MOverview
MITRE is a not-for-profit organization that runs federal-funded research and development centers for the U.S. government. It helps civil and military agencies solve critical challenges by delivering practical technical capabilities in defense, aviation, cybersecurity, health, and homeland security. It works through a not-for-profit FFRDC model that combines systems engineering, independent assessments, and cross-domain collaboration, sharing knowledge across projects. Its goal is to provide mission-critical capabilities and long-term public-interest solutions that improve national security and public safety across government.
Work here?Claim your company
About MITRE
Industries
Company Size
5,001-10,000
Company Stage
Grant
Total Funding
$2.1M
Headquarters
McLean, VA
Founded
1958
Get referred to MITRE
See people who can refer or advise you
Simplify's take
What believers are saying
- ATT&CK v20 adds AI, MFA-bypass, and ICS content, increasing sponsor dependence.
- New trustee Jonathan Moneymaker and Glenn Daly’s promotion strengthen defense-market execution in 2026.
- BlueTech and Living Ocean partnerships expand MITRE into maritime digital-twin and sensing work.
What critics are saying
- Federal sponsor concentration exposes MITRE if Congress cuts FFRDC budgets in 2027.
- ATT&CK commoditization lets vendors copy framework value while MITRE absorbs maintenance burden.
- AI-platform expansion raises execution risk; missed updates erode ATT&CK credibility and existential relevance.
What makes MITRE unique
- ATT&CK v20 on October 13, 2026 makes MITRE the cybersecurity vocabulary standard.
- JICSA with ORNL on October 22, 2026 links mission engineering to advanced computing.
- MITRE’s FFRDC role embeds it across defense, aviation, healthcare, and homeland security sponsors.
Help us improve and share your feedback! Did you find this helpful?
Funding
Total Funding
$2.1M
Above
Industry Average
Funded Over
1 Rounds
Growth & Insights and Company News
6 month growth
-1%1 year growth
0%2 year growth
0%MITRE ATT&CK v20 is here. What it means for your security program. MITRE released ATT&CK v20 on October 13, 2026, bringing significant updates to one of cybersecurity's most widely used frameworks for understanding adversary behavior. The latest release expands coverage of AI-enabled attacks, identity-based threats, and attacks targeting critical infrastructure. It also introduces new detection strategies and updates the techniques security teams use to understand how attackers operate. For security leaders, the question isn't simply what's changed in the framework. It's whether those changes expose gaps in their security programs, and what they should do about them. That's where ProSentra is focusing its efforts with Acuity. What's New in MITRE ATT&CK v20? ATT&CK v20 reflects how quickly the threat landscape is evolving, particularly as attackers begin exploiting AI systems and autonomous capabilities. Several updates stand out. 1. AI is now part of the attack surface MITRE has introduced techniques covering direct and indirect prompt injection, AI-enabled data exfiltration, manipulation of AI-generated results, and interference with autonomous defenses. These additions recognize that AI systems aren't simply tools defenders use. They're increasingly systems attackers can manipulate, exploit, or turn against an organization. 2. Identity and authentication threats continue to evolve The release adds coverage for stealing application-specific passwords and techniques designed to evade automated security mechanisms, including CAPTCHA protections. These changes reinforce the importance of understanding how identity controls work together, rather than evaluating each technology in isolation. 3. Critical infrastructure receives expanded attention New campaign coverage includes attacks against U.S. water utilities, while updates to industrial control system (ICS) techniques improve visibility into execution and command-and-control behaviors. MITRE has also added asset and platform context to ICS detection strategies, helping defenders understand where particular detections apply. 4. Detection guidance continues to mature The Enterprise framework now contains 703 detection strategies and 1,770 analytics. These provide increasingly detailed guidance for understanding how adversary techniques might be identified. But having detection guidance available doesn't necessarily mean an organization has the tools, configurations, or processes needed to implement it. And that's an important distinction. Why this matters to cisos. Most security leaders aren't starting from scratch. They already have security tools, documented controls, policies, assessments, and teams responsible for managing risk. Many have mapped their security programs to frameworks such as NIST CSF, CIS Controls, and MITRE ATT&CK. The challenge is understanding how everything connects. Consider a new ATT&CK technique involving AI-enabled data exfiltration. A security leader should be able to answer several questions: * Is this technique relevant to its environment? * Which of its existing controls help protect against it? * Which security tools provide detection or prevention capabilities? * Are those capabilities configured, validated, and operating effectively? * If ProSentra has a gap, what would it cost to address? * How important is that investment compared with its other security priorities? Answering those questions often requires information scattered across multiple systems, spreadsheets, assessments, and teams. The problem isn't a lack of security information. It's the difficulty of turning that information into decisions. How ProSentra is Incorporating ATT&CK v20 into Acuity. At ProSentra, ProSentra built Acuity around a fundamental idea: security programs should be managed as connected systems, not isolated collections of controls, technologies, and assessments. MITRE ATT&CK is an important part of that model because it provides a common language for understanding adversary behavior. As ProSentra incorporate ATT&CK v20 into the Acuity platform, its focus extends beyond updating a list of techniques. ProSentra want those updates to inform how organizations evaluate their security posture and prioritize improvements. Connecting threats to existing controls. Acuity connects threats, security controls, technologies, people, and investments within a unified security program model. Incorporating the latest ATT&CK techniques allows ProSentra to evaluate how newly documented adversary behaviors relate to existing defensive capabilities. Rather than requiring security leaders to manually interpret every framework change, its goal is to make the potential impact on their programs easier to understand. Identifying meaningful coverage gaps. A new threat technique doesn't automatically mean an organization needs another security product. Existing controls may already provide adequate protection. In other cases, a capability may exist but isn't configured or operating effectively. Acuity's approach is to examine these relationships before recommending additional investment. The objective isn't to maximize the number of controls or technologies an organization deploys. It's to understand where protection is sufficient, where it is weak, and where improvements will make the greatest difference. Prioritizing investments based on risk. Not every ATT&CK technique is equally relevant to every organization. A manufacturer operating industrial control systems faces different threats than a financial services company or a healthcare provider. Security leaders need to evaluate threats in the context of their own environments, existing capabilities, and business priorities. Acuity brings these considerations together to support more informed investment decisions. The result should be a clearer understanding of what to improve, why it matters, and how it affects the overall security program. Keeping security programs aligned with evolving threats. Security posture isn't static. Threats change. Technologies evolve. Controls improve. New vulnerabilities and attack techniques emerge. ATT&CK v20 is another reminder that security programs need to evolve alongside the threat landscape. Its direction with Acuity is to make that evolution easier to manage by connecting changes in threat intelligence to the security program itself. From threat intelligence to better decisions. MITRE ATT&CK has become an essential resource because it helps the cybersecurity community understand how adversaries actually operate. But frameworks alone don't improve security. Organizations improve security when they use that knowledge to make better decisions about their defenses, operations, and investments. That's the opportunity ProSentra see with ATT&CK v20 and Acuity. The value isn't simply knowing that a new attack technique exists. It's knowing whether you're protected against it, what you're missing, and what to do next. At ProSentra, ProSentra is continuing to build that connection between threat intelligence and security program management. Because understanding the threat is only the beginning. Knowing what to do about it is what matters. Explore the MITRE ATT&CK v20 release notes or contact ProSentra to learn how Acuity helps security leaders connect threats, controls, tools, and investments.
MITRE ATT&CK Enterprise to Add AI Platform. Oct 27, 2026 Expansion will include content developed by MITRE ATLAS McLean, Va., & Bedford, Mass., Oct. 27, 2026 - As organizations rapidly deploy AI-enabled systems in mission-critical applications, adversaries increasingly exploit the unique behaviors of these systems to compromise their targets. MITRE ATT&CK(R) will add AI-enabled systems as a new platform in ATT&CK Enterprise, MITRE ATT&CK announced today at ATT&CKcon 7.0. The new platform, to be released early next year, will recognize the unique and specific techniques adversaries are using when targeting AI-enabled systems, such as results poisoning or prompt injection. This content will be developed in part with information from the MITRE ATLAS framework and dedicated ATT&CK AI Platform staff. Other ATT&CK Enterprise platforms include Windows, Cloud, and Network Devices. "As AI systems have been broadly and rapidly deployed across the enterprise, the addition of the ATLAS knowledge base will add to ATT&CK's effectiveness in helping users understand the threat landscape," said Charles Clancy, chief technology officer and senior vice president. "ATLAS remains a vital resource for the security of AI systems, providing frequent updates based on real-world attacks and red team demonstrations. Together, MITRE ATT&CK and ATLAS provide a more comprehensive guide to adversary behavior across technologies." During ATT&CKcon, MITRE ATT&CK also announced the upcoming release of Protection Strategies, an upgraded version of ATT&CK Mitigations. Protection Strategies provides machine-readable descriptions, delivering actionable insights to reduce the impact of specific techniques. Originally developed by MITRE in 2013, ATT&CK provides a freely available knowledge base of real-world adversary tactics and techniques used by cybersecurity defenders, threat intelligence analysts, researchers, educators, and technology providers around the world. Today, ATT&CK is used in more than 190 countries across all seven continents and has become foundational to cyber threat intelligence, detection engineering, adversary emulation, security operations, workforce development, and security product evaluation. About MITRE MITRE's mission-driven teams are dedicated to driving solutions to our nation's most pressing challenges. As a not-for-profit research and development organization, MITRE's staff leverage our unique multi-sponsor vantage point, systems expertise, and innovative solutions to ensure the health, prosperity, and security of our nation.
ORNL and MITRE to accelerate advanced computation for National Security. October 22, 2026 Press play to listen to this content New joint institute will develop, evaluate and transition new computational solutions Oct. 22, 2026 - MITRE and the Department of Energy's (DOE) Oak Ridge National Laboratory (ORNL) are launching The Joint Institute for Computational and Super Intelligence Advantage (JICSA) to accelerate the deployment of mission-ready advanced computing solutions to some of the nation's most pressing national security challenges. ORNL and MITRE representatives pose after signing a memorandum of understanding. From left: MITRE Technical Fellow Craig Wiener; ORNL Associate Laboratory Director Moe Khaleel; MITRE President and CEO Mark Peters; ORNL Director Stephen Streiffer; ORNL Field Intelligence Element Director Charles Durant; and MITRE Fellow Mikel Rodriguez. Credit: ORNL. JICSA will rapidly build, evaluate and deploy technologies critical to national security and economic prosperity, including AI and quantum, ensuring continued U.S. leadership in these key areas. The institute will take advantage of MITRE and ORNL's existing facilities and expertise, including MITRE's Federal AI Sandbox and ORNL's Lux at the Oak Ridge Leadership Computing Facility, while partnering with industry to incorporate commercial solutions for federal missions. "As transformative technologies like [artificial] intelligence and quantum computing continue to advance, the foundational computation they rely on must also advance to ensure our continued technological advantage," said Mark Peters, president and CEO, MITRE. "Together, MITRE and Oak Ridge's objective and mission-focused technical expertise will ensure computational advances are developed and evaluated in the context of the complex systems and mission objectives where they will be deployed." Collaborative research based on MITRE and ORNL's shared and complementary expertise will co-design, test, assure and transition computational solutions for urgent national needs. "ORNL's leadership in scientific computing and emerging technologies, including [artificial] intelligence and quantum, positions us to tackle complex challenges of national importance," said ORNL Director Stephen Streiffer. "By partnering with MITRE, we have an opportunity to unite complementary expertise, expand the reach of our innovations and deliver novel solutions for the missions we serve." Initial focus areas for the institute include: * Algorithmic Pathfinding: With unique understanding of mission needs of the U.S. government, JICSA will research and develop new areas where AI models and architectures or quantum algorithms can be applied. * Systems Evaluation: As advanced computation is applied to consequential mission applications, robust evaluation and testing are essential. JICSA will combine MITRE and ORNL's expertise in cyber and AI security to support sponsor needs in benchmarking, verification and validation, and testing in mission environments. * Decision Science: JICSA will work to apply advanced computation to improve the science of modeling and simulation fidelity and precision in consequential mission domains. "U.S. leadership in computing, [AI] and quantum technologies is essential to our national security," said Moe Khaleel, ORNL's associate laboratory director for National Security Sciences. "By building on ORNL's and MITRE's complementary strengths, this Institute will advance the security of [AI], apply [AI] to strengthen cybersecurity and address critical national missions. It will also use [AI] to accelerate progress in quantum science and technology, delivering science-based solutions with the urgency our national security requires." Through joint investments and projects, JICSA will provide the national security community with an end-to-end pathway from mission need to trusted, deployable capability. "Effectively accelerating deployment and maintaining U.S. competitive advantage relies on building a full stack of capabilities from the bottom-up," said Charles Clancy, chief technology officer and senior vice president, MITRE. "I'm excited for this opportunity to translate advances in algorithms and computing to mission solutions and impact." About MITRE MITRE's mission-driven teams are dedicated to driving solutions to our nation's most pressing challenges. As a not-for-profit research and development organization, MITRE's staff leverage our unique multi-sponsor vantage point, systems expertise, and innovative solutions to ensure the health, prosperity, and security of our nation. Learn more at mitre.org. About Oak Ridge National Laboratory The Oak Ridge National Laboratory is supported by the Office of Science of the U.S. Department of Energy. The Office of Science is the single largest supporter of basic research in the physical sciences in the United States and is working to address some of the most pressing challenges of our time. For more information, please visit science.energy.gov. Nvidia says it can cut the time to set up an AI data center from... Europe is making progress with its AI for science initiative, dubbed Resource for AI Science... Nvidia made a slew of announcements at GTC Berlin today that demonstrate its commitment to... NEW YORK, NY - High-performance computing has reached a new milestone in New York State... Do you know the difference between closed-weight models, open-weight models, open-data, and open-source? More importantly,... The AI boom has created insatiable demand for high-performance computing, driving up the cost on...
MITRE ATT&CK v20 added 9 new attack techniques covering AI exploits, MFA bypass, and CAPTCHA Evasion. MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, steal application-specific passwords to bypass multi-factor authentication (MFA), and get around CAPTCHA checks. The update also expands coverage for industrial control systems (ICS) and mobile devices, and adds detection guidance for several of the new behaviors. For security teams, the changes offer a clearer way to map activity they already see across business networks, AI tools, phones, and industrial systems. MITRE's release notes list the additions, and its detailed changelog records what changed from v19.2. ATT&CK is a knowledge base that helps defenders describe and compare attacker behavior. A technique is a way an attacker may try to achieve a goal, while a detection strategy connects that behavior to data defenders can collect and review. The framework does not confirm that a specific organization has been breached. Instead, it gives teams a shared language for threat reports, security testing, and detection planning. MITRE ATT&CK v20 - nine new Enterprise techniques. Five of the new Enterprise techniques address the risks around AI systems. Direct Prompt Injection covers malicious instructions entered straight into a large language model's interface. Indirect Prompt Injection describes instructions hidden in content an AI system reads, such as a web page, email, document, or code file. If an AI agent can use tools or access business data, hostile content could try to steer its actions beyond what the user intended. The techniques help teams distinguish between a user submitting a malicious prompt and an AI system encountering one in outside content. AI-Enabled Exfiltration describes attempts to get an enterprise AI agent to send data out of an organization. AI Result Poisoning covers a different route: manipulating public web content so AI search tools or assistants may return, cite, or recommend attacker-controlled information. The fifth AI-related entry, Impair Autonomous Defenses, covers efforts to disrupt AI-assisted security analysis. For example, hostile content could try to make an automated tool ignore evidence or stop reviewing a file. These entries reflect the growing use of AI systems that read outside content and can take actions through connected tools. That creates a link between prompt security and familiar security controls: the data and actions an AI agent can reach matter as much as the model itself. Cyber Security News has covered prompt injection risks for AI agents and a reported case where a prompt could expose AWS AI agent data. Those reports describe separate incidents and research, but they illustrate why teams should limit agent permissions and monitor tool use. Three more techniques address CAPTCHA and other anti-automation checks. ATT&CK now has a parent technique, Anti-Automation Evasion, with two sub-techniques: Automate CAPTCHA Completion and Avoid CAPTCHA. The first covers tools or services that solve challenges. The second covers attempts to make automated activity look more like normal human browsing. CAPTCHA may slow down bots, but it is not a complete barrier when attackers can automate or outsource the challenge. The ninth new Enterprise technique, Steal Application-Specific Passwords, concerns passwords created for older apps or devices that cannot use standard MFA. An attacker who obtains one may access an account without completing the usual second-factor check. This is not the same as breaking MFA itself. Rather, it uses a separate credential path that may not prompt for the normal MFA step. Cyber Security News previously reported on Google app passwords being used to bypass MFA, showing why organizations should review where these passwords are allowed and who can create them. The v20 changes extend beyond Enterprise. In ICS, MITRE added a Command and Scripting Interpreter technique and sub-techniques for PowerShell, Windows Command Shell, Unix Shell, Visual Basic, Python, and JavaScript. These replace two older entries, making it possible to record the specific interpreter used. New sub-techniques also cover DNS and publish/subscribe protocols used for command and control. This matters in industrial environments, where defenders need to separate unusual activity from normal control and engineering work. MITRE also added ICS detection strategies with platform and asset context, so teams can see whether a detection applies to a Windows workstation, network device, or embedded system. The release notes say the update includes 15 new detection strategies and 38 analytics across the release. In ICS, analytics are designed to filter routine engineering and maintenance activity, helping reduce alerts that do not point to suspicious behavior. For mobile, v20 restores the technique Deliver Malicious Application via Other Means, which was last present in ATT&CK v11. The updated entry covers ways malicious apps can reach devices outside official stores, including direct downloads, text messages, messaging apps, QR codes, and third-party stores. MITRE also added NGate, malware described as relaying payment card data through a phone's tap-to-pay chip, and revised 28 existing mobile software entries. The main value of v20 is not simply the number of new entries. It connects emerging AI risks and familiar access methods to the same framework defenders use to track malware, credentials, and activity in industrial networks. Teams can review whether their monitoring covers AI prompts and agent actions, check if application-specific passwords are still needed, and test how their services respond to automated CAPTCHA attempts. The update also gives defenders a more detailed starting point for detection, but a framework entry is not a ready-made alert rule. Teams still need to check which logs and telemetry they have, tune detections to their own systems, and confirm that the activity being flagged is unusual for their environment. Used that way, MITRE ATT&CK v20 can help security teams turn new threat patterns into practical questions for monitoring, access control, and incident response. An EDR alert reveals an attack. But can it tell the full story? Discover how to reconstruct the attack timeline. The post MITRE ATT&CK v20 added 9 new attack techniques covering AI exploits, MFA bypass, and CAPTCHA Evasion appeared first on cyber Security News.
Top 10 vendor profiles: October 10, 2026. Market Intelligence Yesterday's G2X community research roundup: the top 10 vendor profiles from the GovCon Directory. The top 10 vendor profiles in yesterday's G2X community research roundup span mission technology, healthcare, research, digital identity and software development. Explore the businesses drawing attention in the GovCon Directory, with current company descriptions and first-party developments that put each profile in context. Leidos works across defense technology, digital modernization, health and critical infrastructure, combining engineering and technology delivery with mission operations. The Directory's legacy S A I C label points to Leidos Inc.; Leidos retained the original company's core when SAIC split into two businesses in 2013. It is distinct from the separate company that now uses the SAIC name. In its October 9 World AI Week update, Leidos emphasized human judgment, governance and cybersecurity as necessary parts of AI use in critical missions. The message puts deployment discipline alongside technical capability: its focus is how AI supports decisions and operations in environments where reliability matters. That is a useful complement to the company's broad defense, health and modernization portfolio. MITRE is a nonprofit applied-research and systems-engineering organization that operates federally funded research and development centers. Its work connects government mission needs with research, commercial technology and independent technical analysis across national security, health, transportation and civil systems. On October 9, MITRE announced an expanded collaboration with the University of Oklahoma covering severe-weather preparedness, healthcare, energy and national security. A separate new paper, The AI Mission Testing Gap, examines how mission-specific testing can establish where advanced AI helps, how it behaves in operational conditions and which safeguards it needs. Together, the developments illustrate MITRE's role in connecting research partnerships with the evidence agencies need before applying technology to consequential work. Loyal Source provides healthcare, workforce, technology and mission-support services for government and commercial customers. Its work includes medical response, healthcare staffing, veteran medical-disability examinations and personnel supporting operations around the world. Those activities connect the company's healthcare identity with a wider government-services delivery organization. The company announced Heath Starr's move from chief growth officer to chief revenue officer on October 8. Loyal Source described the expanded role as bringing growth, client strategy and operations into closer alignment for veteran, military and civilian-agency customers. The change places pursuit decisions and investment priorities alongside delivery responsibilities, a concrete organizational development for readers following how the company approaches its federal market. Peraton delivers mission technology and enterprise IT across defense, intelligence, space, civil and health markets. The MULTIMAX name displayed in the Directory is a legacy business name on the Peraton Inc. record. Peraton's broader lineage includes its 2017 formation from former Harris businesses and subsequent additions in mission support, enterprise technology and space capabilities. In an October 5 announcement, Peraton introduced Jennifer Swanson and Danielle Moyer as vice presidents on its Defense team, focused on technology and strategy respectively. The company tied Swanson's work to digital engineering, software and AI, and Moyer's to acquisition expertise, growth and capture. The appointments show how Peraton is organizing technical and market leadership around defense modernization without reducing its profile to a list of contract wins. Gravann is the current brand of SNO Corp, the legal entity behind this Directory profile. Its website explicitly describes the change as an evolution of the same technology team, with continuity of personnel, customer contacts and delivery practices. The company works in cloud-native modernization, AI integration and enterprise data platforms for government and commercial organizations. The current positioning gives particular weight to bringing AI into existing workflows and connecting fragmented data, alongside the practical work of replacing legacy infrastructure. Its public examples include secure mobile collaboration and a SharePoint-to-cloud migration for a financial regulatory agency. The Gravann name therefore represents a change in brand and emphasis, not a separate company whose past work should be detached from SNO Corp. Slalom is a business and technology consulting firm whose work spans cloud modernization, data, AI and the design of customer and employee experiences. Its public-sector practice addresses the organizational changes that accompany new systems, not just the technology installation itself. An October 9 article on state-government modernization argues that agencies should emerge with the knowledge and flexibility to keep changing their systems after implementation. Slalom describes a child-welfare example in which frontline staff helped shape and test workflows early, and emphasizes agency ownership of operational knowledge. For readers researching government modernization partners, the article provides a concrete view of Slalom's delivery approach: involving program leaders, practitioners and technologists throughout the work so that capability remains inside the agency. Blitzy develops an AI-driven software-engineering platform built around understanding an existing codebase before carrying out development work. The company describes its system as an execution layer across the software development life cycle, using codebase analysis and structured plans to guide implementation. On October 9, Blitzy shared a customer example involving a meal-planning feature added to an existing health and fitness application. The company's account describes automated codebase ingestion, a knowledge graph, a technical specification and an action plan before the feature build. It is a commercial application example rather than a federal deployment announcement, but it illustrates the workflow Blitzy is bringing to enterprise software teams: connecting requirements and system context to code generation and testing. Mathematica combines policy expertise, research methods, data science and technology to help organizations design and improve programs. Its work reaches across health, human services and other public-policy areas, with an emphasis on evaluating what works and translating evidence into operational decisions. Its September 28 publication on responsible AI adoption in child welfare starts with the problems agencies need to solve, rather than selecting a tool first. It distinguishes decisions that should remain human from administrative work that AI might support, and calls for workforce engagement, testing and evidence before broader adoption. That framing connects Mathematica's evaluation background to an immediate implementation question for state agencies: how to reduce administrative burden while protecting professional judgment and the people a program serves. ID.me provides a reusable digital identity wallet that lets people verify their identity and sign in across participating services. The TROOP ID label in the Directory reflects the company's earlier military-community verification service, which expanded into ID.me's broader identity network. The current business serves government, healthcare and commercial organizations. On October 5, ID.me described its partnership with Datavant to let patients reuse existing credentials when requesting medical records. Its September partnership with Plaid addresses a different handoff: matching a verified benefit applicant with ownership of the bank account receiving payment. These developments show the company extending identity verification into connected service workflows, from access to health records to government-benefit payment checks, rather than treating sign-in as an isolated step.
There are no jobs for MITRE right now.
Find jobs on Simplify and start your career today
We update MITRE's jobs every few hours, so check again soon!Browse all jobs
About MITRE
Industries
Company Size
5,001-10,000
Company Stage
Grant
Total Funding
$2.1M
Headquarters
McLean, VA
Founded
1958
There are no jobs for MITRE right now.
Find jobs on Simplify and start your career today
We update MITRE's jobs every few hours, so check again soon!Browse all jobs