Cybersecurity Services for ThunderCat Technology

ThunderCat takes its name from a radio call sign. Tom Deierlein carried it as a civil affairs officer in East Baghdad, managing reconstruction work until a sniper shot him in September 2006. He returned to business the following year and formed the company that December. Almost two decades on, it sells to federal, federal healthcare, SLED and commercial buyers from Reston, Virginia, holds SDVOSB status, and has appeared on CRN's Solution Provider 500 for fifteen consecutive years, reaching No. 51 in 2026

The designation is an asset with a ceiling built in. Set aside eligibility depends on staying inside a small business size threshold, and revenue that ranks No. 51 in North America puts steady pressure on it. Permanent headcount is the quickest route to the wrong side of that line. Then there is the paperwork. ThunderCat holds CMMI Maturity Level 2, ISO 9001, ISO 14001, ISO 20243 and ISO 28000, and has passed a CMMC audit, so every engineer added carries a training and documentation cost long before billing an hour. Capacity has to come from somewhere other than the payroll, because federal buying cycles do not slow down to match a hiring plan

Subcontracted delivery is that somewhere else. CWS staffs security and infrastructure engagements under the ThunderCat name, to one delivery standard, across the United States and Canada, and in French when a Quebec or Canadian federal customer needs it. Scoping, quoting and project tracking run in Corova, which leaves the documentation trail your auditors and your OEM partners expect to see. You keep the contract, the customer and the credit