Common Cyber

About Common Cyber

Common Cyber helps defense contractors and federal programs design and build secure environments, prove they meet the requirements, and sustain them for national security work.

Our mission

To protect and strengthen the defense industrial base and federal mission through expert cybersecurity, compliance, and technology solutions that reduce risk and accelerate mission success.

Market focus

Aviation & Aerospace

Repair stations, MRO operations, and aerospace suppliers doing defense work.

Defense Contractors

CMMC and NIST SP 800-171 readiness for the defense industrial base.

Federal & Primes

RMF, ATO support, Cross Domain Solutions, and security engineering.

Service-Disabled Veteran-Owned Small Business

Common Cyber is an SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB).

Who You Will Be Working With

Brett and Anthony were at Everfox, formerly Forcepoint, delivering cross domain solutions into restricted government environments. Chadd spent thirteen years at two of the largest defense primes, responsible for getting those systems documented, assessed, and authorized.

We have worked these systems from both sides, with the same objective either way: getting the system authorized and into operation.

Brett Buske

Co-Founder and Chief Executive Officer

Brett began his career in the U.S. Marine Corps in 2005 as a CH-53E crew chief, serving until 2010 and attaining the rank of sergeant. He holds a Bachelor of Science in Aviation Maintenance Science from Embry-Riddle Aeronautical University and a Master of Business Administration from Clemson University.

He returned to the defense sector in 2022, joining Everfox, formerly Forcepoint, as an account manager. Working in cross domain security shifted his focus to cybersecurity — the same reason he enlisted at seventeen.

Brett's aviation maintenance background shapes how Common Cyber approaches repair station and MRO environments, where a compliance boundary has to account for shop floors, technical data, and mixed workforces rather than office IT.

Outside the company he supports student veterans through financial assistance and mentorship.

Chadd Owen

Co-Founder and Chief Technology Officer

Chadd has spent his career in information assurance and cybersecurity inside two of the largest defense primes. He joined Lockheed Martin in 2012 as an Information Assurance Officer, working as an investigator and information assurance risk analyst. In 2015 he moved to Northrop Grumman, where he spent ten years, progressing from Cyber Information Assurance Analyst through Senior Principal Cyber Information Assurance Analyst, Cybersecurity Manager, and Staff Cybersecurity Engineer.

Across that decade he worked in Special Access Program and Intelligence Community environments, including the B-2, B-21, and Sentinel programs. His technical work spans hyperconverged infrastructure, private cloud environments, enterprise cybersecurity tooling, and cross domain solutions, with practical depth in vulnerability scanning, SIEM integration, auditing, patch management, and secure system design.

Chadd holds a Master's degree in Cybersecurity and the CISSP and CCSP certifications.

Anthony Van Eman

Partner and Head of Professional Services

Anthony enlisted in the United States Navy in 1995, specializing in signals intelligence and ISR, and reached the rank of Petty Officer First Class before his honorable discharge in 2009. He has spent every year since supporting defense and intelligence programs.

He worked as a defense contractor supporting the Air Force, contributing to secure data link initiatives for ISR platforms. In 2017 he joined Everfox, formerly Forcepoint, as a Senior Cyber Engineer, leading cross domain solution deployments for Intelligence Community clients. Promoted in 2019 to Cyber Engineering Manager, he directed engineering teams implementing cross domain solutions for Intelligence Community and Department of War customers.

Anthony holds a Master of Science in Cybersecurity and the ISSEP, ISSMP, CCSP, CGRC, and PMP certifications.

Operating principles

Define the boundary early.

Build evidence as controls are implemented.

Make only claims that can survive a question.

Frequently asked questions

Who does Common Cyber work with?

Defense contractors, federal agencies, prime contractors, integrators, and aviation or aerospace organizations supporting national security work.

Are you a C3PAO?

No. Common Cyber is not a C3PAO and does not certify organizations. Certification decisions belong to an authorized C3PAO, and we prepare organizations for that assessment. Where a contract calls for Level 1 or Level 2 self-assessment instead, no third-party assessor is involved and we support that work as well.

Do you provide managed IT services?

No. Common Cyber provides cybersecurity and compliance operations for defense and federal environments, not general managed IT services.

What is your experience with Cross Domain Solutions?

Anthony led cross domain solution deployments and engineering teams at Everfox, while Chadd worked on the information assurance and accreditation side of Special Access Program and Intelligence Community environments at prior employers.

Are you a small business?

Yes. Common Cyber is an SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB).

A clear next step

Define the boundary before you build.

The fixed-fee assessment clarifies what is in scope and turns the findings into a practical statement of work.

Start an Assessment