Adaptive Toolset for Testing and Evaluation of Secure Technologies (ATTEST)

Authority to Operate (ATO) process ensures the secure operation of hardware and software systems within DoD applications but remains labor-intensive, often delaying innovation. While automation could streamline ATO workflows, preserving accountability and subject-matter expertise is essential. To address this, ATTEST (Adaptive Toolset for Testing and Evaluation of Secure Technologies) leverages agentic AI to enhance ATO package development under the Risk Management Framework (RMF). ATTEST integrates Large Language Model (LLM) agents, digital twins, and formal ontologies to capture expertise, detect cybersecurity vulnerabilities, and guide system owners through validation. These agents provide intelligent feedback, reducing errors before government review, expediting the process, and decreasing the burden on Authorizing Officials (AOs). ATTEST improves compliance management, mitigates security risks, and optimizes government resources through continuous feedback and automation, ultimately enhancing cybersecurity efficiency for DoD systems while saving the government money.