hero-img-background-22
hero-img-background-11
cyber
demo-attachment-264-pattern-right
rectangle-shape-border
demo-attachment-449-Polygon-shape-fill
demo-attachment-448-Polygon-shape-border
rectangle-shape-fill

WE DELIVER A CLEARER PATH

Grindstone is an innovative, Minority Owned Small Business specializing in providing cutting-edge cybersecurity solutions to businesses and government agencies in the Mid-Atlantic region. 

Read More
Services

WHAT WE DO

demo-attachment-264-pattern-right
demo-attachment-264-pattern-right

Cybersecurity Services

demo-attachment-264-pattern-right
demo-attachment-264-pattern-right

Cybersecurity Services

demo-attachment-264-pattern-right
demo-attachment-264-pattern-right

Cybersecurity Products

demo-attachment-786-about-us-img-1
demo-attachment-787-about-us-img-2
demo-attachment-788-about-us-img-3

Why Grindstone?

  • People

We gain client trust leading by example, using persistence, tenacity, and ingenuity to solve complex problems.

  • Passion

We are passionate about driving effective communication and collaboration across teams to rapidly integrate technology with business requirements.

  • Proactive Approach

We streamline and automate redundant processes to enhance infrastructure security through analysis and execution focused resource allocation.

  • Performance Focus

Our core focus is to deliver solutions that exceed client expectations, while remaining on time and within budget.

0 +
Lorem Ipsum
0 +
Lorem Ipsum
0 +
Lorem Ipsum
0 +
Lorem Ipsum
Portfolio

RECENT SUCCES

Enterprise Technical Integration Project

rectangle-shape-fill
demo-attachment-448-Polygon-shape-border

Scope of Work: Transitioned security program to Risk Management Framework (RMF) Assessment and Authorization (A&A) requirements and established a Continuous Monitoring Program with over 150 components under management.

  • Monitored Hybrid Cloud environment with over 100,000 endpoints
  • Remediated over 21,000 vulnerabilities
  • Decreased average days to remediate vulnerabilities by 77%
  • Closed 95% of program POA&Ms

Enterprise Technical Integration Project

ABOUT

Founder, Craig Philip, is a performance-driven, strategic and multi-faceted, cyber security & systems engineering professional with over 10 years of transferable experience. His expertise includes monitoring and analyzing the output from security scanning devices as well as recommending actions for the detection and remediation of system compromises.

His superior capacity to solve complex problems involving a wide variety of information systems has made him a sought after Cyber Security expert. He has experience working independently on large-scale projects, and thriving under pressure in fast-paced environments, as he directs multiple projects from concept to implementation.

By forming Grindstone, Craig has brought together a team of highly qualified experts to support and manage the cybersecurity of MD/DC/VA based government contracting companies as well as federal state and local government agencies.

Read More

We’re Known by the Company We Keep.

p1
p2
p3
p4
Testimonials

WHAT PEOPLE SAY

demo-attachment-1279-quote-icon

Neil F. Gaudreau

Chief of Engagement Operations – Cybersecurity & Infrastructure Security Agency, Department of Homeland Security
Craig and his team of 15 Vulnerability Management professionals worked for me on a 1.2 billion dollar contract tasked with building the IT environment to support the 2020 US Census. Craig was assigned as the Continuous Monitoring Team Lead performing Vulnerability scanning, analysis and remediation in a very complex on-prem, Azure and AWS environment. He was quick to gain the organizations respect and confidence as a trusted partner to help remediate and provide mitigation strategies to meet strict regulatory compliance requirements and more importantly to protect and defend the environment. He is a leader by example who thrives in high up tempo environments that require nothing but the best. Given the opportunity, I without hesitation, would seek out his expertise and be glad to have him on my team.
demo-attachment-1279-quote-icon

John Steil

CTO/EVP – IAMUS Consulting Inc.
Craig worked for me for two years supporting a large project. During that time Craig was responsible for vulnerability and compliance baseline management for thousands of machines that supported program needs in all stages of the development lifecycle. Additionally, Craig tirelessly researched and authored content for operational and engineering requirements documents vital to the program. Craig quickly became one of my go-to people for both meeting his team’s scheduled work as well as for ad-hoc and emergent tasking. Craig is hardworking, honest, and a genuinely great guy to have on your team and I would highly recommend him.
demo-attachment-1279-quote-icon

Eric Epstein

Former Chief Security Engineer 2020 Census
Craig Philip is the consummate security engineer. Above all else, Craig completes what he starts. He is organized, timely and documents tasks to the benefit of everyone he supports. Security leadership enjoys his project management, task focus and problem solving skills. Operations teams enjoy the clarity of his documentation and after-action synopsis. Craig leads through example and sincerity.

As a security engineer and consultant, Craig is adept at vulnerability management, GRC, Security Project Management, and supporting FISMA compliance with; well written, practicable and achievable approaches to ensuring that security postures are created and implemented within scope.

From security planning, and completing POA&Ms, to running playbooks to problem solve possible breaches, Craig shines in his tenacity to get tasks done.

It was my pleasure to work with him on mission critical security planning work for the 2020 Census.
demo-attachment-1279-quote-icon

Kia Neidemire

President – Soteria Security Solutions
Grindstone understands the importance of positive and consistent client relations. They are experts in safeguarding large-scale, network security postures. Their professionals provide stellar support to identify, investigate, and prioritize the remediation of vulnerabilities and misconfigurations in modern IT environments.