U.S. small businessUEI PQN2HNU5CDX3CAGE 23WQ6
Government contracting
MAX CREST GROUP LLC, trading as Max Crest Solutions, is a small business in San Antonio, Texas, offering software maintenance, modernization, integration and development to federal, state and local agencies.
Copy what you need
UEI
PQN2HNU5CDX3
CAGE
23WQ6
NAICS
541511
PSC
DA01, DA10
Entity
MAX CREST GROUP LLC
POC
sam.bass@maxcrestsolutions.com
Company snapshot
- Legal entity
- MAX CREST GROUP LLC
- Trade name
- Max Crest Solutions. Contracts, quotes and invoices are issued in the legal entity name.
- UEI
- PQN2HNU5CDX3
- CAGE
- 23WQ6
- Business size
- Small business under NAICS 541511 (SBA size standard $34.0M)
- Primary NAICS
- 541511Custom Computer Programming Services
- Additional NAICS
- 541512Computer Systems Design Services
- 541519Other Computer Related Services
- 541519Information Technology Value Added ResellersSBA exception under 541519. 150 employee size standard in place of $34.0M in receipts.
- 541611Administrative Management and General Management Consulting Services
- 518210Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
- Product Service Codes
- DA01IT and Telecom, Business Application and Application Development Support Services
- DA10IT and Telecom, Business Application and Application Development Software as a Service
- Place of performance
- San Antonio, Texas. Remote nationwide.
- Point of contact
- Sam Bass, Principal Engineer, sam.bass@maxcrestsolutions.com
How we contract
- Contract types
- Firm-fixed-price and time-and-materials. Comfortable with firm-fixed-price on well-defined scopes.
- Contract size
- Any size, from micro-purchase through large competitive awards. Available as prime, subcontractor or teaming partner.
- Quote turnaround
- Responses to RFQs returned within three business days of receipt.
- Deliverables
- Source code, build instructions and technical documentation into the government's own repository at each milestone.
- Continuity
- Work is documented as it is delivered, so it can be picked up by government staff or another vendor without a knowledge transfer period.
- Accessibility
- Deliverables are built and tested to Section 508 and WCAG 2.1 Level AA.
Security and data handling
- Built in, not billed later
- Current components, single sign-on with multi-factor, permissions that match the person, audit trails, encryption in transit and at rest, and secrets kept out of the source code. These are part of the build, not a separate line item.
- Control alignment
- Applications are built and reviewed against FAR 52.204-21 basic safeguarding. NIST SP 800-171 controls are applied where the contract calls for them.
- Where code and data live
- Remote performance from the United States on firm-owned equipment and firm-controlled cloud environments. Source code, build instructions and documentation are delivered into the government's own repository at each milestone. Work inside a government environment when the contract requires it.
- Accounts and access
- Least privilege on every account used for contract work, multi-factor on all of them, and accounts closed out at the end of the period of performance.
- Scope
- Application security and vulnerability remediation: fixing the software itself and writing down what changed. Not offered: penetration testing, continuous monitoring, a security operations center, or an incident response retainer. No facility clearance is held.
Led by Sam Bass, Principal Engineer: production software since 2015 in regulated environments across automotive, audit, banking, health insurance and film production. The prior work was performed as an employee or contractor of those organizations and is individual professional experience, not corporate past performance.