Reverse Engineer, Analyze, and Fix Firmware," focusing on firmware analysis and remediation; a $1.99 million Naval Information Warfare Systems Command SBIR Phase II definitive contract from September 25, 2024, for advanced program analysis and software assurance research; a $1.5 million DARPA SBIR Phase II effort from February 2023 for C++ to Rust migration tooling; and recurring CodeSonar static analysis software licenses from the NASA Shared Services Center. The company also holds a $151 billion multiple-award IDIQ with the Missile Defense Agency (SHIELD, awarded December 29, 2025, performance through December 28, 2035) structured for research and development, systems engineering, prototyping, cybersecurity, and modernization work across multi-domain defense objectives, and an Other Transaction IDV ceiling of $45 million with U.S. Cyber Command under which Grammatech issued a $616.5 thousand subscription-data order in November 2024.

Customer concentration aligns with defense R&D priorities. The top five agencies by combined potential value account for 70% of the portfolio and include DARPA ($63 million, 21 awards), the Department of the Navy Office of Naval Research ($54.5 million, 25 awards), the Air Force Materiel Command Research Laboratory ($26.8 million, 39 awards), the Naval Air Warfare Center ($24.9 million, 6 awards), and the Department of Homeland Security Science and Technology Directorate ($13.5 million, 7 awards). By award count, the Air Force Research Laboratory leads with 39 awards, followed by Navy Office of Naval Research at 25 and DARPA at 21. The NASA Shared Services Center rounds out the top five but at substantially lower dollar value ($1.1 million), reflecting its role as a vendor for CodeSonar license renewals and support rather than R&D investment. The portfolio skews toward applied research and exploratory development (44 awards under PSC R&D Defense Other) and basic research (15 awards), with 74 awards falling under NAICS 541711 (research and development in physical, engineering, and life sciences).

Activity has declined year over year from six awards in 2022 to one award in 2026 (through the observation date), though this reflects a shift toward larger, longer-duration prime contracts and IDVs rather than portfolio contraction. Four awards (combined potential value $49.4 million) reach ultimate completion within the next twenty-four months and face recompete risk. Grammatech operates as a prime on 100% of recent awards with a single sub-award listed under Science Applications International Corporation on a May 2026 system software lifecycle engineering task, indicating a predominantly prime-focused go-to-market posture. The company carries no SBA certifications and competes in full-and-open procurements, with 77% of combined potential value obligated across the 207 awards in the portfolio.