Cloud Security
Exploit Prevention
Code to Cloud Security Compliance to contract.
WHAT WE DO
Lunima combines automated security scanning with senior human expertise to deliver what large enterprise security firms charge $50,000+ for — at a price that works for a 20-person defence supplier or a regional credit union. We find vulnerabilities, fix critical ones first, map everything to your regulatory obligations, and provide documentation you can hand to a contracting officer, regulator, or insurance broker.
CPCSC is a contract
gate now
DND and Public Services Canada require cybersecurity attestation as a condition of contract award — not a best-effort guideline. No attestation, no proposal evaluated.
RFP drops. You have 3 weeks.
The technical requirement includes a CPCSC compliance statement. Without a documented gap assessment and attestation package, your firm is disqualified before evaluation begins.
Vulnerability Management
Security threats evolve every week. A vulnerability that did not exist last month can appear after a software update. Lunima Shield monitors your business continuously — running automated weekly scans, alerting you the instant something changes, and providing monthly status reports that document your security posture for insurance brokers and regulators.
Attest-ready in 5 days. Fixed.
Full CPCSC Level 1 gap assessment, attestation-ready report, System Security Plan, and CMMC crosswalk — all in writing, in 5 business days, for a fixed price you approve upfront.
Huntress SOC
Who's watching at 3am? A real team.
Guard is powered by Huntress — enterprise-grade 24/7 threat detection stands behind every client. You get the team; you keep one accountable point of contact.
Cybersecurity for you
From kickoff to attest-ready.
Choose LUNIMA
Businesses choose Lunima because we deliver results in days, and never send a surprise invoice.
Scan & scope
90-minute kickoff call. We scan your domain, email auth, SSL, and public-facing infrastructure. You complete a 30-min systems inventory template — no IT expertise needed.
Assess & fix
We independently assess all 17 CPCSC practices. Non-intrusive — no admin credentials, no downtime. We fix critical vulnerabilities and map every finding to Canadian law.
Report delivered
Complete attestation package: gap report, SSP framework, POA&M, CMMC crosswalk. 60-minute debrief with Siman. Board-ready. Contracting-officer-ready. Yours.
Why This Matters
2026
Level 1 Mandatory
13
Level 1 Control
5 days
To Attest Ready
24/7
Monitoring
If you don't need us, we'll tell you.
We'll take an honest look at where you stand, free. If there's a real gap, we'll show you exactly what it is. If you're already in good shape, we'll say so — and leave you alone.
A firm that only makes money when you sign has every reason to tell you you're at risk. We'd rather be the one you call when a prime finally asks the question — because we were straight with you the first time.
The Businesses that kept their contracts
"We needed CPCSC readiness before a DND RFP closed. Lunima had our Level 1 report done in 4 days. We submitted on time. The contract came through."
CEO
Defence supplier · Ontario · DND Tier 1
"We passed our insurance renewal with the Lunima Shield compliance PDF. One document. My broker confirmed it covered everything they needed."
Operations Manager
Toronto law firm · 12 staff
"Every finding was mapped to PHIPA — not generic cybersecurity language. The exact Ontario regulation that applied. Our privacy officer could read it without a translator."
Executive Director
Community health centre · GTA
"Our DMARC had been misconfigured for two years. Lunima's scan flagged it in 30 seconds and had it fixed in 48 hours. Worth every dollar."
Practice Manager
Dental clinic · Mississauga
Scenarios we solve
RFP Deadline
A DND RFP with a CPCSC requirement and 3 weeks to respond.
Prime Request
A prime asks a long-time supplier to prove how it protects their specs.
NO OWNER
Security has quietly become nobody's job, right as Level 1 goes mandatory.
CPCSC
Defence · mandatory 2026
CMMC L1 & L2
US DoD supply chain
ITSG-33
GC IT security