DirectViz Solutions and the art of making nothing happen

The Navy announcement contains a detail worth pausing over: seven offerors. In July 2026, DirectViz Solutions said it had won a $68.5 million cybersecurity engineering support task order for the Naval Surface Warfare Center Combat Direction Systems Activity. Seven companies had competed. The assignment could extend through February 2032. A substantial amount of money, a long stretch of responsibility, and an oddly modest ambition: help important systems continue to work.

That makes DirectViz an interesting company to study even if you never buy federal IT services. Much of the technology business promises a visible new thing. This corner of it must also account for everything already in use. The new system has to arrive. The existing operation has to survive the visit.

Seven bidders, one long assignment

The Navy task order was awarded through SeaPort Next Generation, the service’s procurement vehicle. DirectViz describes the work as cybersecurity engineering intended to strengthen the security and readiness of Navy mission systems. The customer is buying specialized labor and delivery capability over time. The award announcement gives the business a concrete shape: an identified customer, an engineering problem, a purchasing route and a potential end date.

A number this large can seduce a reader into the wrong arithmetic. It is the announced task-order value. It should not be treated as cash already received, profit, or a single year’s sales. What it establishes is the scale of an assignment. The distinction matters when judging a services company: a contract is an obligation to do work before it becomes an attractive financial result.

“This award reflects the confidence our Navy customers place in DirectViz Solutions”John Epperly, CEO, in the Navy award announcement

The competition also gives a useful limit to the story. Seven offerors means DirectViz had alternatives to beat. It does not establish that the firm is superior in every category of federal technology. The interesting question is narrower: what kind of organization is equipped to take responsibility for this particular work?

The engineer and the general

Start with Vinnie Tran, who founded DirectViz in 2012 and remains its president. He served more than eight years in the Army, earned degrees in electrical engineering and computer engineering at the University of California, Irvine, and later an MBA at the University of Southern Indiana. The combination is instructive. There is the hardware and software education; there is the experience of an organization in which an operational requirement has consequences beyond a product demonstration.

On January 1, 2026, John Epperly became CEO after serving as chief operating officer. DirectViz describes the move as a planned succession. His background includes senior roles at Booz Allen Hamilton, DMI and Coalfire, alongside more than 36 years in the Army and Army National Guard. He rose to Major General and commanded the 29th Infantry Division.

These biographies help explain the company’s vocabulary: accountability, execution, continuity. They do not prove a service works. They tell you which problems its leaders have spent their careers around. The planned handover is consistent with a business whose customers are purchasing sustained support rather than the excitement of an unexpected reinvention.

The same contractor, different stakes

The federal label can hide an extraordinary variety of customers. DirectViz lists Army regional cyber operations, White Sands Missile Range, the National Science Foundation and the USDA Food Safety and Inspection Service among its programs. It describes work in both domestic and overseas US government environments. A test range, a research agency and a food safety organization do not have interchangeable missions. Their technology still needs administration, protection and support.

In September 2025, DirectViz announced its second FSIS prime contract: $25.9 million over five years, covering networking, cybersecurity, information assurance, cloud computing and related technology services. Food safety is rarely the first thing that comes to mind when someone says “federal IT contractor.” It is a useful corrective. The business reaches into the infrastructure behind civilian government as well as military operations.

At NSF, the company describes responsibility for enterprise IT, end-user support and the ServiceNow environment. Here, a good workflow matters alongside a good security control. A scientist’s support request and a security engineer’s assessment may look different, but both require a system that records the problem, routes the work and makes responsibility visible.

Four trades under one roof

DirectViz organizes its services around four areas. Cybersecurity covers detection, response, governance and protection. IT service management covers the everyday operation of networks, infrastructure and user support. Application development builds and modernizes software. Logistics and training address assets, enterprise logistics systems and the people using them.

The breadth is useful when a problem crosses departmental boundaries. A software change may need an infrastructure adjustment, a security review and training. Buying each task separately can be perfectly sensible, but somebody still has to manage the connections. DirectViz’s market position is that of a services contractor able to work across those connections. Its public offering is built around engagements, not a consumer app you download and forget.

It also works with established platforms. Its listed technical partnerships include Microsoft, AWS, ServiceNow, UiPath and Red Hat. That places it between technology vendors and agencies with particular operating requirements. The platform supplies capabilities; the contractor configures, integrates and sustains them in a customer’s environment. The usefulness of the arrangement depends on the actual delivery team and scope.

The paperwork has an operational purpose

DirectViz’s credentials deserve precise reading. In January 2026 it announced CMMC Level 2 certification, independently verified by A-LIGN with readiness support from VigilantSec. It also announced CMMI Maturity Level 3 reappraisal for its Prime Contracts: IT Engineering and Professional Services unit. In July, a SOC 2 Type 1 examination concluded that the DVS System’s relevant controls were suitably designed as of July 15, covering Security and Confidentiality.

Scope and date are part of those achievements. They make the claims useful. A dated conclusion about control design should stay a dated conclusion about control design; expanding it into a universal promise would erase the information a buyer needs.

The company’s CyberReady division applies this experience to CMMC assessment preparation. Its services include gap identification, remediation planning, policy and evidence alignment, and mock assessments. The practical appeal is a sequence of work rather than a reassuring adjective. An organization can establish where it stands, identify what needs attention and prepare material an assessor can examine. Readiness consulting supports that process; certification still requires assessment.

The habit worth borrowing

One company-reported example makes the operating approach tangible: DirectViz says it replaced legacy ArcSight with an Elastic-powered security information and event management system, achieving 80% faster data visualization. It also describes centralizing NSF services in ServiceNow. These accounts suggest a useful habit: choose a specific operational constraint, change the relevant workflow or tool, and measure the result. The reported outcomes belong to those environments, not every future installation.

Procurement adds another constraint. DirectViz lists prime vehicles including GSA MAS and SeaPort-NxG. Its DES joint venture with Enterprise Solutions & Management was announced as a NASA SEWP VI prime in Categories B and C in July 2026. These routes help agencies purchase services. A place on a vehicle creates access to opportunities; an agency still needs an appropriate order and a defined requirement.

For a buyer, the sensible next step is to match a real service problem to that combination of skills and procurement access. For an operator elsewhere, the portable lesson is smaller: make responsibility clear, connect the work across teams, and ask for evidence that the change helped. Federal acronyms are optional. Keeping the operation useful is the point.