Although my company is a small, private firm, we maintain systems that are considered important public infrastructure and as such we are eligible to work with C

Although my company is a small, private firm, we maintain systems that are considered important public infrastructure and as such we are eligible to work with CISA. They have provided red team pen-testing for us in the past, though my understanding is that that team has now been let go by DOGE. They also provide weekly vulnerability scans and reports as well as supplemental scans when new threats are found. We literally got a notice from them today about a PHP vulnerability and rectified it within a few hours of the alert. They been a good resource for us and I hope that they are able to continue.