DFIR firm, CISSP, CISM, CISA credentialed, federal and government response.
Visit coalfire.comPublic-tier claims with issuer citations; registry verification pending.
Certifications are held by individuals, never organizations. Org-level status below is a DERIVED rollup of named holders, the org claims nothing its holders do not hold. Issuer directories (GIAC, (ISC)², ISACA) list individual certificate holders with expiration dates, registry lookups resolve at the named-holder level and require no carrier data.
CISSP ((ISC)²) claimed with issuer citation; no expiration date published. Registry verification: https://credly.com/ (ISC)² badge lookup.
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
CISM (ISACA) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://www.isaca.org/credential-verification).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
CISA (ISACA) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://www.isaca.org/credential-verification).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
CRISC (ISACA) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://www.isaca.org/credential-verification).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GCIH (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GPEN (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GXPN (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
GWAPT (GIAC (SANS)) claimed with issuer citation. The issuer directory is PUBLIC and lists individual holders with expiration dates, the directory lookup is the next verification step and requires no carrier data (https://gc.giac.org/verification.aspx).
Claimed at org level; no named holders on record. Registry verification requires intake: holder names and certificate numbers.
DFIR firm, CISSP, CISM, GCFA credentialed, federal and government response.
3 shared certifications
DFIR firm, CREST, CISSP, GSEC credentialed, federal and government response.
3 shared certifications
DFIR firm, CISSP, CISA, CISM credentialed, federal and government response.
3 shared certifications
None documented
Not documented
Retainer/readiness options. No carrier-published panel list found. Federal and government response capability documented.
Sourced from third-party DFIR research (September 2026); the platform's full verification pass is pending.
Corroborated by the September 2026 research pass: documents FedRAMP 3PAO status across 70%+ of the marketplace and dual CMMC C3PAO/RPO authorization.
No publicly documented case work was found on the firm's own site at the time of our research. Some firms publish engagement details under NDA restrictions; some simply do not publish. The absence of documented work is a fact, not a judgment.
