FULTON, MD — June 2, 2026 — Tharros, a provider of mission-critical cybersecurity and vulnerability research solutions for the U.S. Federal Government, has been awarded a task order under the National Institute of Standards and Technology (NIST) Cybersecurity and Privacy Support Services (CAPSS) IDIQ to deliver technical services advancing NIST’s Cybersecurity Framework (CSF) and Risk Management Program. Tharros will continue to provide the subject matter expertise, technical development, and stakeholder engagement that extend the reach and impact of the NIST CSF, currently at version 2.0.
The task order includes a one-year base period and one option period. Under this award, Tharros will support NIST in fulfilling its mission to assist industry in identifying, assessing, and managing information system and cybersecurity risks. The team will propose and develop new CSF 2.0 educational resources and advance an effort to automate NIST cybersecurity guidelines, turning high-level governance and frameworks into machine-readable rules, executing them automatically, and feeding structured evidence back into governance.
Tharros will also provide support for NIST’s Cybersecurity and Privacy Platform (CPP) and its Online Informative References (OLIR) program, delivering code and database development that expands public access to automated cybersecurity guidance across NIST datasets, including the National Vulnerability Database (NVD), National Checklist Program (NCP), and Cybersecurity and Privacy Reference Tool (CPRT).
“We are honored once again to be selected by NIST to support a mission that touches the security of organizations across the country,” said Lonnie Parker, Founder and CEO of Tharros. “Our focus is turning trusted cybersecurity frameworks into practical, operational tools—helping agencies and industry move from high-level guidance to real-world resilience at the speed of the mission.”
About Tharros
Tharros boldly moves missions forward with advanced cybersecurity tools and deep vulnerability expertise that detect and eliminate threats before they emerge. Combining extensive cyber defense knowledge with the world’s preeminent vulnerability expertise, Tharros identifies and defends against attacks before they become problems. Working at mission speed, the company hardens mission systems faster and secures them for longer—ensuring agencies never lose the mission edge. By lifting the veil on enterprise cybersecurity to detect zero-day vulnerabilities before they have impact, Tharros enables mission maneuverability and the confidence to move missions forward.