I'm Larry Downard — Cyber AB CMMC Registered Practitioner, CISSP, veteran-owned, Orlando-based. Cyberneza is an authorized PreVeil reseller. The engagement delivers the CUI flow trace, the enclave boundary definition, the PreVeil deployment specification, the updated SSP and POA&M, and the NIST SP 800-171 requirement mapping for what the enclave does not cover.
Fixed-fee engagements · Boundary defined before any license is quoted · Free Consultation.
I take a small number of engagements at a time so I can run them personally. These are the three situations where defense contractors typically reach out about PreVeil.
A handful of engineers, estimators or program staff receive controlled technical data by email and file share. The rest of the company never touches it. You need the boundary drawn around those people — not around the whole business.
The prime just sent the clause and a deadline. You need to know which CMMC level applies, what an enclave does and does not cover, and what the SSP, POA&M and SPRS submission have to say before the prime asks.
You've been quoted a full Microsoft 365 GCC High migration and want a second opinion on whether a constrained enclave alongside your existing Microsoft 365 or Google Workspace tenant fits better. GCC High and enclave planning →
Cyberneza is headquartered in Orlando, within driving distance of the Central Florida defense corridor and the Space Coast. On-site work is available for engagements that benefit from it. Everything else is delivered remotely. Most enclave scoping and CMMC documentation work is remote-native anyway, so geography rarely drives engagement scope.
Cyberneza is intentionally narrow. These are the engagements I personally lead. If you need something outside this list, I'll tell you and point you to someone who specializes in it.
Trace where CUI enters, is stored, is processed, is transmitted and leaves before any system is hardened that may not belong in scope. More about boundary definition →
Which users, which protected workflows, how administration works, and how CUI is exchanged with customers, primes and partners — specified in writing, with validation criteria for each step.
As an authorized PreVeil reseller, Cyberneza can quote and provision the PreVeil subscription once the boundary is defined — so the license matches the user population the architecture actually needs.
The System Security Plan, diagrams, procedures, asset inventory and POA&M updated so they describe how the enclave operates, with the SPRS submission prepared where it applies.
The requirements the enclave does not satisfy — identity, endpoints, logging, vulnerability management, training, incident response — identified and sequenced into an evidence plan. More about the 110 requirements →
The assessment score, the evidence and the affirmation package prepared for the self-assessment path that applies to your contract. More about Level 2 Self readiness →
Free Consultation. We talk about the contract clause, who receives CUI today, the systems in use, and your timeline. If we're not a fit, I'll say so on the call.
Fixed-fee proposal within 24–48 hours. Scope, deliverables, timeline, and price — all in writing before any commitment.
The CUI data-flow analysis, the documented boundary, the PreVeil deployment specification, the licensing quote sized to it, and weekly working sessions reviewing each change against the requirement it serves.
SSP, POA&M, diagrams and evidence package reviewed, the SPRS submission prepared where it applies, and on-call backup through the affirmation or the C3PAO assessment window.
I'm Larry Downard Jr., founder and principal consultant at Cyberneza LLC. I'm based in Orlando, Florida, and I've worked in cybersecurity since 1997 — including senior architecture roles supporting enterprise banking, federal cloud, and large-scale cloud service environments. Earlier in my career I helped run operations for one of the U.S. Department of Defense's earliest SaaS programs, and I spent years as a lead endpoint engineer rolling out clients across large environments.
Cyberneza is intentionally a small practice. I run a limited client load so I can stay in the work — tracing CUI flows, drawing the boundary, specifying the enclave, writing the SSP so it describes what actually runs, and standing next to the team through the assessment. That's the engagement I wish I could have hired when I was on the buy side.
Yes. Cyberneza LLC is a Florida-registered business headquartered in Orlando. Engagements are led personally by me — I live and work in the Orlando area, within driving distance of the Space Coast and the Central Florida defense corridor.
No. Orlando is home base. I work with contractors across Florida and the United States. Most PreVeil enclave and CMMC work is delivered remotely regardless of geography.
Authorized PreVeil reseller. PreVeil licensing can be purchased through Cyberneza, and the CUI boundary definition, enclave architecture, SSP and POA&M updates, and remaining NIST SP 800-171 work come from the same Cyber AB CMMC Registered Practitioner who runs your discovery call.
No single product satisfies all 110 NIST SP 800-171 Revision 2 requirements. A properly scoped enclave constrains where CUI lives and can minimize unnecessary CMMC scope, but identity, endpoint, logging, vulnerability management, training, incident response, policies and evidence still have to be in place and documented. Cyberneza maps which requirements the enclave addresses and sequences the rest.
Yes. The product is PreVeil, though it is often written “Prevail” — a Prevail enclave and a PreVeil enclave are the same thing, and everything on this page applies to both.
It depends on the contract clause and the information you handle. Mandatory Phase 2 C3PAO requirements were suspended July 13, 2026. Phase 1 self-assessment requirements, Level 1 Self and Level 2 Self, still apply. Cyberneza prepares the assessment score, the evidence, and the SSP and POA&M so the affirming official can sign; when a Level 2 C3PAO assessment is required or chosen, certification comes from an authorized C3PAO.
Free Consultation. No pitch deck. Send the contract clause and a sentence on who handles CUI today, and we figure out whether a PreVeil enclave with Cyberneza is the right move — and if it isn't, I'll tell you what I'd do instead.
