Skip to content

SCIT Labs

George Mason University spin-out commercializing patented Self-Cleansing Intrusion Tolerance (SCIT) moving-target-defense technology for servers.

Visit Website ↗ + Add to Compare
43/100Emerging / Unranked

Overview

SCIT Labs commercializes Self-Cleansing Intrusion Tolerance (SCIT), a moving-target-defense technique that continuously rotates and refreshes virtual server instances back to a pristine state — as often as once a minute — so that even an intrusion an attacker manages to achieve is automatically wiped out before it can be leveraged for lasting access. Rather than trying to detect and block every attack, SCIT assumes some intrusions will succeed and is designed to limit the damage window and preserve forensic evidence of what happened during each short-lived instance.

Founded in 2007 as a spin-out of George Mason University, SCIT Labs is based in the Fairfax, Virginia area and has been developed in part through Department of Defense and Department of Homeland Security research funding, including SBIR contracts such as a $389,000 Navy award. The underlying technology has been the subject of peer-reviewed academic publications and has won innovation recognition including the UK’s Cyber Security Challenge and the Global Security Challenge.

SCIT Labs remains a very small company — reported at around seven employees and roughly $750,000 in annual revenue as of 2025 — reflecting a research-and-government-contract-driven business rather than a broadly commercialized enterprise product. The moving-target-defense concept is technically distinctive and academically well-documented, but the company’s scale suggests limited current market reach outside of niche government and specialized enterprise deployments.

Innovation Matrix Assessment

Innovation Velocity 3/10

A small, research-driven company sustained mainly by periodic government contracts (e.g., a $389K Navy SBIR award); this funding model produces a slower, grant-cycle-paced development rhythm rather than continuous commercial product releases.

Operational Value 6/10

SCIT delivers a genuinely deployable moving-target-defense capability — automated rotation and cleansing of virtual server instances at configurable intervals — that is technically implementable rather than purely conceptual.

Market Momentum 3/10

At roughly seven employees and about $750K in annual revenue as of 2025, the company shows a stable but very small operating footprint with no evidence of recent scaling.

Category Disruption 6/10

Moving target defense is a fundamentally different philosophy from conventional detect-and-block security — assuming intrusions will happen and engineering the environment to auto-remediate them — representing genuine conceptual disruption even if commercial scale has been limited.

Real-World Efficacy 4/10

The SCIT approach is grounded in peer-reviewed academic research and has won recognition in government-sponsored innovation challenges (UK Cyber Security Challenge, Global Security Challenge), but no independent enterprise-scale efficacy data or named commercial deployments were found.

Enduring Relevance 4/10

Moving target defense addresses a real gap in traditional perimeter security, but the company's very small scale and primarily government-contract customer base limit its relevance to the broader enterprise market this site otherwise covers.

Why CISOs Should Care

Offers a fundamentally different containment strategy — automatically rotating and cleansing server instances — that limits attacker dwell time even when an intrusion is not caught in real time.

What Makes It Different

Built on patented Self-Cleansing Intrusion Tolerance technology developed through DoD/DHS-funded research, focused on automated containment and forensic preservation rather than detection and prevention.

The Matrix Verdict

43/100 — EMERGING / UNRANKED

A conceptually distinctive, academically credible moving-target-defense technology that has remained a small, government-contract-driven business rather than scaling into broad commercial enterprise adoption.

Editorial Note: Claims vs. Verified Findings

The company's SBIR/government contract history and academic publication record are independently verifiable (SBIR.gov, IEEE, peer-reviewed conference papers). Employee count (~7) and revenue (~$750K) come from third-party business data aggregators rather than company disclosure; no independent customer case studies were found.

Sources