Federal Capabilities
Adversarial AI security, agentic cyber defense, and cyber deception — purpose-built for defense, intelligence, and critical-infrastructure missions. Service-Disabled Veteran-Owned Small Business. Shipping product on PyPI.
Business identification
- Legal name
- Oubliette Security LLC
- Size standard
- Small business — SDVOSB
- CAGE Code
- 19AK6
- UEI
- S6DTCH6ULHD1
- SBA VetCert (SDVOSB)
- Approved 2026-04-21
- SAM.gov
- Active & current
- CMMC posture
- Level 2 (self-assessment) — DFARS 7012/7019/7020
- Export controls
- ITAR / EAR aware; no foreign nationals
Capability areas
Each capability has a shipping reference implementation, a public test suite, or a prototype that has driven a federal proposal submission.
AI security
Runtime detection, cyber deception, and adversarial robustness for production LLM systems. Shipping on PyPI under permissive licenses.
Agentic AI security
Multi-agent cyber defense frameworks with safety-gated autonomous tooling. Operator-on-the-loop review at every step.
Adversarial AI testing & red teaming
72 attack scenarios (57-scenario core library + 15 Crescendo multi-turn), 10 categories, mapped to MITRE ATLAS (v2026.06), OWASP LLM Top 10, and NIST AI RMF. Multi-provider comparison; React review dashboard; findings feed firewall policy directly.
Cyber deception
Honeypot, tarpit, and redirect modes built directly into the AI firewall — not bolted on. STIX 2.1 threat intelligence as a byproduct.
Agent containment
Safety-gated, human-on-the-loop framework for authorized cyber operations (oubliette-warden). ATT&CK-aligned plans; every tool call gated by the Shield pipeline and a plan-consistency verifier before an operator approves it.
Synthetic influence detection
Shipping defensive detector for coordinated synthetic influence content (oubliette-barbican) — coordination-first, zero dependencies, runs air-gapped. Offensive validation harness for cognitive-warfare AI models available under government-access channels.
Why federal evaluators pick us
Working software, not vaporware
Six packages shipping on PyPI (oubliette-shield and oubliette-dungeon since February 2026; oubliette-trap, oubliette-warden, and the oubliette-suite umbrella since June 2026; oubliette-barbican since August 2026). Live demo at oubliettesecurity.com/demo. Public CI; 2,400+ tests across the six product repos.
Service-Disabled Veteran-Owned Small Business
SBA VetCert SDVOSB (approved 2026-04-21). Qualifies for SDVOSB sole-source procedures under FAR 19.1406, set-aside competitions across DoD/VA/civilian agencies, and mentor-protégé pathways through DoD OSBP.
Published, reproducible evaluation
Warden's containment evaluation is public in the oubliette-warden repository: anchored plan-consistency verification recorded 0 attacker wins in 60 anchored-trust trials across 20 attacker configurations (95% Wilson upper bound 6%), from 0.5B-parameter local models through frontier APIs. The harness and per-model results are committed alongside the code; raw logs are not published.
Open-source-first, ITAR-aware
Permissive licenses on shipping product; air-gappable deployment with Ollama backend; CMMC Level 2 (self-assessment) posture under DFARS 252.204-7012/7019/7020.
Active federal pursuits
Oubliette Security has active proposal pursuits across DoD, DARPA, DIU, SCO, and NATO — in adversarial AI security, agentic cyber defense, and cognitive warfare. Pursuit details are available under appropriate NDA or government-access channels.
For partnering, teaming (prime or subcontractor), or solicitation-specific discussions, use the contact link below.
Procurement vehicles
SDVOSB sole-source (FAR 19.1406)
Eligible for non-competitive awards within statutory dollar thresholds, including Phase III follow-ons.
SDVOSB set-aside competitions
Eligible for SDVOSB set-aside solicitations across DoD, VA, and civilian agencies.
SBIR / STTR
Active SBIR pipeline across DoD components; small-business inherent set-aside; Phase II/III ceiling pathway available.
Other Transaction Authority (OT)
Eligible for prototype OTs through DIU and similar transaction vehicles; production OTs follow-on without competition where authorized.
Mentor-Protégé
Open to mentor-protégé arrangements through DoD OSBP. SDVOSB primacy preserved.
Subcontracting
Open to subcontracting on prime-led efforts where Oubliette's adversarial-AI, agentic, or cyber-deception capabilities fill a gap.
Briefing or partnering inquiry?
Capability statement, demo recording, and a substantive briefing tailored to your office are available on request.