DAYTON, OH — WRIGHT-PATT CORRIDOR

Veteran-owned software consulting for AFLCMC, AFRL, and the Wright-Patt mission

SDVOSB-certified delivery for Air Force lifecycle, sustainment, and research programs. Cleared engineers, real modernization, no contractor theater.

Veteran-Owned SDVOSB
001 / 005 Field Conditions

Wright-Patt programs don't fail from lack of contractors. They fail from the wrong ones.

Situation

Walk into any AFLCMC program office and you'll find the same pattern: an Oracle Forms app from 2008 that nobody will touch, a SharePoint site with seventeen versions of the same workflow, an Access database that runs payroll for a depot, and a contractor team billing for a tool nobody uses. Modernization RFPs go out, large primes win, and three years later the legacy system is still there — now with a React shell on top. Meanwhile AFRL researchers are still emailing CSV files to each other because the data platform is six months from MVP and has been for two years.

  • Oracle Forms, Access, and SharePoint 2013 systems that nobody has authority to retire
  • Modernization programs that ship a UI refresh and call it transformation
  • AFRL research data trapped in shared drives, personal laptops, and one-off Python notebooks
  • Cleared staffing pipelines that deliver junior engineers billed at senior rates
SDVOSB
SBA-certified, sole-source eligible
IL2–IL5
Delivery on Platform One and Cloud One
12–16 wks
Typical legacy tool replacement window
002 / 005 Operational Approach

How we deliver software around Wright-Patt without the usual contractor drag

  1. STEP-01

    Mission and authority discovery

    We sit with program leads at AFLCMC, AFRL, or the sustainment wing and map the actual decision chain — PEO, contracting officer, ISSM, AO. We document data classification, IL level, and the ATO path before writing a line of code.

  2. STEP-02

    Cut the legacy surface area

    Most acquisition and sustainment tools are Oracle Forms, Access, SharePoint 2013, or a pile of Excel macros. We inventory what's actually used, deprecate the rest, and replace the core workflow with a small, testable service layer.

  3. STEP-03

    Ship on Platform One or equivalent

    We deploy into Iron Bank-hardened containers on Platform One, Cloud One, or an existing IL5 enclave. Pipelines are GitLab CI with SBOM, SAST, and DAST gates wired in. No bespoke deployment theater.

  4. STEP-04

    AI where it earns its keep

    RAG over tech orders, ECPs, or research corpora using Claude or GPT behind a government tenant. We scope to bounded, auditable tasks — summarization, retrieval, draft generation — never autonomous decisions on acquisition or airworthiness.

  5. STEP-05

    Transition to the blue-suit team

    Code, runbooks, threat models, and ATO artifacts go to the government team or 88 CG. We train the operators, document the failure modes, and leave. No permanent dependency, no rate-card lock-in.

YAML PATTERN
# Example: AFLCMC sustainment tool deploy pipeline
# GitLab CI targeting Platform One / Big Bang

stages:
  - test
  - scan
  - sbom
  - publish
  - deploy

variables:
  IMPACT_LEVEL: "IL5"
  REGISTRY: "registry1.dso.mil/voostack/sustainment-api"

unit-tests:
  stage: test
  script:
    - go test ./... -race -cover

sast:
  stage: scan
  image: registry1.dso.mil/ironbank/opensource/fortify/sast
  script:
    - fortify-scan --fail-on high

sbom:
  stage: sbom
  script:
    - syft packages dir:. -o cyclonedx-json > sbom.json
    - grype sbom:sbom.json --fail-on high

publish:
  stage: publish
  script:
    - cosign sign --key $COSIGN_KEY $REGISTRY:$CI_COMMIT_SHA

deploy-il5:
  stage: deploy
  environment: p1-il5
  script:
    - kustomize build overlays/il5 | kubectl apply -f -

Reference pipeline we've used for sustainment-side services targeting Platform One IL5. SBOM, signed images, and scan gates are non-negotiable.

003 / 005 Common Questions

Field FAQ.

Are you SDVOSB-certified and can you prime on Air Force contracts out of Wright-Patterson?

Yes. VooStack is SBA-certified SDVOSB, which makes us eligible for sole-source awards up to the SDVOSB threshold and set-aside competition under FAR 19.14. We can prime on most AFLCMC and AFRL vehicles within that scope, and we routinely subcontract or team with larger primes on bigger programs. We carry a SAM registration, CAGE code, and DUNS/UEI, and we can stand up a teaming agreement quickly when a program office needs an SDVOSB partner to meet socioeconomic goals.

Do your engineers hold clearances?

Our delivery engineers hold Secret as a baseline, with TS/SCI available on a portion of the team. We can support work at the 711th Human Performance Wing, AFRL directorates, and AFLCMC program offices that require cleared personnel on-site at Wright-Patt or at the National Air and Space Intelligence Center. For unclassified mission and business systems, we staff with cleared engineers anyway — it shortens the ramp on facility access and CAC issuance.

What does Air Force lifecycle and sustainment software actually mean in practice?

It's the unglamorous backbone — tools that track ECPs, manage tech orders, schedule depot inductions, forecast spares, and reconcile financials against contract line items. Most of it lives in aging stacks: Oracle Forms, mainframe green-screens fronted by Java, SharePoint workflows, and Access databases that someone's GS-13 wrote in 2009. Modernization means replacing the workflow without breaking the audit trail or the existing PEO reporting chain, which is harder than a greenfield build.

How do you handle AI integration on Air Force data without creating a compliance mess?

We deploy LLMs inside a government tenant — Azure Government with GPT, AWS GovCloud with Bedrock and Claude, or an on-prem inference stack for IL5 and above. Data never leaves the boundary. We scope AI to retrieval-augmented generation against approved corpora like tech orders, lessons-learned databases, or RFP libraries, and we log every prompt and completion for audit. We don't put generative models in the airworthiness or acquisition decision loop.

Can you support AFRL research data tooling?

Yes. AFRL directorates generate enormous amounts of sensor, simulation, and experiment data, and the tooling around it is frequently a researcher's Python script glued to a shared drive. We build durable data pipelines — typically Python or Go services, Postgres or Parquet on object storage, and notebook environments that don't lose state when someone reboots. Reproducibility and metadata capture matter more than dashboard polish for research workflows.

How fast can you start on a new program?

On an existing vehicle where we're already an awardee or subcontractor, kickoff in two to three weeks once the task order drops. On a new prime award, figure four to six weeks for CAC, facility access, and any tenant provisioning on Cloud One or Platform One. We don't pad mobilization with billable ramp time — the first two weeks are typically discovery and ATO artifact review, not staffing theater.

Are you local to Dayton, or are you flying people in?

We have engineers in the Dayton metro and across the Midwest who can be on-site at Wright-Patt regularly. For programs that need daily on-base presence, we staff local. For programs that are mostly NIPR/SIPR remote with periodic on-site reviews, we mix local and remote based on what the program office actually needs. We're not running a billable travel scheme — on-site time is driven by mission, not margin.

What size programs do you take on?

Typical engagements run from a six-figure modernization sprint — replacing one ugly legacy tool over three to four months — up to multi-year sustainment software efforts in the low millions. We're deliberately not a body shop. If a program needs 80 generalist contractors, we're the wrong call. If it needs a tight team of senior engineers who can ship cleared software and hand it back to the government, that's our lane.

Do you do staff augmentation for existing primes at Wright-Patt?

Yes. We sub to larger primes on AFLCMC and AFRL programs where they need senior cleared engineers, an SDVOSB teammate to meet small-business goals, or specific skills like cloud migration, Kubernetes, or LLM integration. We bring named engineers with real resumes, not a bench of recruiter-sourced placeholders. Rate cards are transparent and we don't markup junior staff as senior.

Next step

Have a Wright-Patt program that's been stuck in legacy for a decade? Let's talk.

Talk to a VooStack operator. We respond within one business day.