Demonic Binary / U.S. & international defense inquiries
Secure software & defensive threat research
California-based engineering practice offering scoped technical delivery, authorized testing and malware investigation for enterprise and eligible public-sector programs.
https://demonicbinary.com
info@demonicbinary.com
+1 (650) 397-1782
Core technical areas
Secure mobile & identity engineering
Native Android/iOS, attestation, authentication, secure storage, API trust boundaries and release assurance. Kernel, bootloader and TEE analysis require separately verified specialist scope.
Defensive malware & binary investigation
Scoped analysis of suspicious Windows/Linux/mobile software, evidence preservation, bounded reverse engineering, behavior documentation and indicators for defenders.
Detection & security validation
Synthetic and authorized adversary scenarios, threat-hunting hypotheses, testable detections, application/API assessment and remediation verification.
Backend, cloud & platform security
Authenticated APIs, authorization models, deployment controls, logging, tracing, incident investigation, reliable integration and hardening.
Candidate subcontracting engagements
Malware triage & defensive analysis
Behavior report, artifacts/indicators, limitations and defensive next actions.
Review possible scopeSecure mobile engineering assessment
Mobile/backend trust-boundary test plan, findings, prioritized fixes and retest criteria.
Review possible scopeThreat detection engineering sprint
Detection rules or implementation specifications, synthetic tests and analyst handoff.
Review possible scopeProcurement identifiers & status
- Business name
- Demonic Binary — owner-reported DBA; underlying legal entity and current filing require validation.
- Contracting structure
- Sole-proprietor DBA reported; a future C corporation is planned but not established.
- SAM / UEI / CAGE
- Not yet independently verified; no identifier is asserted.
- NAICS candidates
- 541511 (custom programming), 541512 (systems design), 541519 (other computer services); final classification requires owner review.
- Performance
- Published research and engineering work are labeled by source and limitations; no government awards or defense customer references are claimed.
- Personnel / clearances
- Specialist availability, citizenship, access rules and program-specific suitability require verification; no active security clearance is claimed.
- Compliance / data
- No federal/CUI accreditation or government data environment is represented. Applicable safeguards are assessed for each contract boundary.
Evidence buyers can inspect
- Interactive synthetic malware detection lab
Inspectable fixtures, results, blind spots and tests; not customer malware evidence.
- Published engineering work
Labeled internal, first-party and experience-based technical records.
- Synthetic security-report examples
Report structure and remediation detail on fictional findings.
- Evidence-pending assurance register
15 FAR safeguards, FCI/CUI boundaries and verification requirements.
Engagement and export conditions
Every engagement is evaluated against available personnel, contracting status, authorization, system classification and delivery requirements. International defense work requires end-user and sanctions screening, ITAR/EAR classification and any necessary authorizations before transfer of technical data or defense services. No cleared delivery environment, active federal award, government accreditation or unconditional foreign-defense eligibility is implied.