Leadership
Meet the founder
CMMC compliance and production-grade AI, from the same senior operator.
Sajed Khan
Founder & Chief Executive Officer, CattlemanOne
Sajed builds two things for clients: defense programs that hold up under audit, and AI systems that are safe enough to put into production. Most firms do one or the other. The overlap is where the hard problems now live.
On the compliance side, his focus is CMMC Level 2 and NIST SP 800-171 readiness for organizations in the defense industrial base and their suppliers. That means scoping the CUI boundary honestly, closing control gaps in a defensible order, building the SSP and POA&M an assessor will accept, and standing up the enclave architecture that keeps scope small enough to certify. He has led this work where a real contract pipeline depended on the outcome, alongside SOC 2, HIPAA, PCI-DSS and ISO 27001 programs.
On the AI side, he works on agentic AI, systems that plan, call tools, and act rather than simply answer. He designs and secures multi-agent architectures, retrieval-augmented generation pipelines, and Model Context Protocol integrations, with the controls that make them deployable: least-privilege tool access, human-in-the-loop checkpoints on consequential actions, prompt-injection and jailbreak defense, output validation, and full audit trails of what an agent did and why. Governance is mapped to the NIST AI Risk Management Framework and ISO/IEC 42001 so an AI program can survive scrutiny from a board, a regulator, or a customer's security review.
This is not theoretical. He is a co-inventor on two U.S. AI patents in 3D medical image analysis, building privacy-preserving diagnostic systems where the model and the protected data had to coexist safely. The first was issued as U.S. Patent No. 12,665,073; the second is in examination. He is also the author of Sarah and the Malware Fairy and CyberSecurity Metaverse.