SimIS Becomes Authorized U.S. Reseller of KELA’s Cyber Threat Intelligence Platform

SimIS Brings KELA's National Cyber Resilience Suite to U.S. Government, Law Enforcement and Defense Customers

Through a new reseller agreement, federal, state and local agencies, critical infrastructure operators and defense contractors gain one suite for preemptive defense, exposure and supplier risk management, cybercrime investigations and takedowns.

SUFFOLK, Va. (Oct. 30, 2026). SimIS, Inc., a Veteran-Owned Small Business serving defense and federal customers since 2007, today announced a reseller agreement with KELA, a global provider of cyber threat intelligence and exposure management. Under the agreement, SimIS will offer KELA's National Cyber Resilience Suite to government agencies, law enforcement, critical infrastructure operators and defense contractors across the United States.

Cyber threats to the U.S. public sector rarely start inside the network. Credentials stolen by infostealer malware, network access offered for sale and attacks on public-facing services are traded and planned in underground forums, markets and messaging channels, often long before they reach a police department, a water utility or a defense supplier. The investigators responsible for these crimes often cannot safely reach those sources, and the teams defending public infrastructure rarely see them at all.

KELA's National Cyber Resilience Suite is built for both missions. Investigators and cyber defenders work from the same platform, the same cybercrime dataset and the same case record, so intelligence gathered for one mission informs the other. The suite is built around three outcomes: arrests, takedowns and preemptive defense. It includes:

• INVESTIGATE: search across underground forums, markets and messaging channels such as Telegram, with every finding linked to its original source.
• THREAT ACTORS: profiles of individual threat actors and groups, including the handles they use across platforms.
• CONTROL: map and score the attacker infrastructure behind a single IP address or domain, with attribution and underground context.
• FORGE: connect online accounts to the people and places behind them. 
• Accounts Explorer: see infostealer infections across a country or region of interest. 

Beyond the underground, the suite extends to each agency's own footprint and its supply chain. Continuous Threat Exposure Management (CTEM) gives agencies an attacker's view of every internet-facing asset they operate, from public portals to connected devices, and prioritizes fixes by their impact on the mission. Third-Party Risk Management (TPRM) assesses the exposure of the vendors and suppliers that public services and critical infrastructure depend on.

For agencies and operators protecting public services and critical infrastructure, the same intelligence supports preemptive defense. Exposed credentials, compromised accounts and network access offered for sale surface as incidents in real time, so teams can act before an attacker does. Because the suite is modular, each agency or unit can start with the capabilities it needs under one procurement and one renewal.

KELA's research has already supported law enforcement. In 2026, KELA shared intelligence on the TeamPCP threat group with the FBI and the Australian Federal Police ahead of arrests by Australian police.

SimIS already advises defense contractors on protecting Federal Contract Information and Controlled Unclassified Information and backs that advice with security testing and IT hardening services. On the law enforcement side, the company has supported federal customers and builds training technology for police agencies. 

"We want our clients to see a threat while there is still time to act on it," said Dr. Johnny Garcia, CEO of SimIS. "That holds for a contractor protecting sensitive data, an agency defending public infrastructure and an investigator building a case. KELA gives all of them what they need to act." 

"Cybercrime against the United States is planned in places most agencies never see," said Ohad Eylon, SVP Global Business Development at KELA. "The National Cyber Resilience Suite lets investigators and defenders work from one dataset, so the intelligence that leads to an arrest can also protect a city's infrastructure before it is hit. SimIS knows the defense, federal and law enforcement community, which makes it the right partner to bring the suite to U.S. agencies." 

The suite is available to U.S. customers through SimIS. SimIS’s team has been trained and certified by KELA to provide customer onboarding, user training and first-line support. To request a briefing, contact Julian Baena at julian.baena@simisinc.com or visit simisinc.com/contact-us.

About SimIS

Founded in 2007, SimIS, Inc. is a Veteran-Owned Small Business headquartered in Suffolk, Virginia. The company delivers modeling and simulation, test and evaluation, autonomous and unmanned systems, AI/ML and data analytics, and cybersecurity and compliance services to defense and federal customers. Learn more at simisinc.com.

About KELA

KELA is a global leader in proactive cyber defense, delivering an AI-centric unified exposure management platform consolidating Cyber Threat Intelligence (CTI), External Attack Surface Management (EASM), Continuous Threat Exposure Management (CTEM) and Third-Party Risk Management (TPRM) capabilities to empower security teams across the threat lifecycle. KELA is trusted by global brands and governments across North America, Asia, and Europe, and is part of the KELA Group. For more information, please visit www.kelacyber.com.

Media contacts

Julian Baena, Director of Business Development | SimIS, Inc. | 2371 Wilroy Road, Suffolk, VA 23434 | julian.baena@simisinc.com | 757.399.4502