Security is a
Human Problem.
We build cybersecurity from the inside out — starting with the people, not the technology.
Security built on understanding.
Mindfulness as a Service
Every interaction with technology is a choice. We build security programs rooted in awareness and intention, not fear.
Cyberpsychology First
We understand why humans make decisions online. That understanding becomes the foundation of everything we build.
Research-Driven
Grounded in peer-reviewed cyberpsychology and behavioral science — not vendor hype or compliance checkbox thinking.
Human-Centric Design
Security programs that your team can own and sustain. Built for people, not algorithms.
Comprehensive cybersecurity services
From compliance readiness to executive advisory, every engagement combines technical depth with human insight.
CUI Boundary & Enclave Scoping
Define the boundary. Prove it holds. Defend it at assessment.
Learn More →Your enclave only saves you money if the scope actually shrinks.
A secure enclave improves your posture on day one. It reduces your compliance cost only if the boundary is scoped correctly and an assessor accepts that scoping. This free, self-guided assessment shows you your real scope, your SPRS posture, and what it would take to shrink the boundary.
- Built around NIST 800-171 control families
- Honest scoring — including the controls most contractors fail
- Designed by an ISSM with 21 years of Navy cybersecurity experience
Most contractors discover they're 30+ points below where they assumed. Fifteen minutes tells you the truth.
A score is a snapshot. Assurance is a posture.
Your SPRS range tells you where you stood today. Merek Watch keeps you defensible every day after — continuous NIST SP 800-171 tracking, live SSP/POA&M, SPRS management, and monthly executive briefings, from $1,500/month.
Phase II is suspended. Your obligations are not.
On 13 July 2026 the Department of War suspended CMMC Phase II and opened a 60-day reform review. NIST SP 800-171 Rev 2, DFARS 252.204-7012, annual affirmations, and SPRS scoring all remain in effect. Whatever assessment model emerges, someone still has to define which of your systems hold CUI — and defend that line.
Air Force Small Business Cybersecure Enclave
Merek submitted written questions on the DAF Statement of Objectives (FA930426C0000) — covering ATO/ATC boundaries, OT and ITAR scope, and whether a government-furnished enclave actually narrows a contractor's assessment scope.
CISA CDM Next Generation Tools
Merek responded to the CISA/GSA Request for Information (47QFRA26K0008) on strategic cyber tools acquisition.
We do this work because our clients are the small businesses these programs are built for.
From assessment to assurance.
Every engagement follows a proven methodology that combines technical depth with organizational understanding.
Discover
We listen first. Deep-dive into your environment, culture, and business objectives before recommending anything.
Assess
Rigorous technical and human-factor assessment against frameworks that matter to your industry.
Implement
Actionable remediation with clear priorities. Programs your team can own and sustain.
Sustain
Ongoing advisory and compliance monitoring. Security isn't a project — it's a posture.
The team behind Merek.
Passion. Experience. Diligence.
Every sector. One mission.
Startups to governments. K-5 classrooms to boardrooms. One commitment: security grounded in human consciousness.
Government & Defense
Federal agencies, defense contractors, compliance-heavy environments
Healthcare & Life Sciences
HIPAA, HITRUST, patient data protection
Financial Services
Banking, fintech, regulations & trust
Education & Research
K-12, higher ed, research institutions
E-Commerce & Retail
Consumer data, PCI compliance, brand protection
Manufacturing & Operations
OT security, supply chain, industrial systems
Technology & Startups
Rapid scaling, investor requirements, product security
Enterprise & Corporate
Large organizations, complex environments, governance
MindfulBytes: security from K-5.
Building conscious digital citizens through research-backed education that teaches why, not just what. Now serving 533+ students across three New Mexico schools.
Digital Hygiene
Screen awareness and healthy tech habits
Cyber Ethics
Digital citizenship and online respect
Emotional Awareness
Building resilience against digital pressure
Critical Thinking
Media literacy and information evaluation
Bringing cyberpsychology-informed digital ethics to schools nationwide.
Learn About MindfulBytes →Ready to build conscious security?
Whether you need compliance readiness, a virtual CISO, or a partner who understands the human side of cybersecurity — Merek is here.