Steeltoad Consulting LLC

Steeltoad Consulting LLC, an SBA-certified HUBZone firm based in Baltimore, Maryland, operates as a systems engineering and cybersecurity services contractor to defense agencies, competing in full-and-open procurements and holding a seat on the Department of Defense Missile Defense Agency's Scalable Homeland Innovative Enterprise Layered Defense (SHIELD) multiple-award IDIQ contract. The vendor splits its recent award footprint between prime contracts (62% of awards) and subcontract work (38%), with the largest dollar concentration anchored to a single major IDV rather than recurring task orders or broad agency customer relationships.

Steeltoad's prime footprint includes a $500 delivery-order award under the SHIELD IDIQ from the Missile Defense Agency in December 2025, a $219,327 Systems Engineering Process training update from Naval Sea Systems Command via the Federal Acquisition Service Multiple Award Schedule in February 2024, and presence on multiple DoD vehicle structures including the Cooperative Threat Reduction Integrating Contract and Assessment, Exercise, and Modeling and Simulation Support. The vendor's customer concentration by award count sits with the Department of Navy Naval Sea Systems Command (5 awards, $321 thousand combined potential value), the Defense Threat Reduction Agency (3 awards), and the Missile Defense Agency (2 awards, $500 combined potential value), together representing 92% of recent awards. The GSA Federal Acquisition Service, which issued the MAS order, anchors the largest single potential value at $1 million. Work spans engineering services, cybersecurity analysis, systems engineering training, and research and development support across full-and-open competitive settings with no set-aside designations.

Subcontract activity places Steeltoad under Black & Veatch Special Projects Corp. on cybersecurity assessment, vulnerability evaluation, and international chemical security and disease surveillance system implementation work (December 2023 through November 2024), and under Lumbee It Solutions LLC on a September 2025 cybersecurity support services task order. The vendor also received a January 2025 sub-grant award under UI Labs for the Manufacturing Business Ecosystem Maturity Index Upgrade project, contributing digital maturity assessment refinement for the Department of Energy Nuclear Security Administration. Activity has remained modest—two awards per year through 2023, then 2024, with a spike to four awards in 2025—and the Service Contract Inventory dataset shows no FTE invoicing in the subset of service contracts above the $150,000 reporting threshold, indicating that Steeltoad's federal work composition skews heavily toward product delivery and systems engineering rather than time-and-materials labor services.

SteelToad is a cybersecurity firm focused on supporting federal agencies to mitigate risk, increase resiliency, and lock down their infrastructure. We do this with three core competencies: Cyber Assessment Services, Security Services, and Governance, Risk, & Compliance (GRC). Following NIST guidelines (800-30, 800-37, 800-53, 800-66), Steeltoad assesses agencies for risk, FISMA compliance, data management, and Zero Trust Maturity Model (ZTMM) compliance. We also provide CMMI and CISA assessments like CRR, EDM, and HVA. Steeltoad's security services include penetration testing, vulnerability management, & compliance scanning. We specialize in cloud security, risk management framework (RMF), continuous monitoring & security assessment services to comply with Authority to Operate (ATO) requirements. Steeltoad has supported multiple federal agencies & maintains industry leading certifications like CMMI Dev/Svc Level 3, ISO 9001:2015, ISO 27001:2022, ISO 20000:1-2018 & is a CMMC C3PAO.