How the consultant directory works

Who can list

Businesses and independent professionals that provide services in one or more of three tracks: NISP industrial security, Cybersecurity & CMMC and Security clearance law. Only the business itself can create its listing. We never copy listings from other sources.

How we review

Every new listing and every substantive edit is reviewed by the site owner before it appears, usually within a few business days. We check that the business is real and that the listing contains nothing the terms forbid: no clearance levels or facility clearance claims (see 32 CFR 117.9(a)(9)), no claims to sponsor, obtain or guarantee a clearance, and no client, program or contract names.

What the check marks mean

A check mark means only the sentence below, on the date shown next to it. Checks older than 13 months stop showing until they are done again.

Domain confirmed

The listing’s contact email is at the same domain as its website, and the business confirmed that address.

SAM.gov checked

On the date shown, the listed UEI or CAGE code matched an active SAM.gov registration under this business name.

Credential checked

On the date shown, the linked issuer record (for example the Cyber AB Marketplace) showed this credential for this business or its principal.

Bar admission checked

On the date shown, the jurisdiction’s official lookup showed the named attorney as active. Every attorney listing has this check before it appears.

Credentials marked self-reported, including CDSE SPēD certifications, are shown as the business entered them and are not checked by FSOtools. Cyber AB designations are shown only after they are checked. Small-business designations are self-reported.

What we don’t do

We do not endorse, rank or recommend anyone. We do not sell listings, placement or ads, charge referral or lead fees, or accept payment of any kind. The default order reshuffles every day so no one benefits from their name or the age of their listing. There are no reviews or ratings. DCSA, DoD and other agencies do not endorse consultants.

Privacy

Effective 25 October 2026.

What we collect from businesses that list. The information entered in the listing form, the contact email address, and the date the terms were accepted. The email address is never shown publicly. Phone number and street address are shown only if the business chooses to show them.

What we collect from visitors. If you send an inquiry, we forward your name, email address and message to the business by email and keep no copy. We keep a record that an inquiry was sent (the listing, the time, and a one-way code derived from your email address, used to stop abuse) for 90 days. If you report a listing, we keep your report, and your email address if you give it, until 180 days after we resolve it.

What we never collect. Security clearance information, Social Security numbers, dates of birth or citizenship.

Who processes it. The directory runs on Cloudflare (hosting, database, storage, email delivery, bot protection and cookieless page analytics). We do not sell or share listing or inquiry data with anyone else, and we do not advertise.

Your choices. You can edit, hide, pause or permanently delete your listing at any time from “Manage my listing”. Deletion takes effect immediately; backup copies age out within 30 days.

Cookies. One cookie, set only when you sign in to manage your listing, keeps you signed in for up to 8 hours. Visitors get no cookies from the directory. Cloudflare’s bot check may set its own.

Changes. We date this notice and tell listed businesses by email before material changes take effect.

Listing terms

Effective 25 October 2026.

1. Free. Listing is free. FSOtools does not charge listing, placement or referral fees, accept payment for ranking, or sell advertising in the directory.
2. Who may list. Businesses and independent professionals that provide industrial security, cybersecurity or CMMC, or security clearance legal services. You must be authorized to list the business.
3. Accuracy. Your listing must be accurate and current. You will confirm it yearly or it will be hidden and later deleted.
4. What you may not include. Clearance levels or status (yours, your staff’s or your company’s facility clearance; see 32 CFR 117.9(a)(9)); claims to sponsor, obtain or guarantee a clearance; client, program or contract names; classified, controlled unclassified or export-controlled information; anything false or misleading; links to unrelated sites.
5. Review and removal. FSOtools may decline a listing, reject an edit, or suspend or delete any listing at its discretion, with or without notice. We aim to explain our reason.
6. No endorsement. A listing is not an endorsement or recommendation by FSOtools or any government agency. Check marks mean only what “What the check marks mean” says, on the date shown.
7. Attorneys. You are responsible for complying with the professional-conduct and advertising rules of every jurisdiction where you are admitted or practice, including any labeling, filing or record-keeping duties. Your listing will show “Attorney advertising” and name the responsible attorney.
8. Your content. You grant FSOtools a non-exclusive, royalty-free licence to display your listing and photo in the directory while it is listed. You confirm you have the rights to the photo or logo.
9. Inquiries. Inquiries reach you by email with the sender’s address as Reply-To. FSOtools does not screen their content and keeps no copy.
10. No warranty; limitation of liability. The directory is provided “as is” and “as available”, without warranties of any kind. FSOtools does not verify listings except the items marked with a date, and is not responsible for the services, statements or conduct of listed businesses or of anyone who contacts them. To the extent the law allows, FSOtools is not liable for any loss arising from use of the directory, a listing or an inquiry. Listing is voluntary and free; you may delete your listing at any time.
11. Changes. We will email you before material changes to these terms take effect.

Removing a listing

Sign in at Manage my listing with the listing’s email address and choose “Delete permanently”. The listing, its photo and its records are removed at once and its address stops working. If you no longer control that email address, contact FSOtools from the business’s own domain.

Reporting a problem

Every listing has a “Report this listing” link for inaccurate information, impersonation, prohibited content or spam. Reports go straight to the site owner.