Capability Statement

SBA-Certified Service-Disabled Veteran-Owned Small Business · Public Web Code Repair & Acceptance Evidence

Company Snapshot

Heinrichs Software Solutions Company

Service-disabled veteran-owned engineering firm and Florida corporation focused on public-web accessibility repair, frontend regression work, and acceptance evidence. Delivery is led by the founder and supported by an internal engineering harness for research, build, test, and review. HSSC works from buyer-supplied findings in one bounded repository or component family and returns reviewable code, targeted tests, a disposition table, and handoff evidence. Broader software, integration, AI, cloud, and payment-system experience remains available when the actual requirement calls for it.

SDVOSB Certified Veteran-Owned Small Business SAM.gov Active CAGE 1ZSB5
Legal Name
Heinrichs Software Solutions Company
Owner
Derek Heinrichs, President & CEO
Entity
Florida corporation
UEI
SXG3SA9JMM47
SDVOSB
SBA certified, June 4 2026 through June 3 2029
CAGE Code
1ZSB5
SAM.gov
Active
Primary NAICS
541511 Custom Computer Programming Services
Website
heinrichstech.com
Contact
contact@heinrichstech.com
Core Competencies

What We Build

Engineering capabilities backed by specifically labeled evidence. We distinguish public source, public documentation, live demonstrations, founder-developed systems, and private implementation material.

Public Digital FixOps

  • Code remediation for buyer-supplied Section 508 and WCAG findings
  • HTML, CSS, JavaScript, TypeScript, and React component repair
  • Targeted regression checks plus documented keyboard, focus, zoom, and reflow validation
  • Reviewable pull request or portable patch with finding-by-finding disposition
  • Before-and-after evidence, handoff notes, and one same-scope retest

Payments and Settlement Engineering

  • Production x402 gateway settling agent payments on four live rails
  • Base, XRPL, Stellar, and XRPL EVM served from a single HTTP 402 response
  • EIP-3009 authorization settlement plus native and issued-asset transfers
  • Replay protection, nonce tracking, and idempotent settlement in DynamoDB
  • Pure ESM JavaScript on AWS Lambda and CDK, with dated test evidence available during qualified technical review

Custom Software Development

  • Full-stack web applications using Node.js, TypeScript, React, Python
  • REST and GraphQL API design and multi-tenant backends
  • Serverless architectures on AWS Lambda with API Gateway
  • Relational and NoSQL data layers across PostgreSQL, DynamoDB, MongoDB
  • Legacy system integration and modernization

Cloud and AWS Serverless Architecture

  • Lambda, API Gateway, DynamoDB, Cognito, KMS, SES, and CloudFront
  • AWS CDK starter with a defense-industry variant at hss-aws-infra
  • Static site hosting on S3 with CloudFront and Route 53 DNS
  • Stripe, Cognito, and OAuth integrations as repeatable patterns
  • Cost-optimized scale-to-zero designs for variable federal workloads

Containerized Delivery and CI

  • Docker-based isolated development environments pinned per target
  • Reusable GitHub Actions at hss-ci-actions for build, test, and deploy
  • Automated security scanning and dependency review on every build
  • Reproducible pipelines that keep a small team auditable and consistent
  • Documented handoff including architecture diagrams and runbooks

Blockchain and Agent-Payment Engineering

  • BitBooth multi-chain gateway live on Base mainnet settling real USDC
  • x402 protocol integration for agent-payable APIs and metered services
  • HSS Solidity work spanning AMM, settlement, access control, and bridging
  • XRPL classic ledger and XRPL EVM sidechain via Foundry and viem
  • Cross-chain deploys via the Axelar Interchain Token Service
Differentiators

Why HSS

Specific reasons a contracting officer or prime would route software, AI, cloud, or payments work to a certified small business like us instead of a generalist IT shop.

Certified SDVOSB Partner

We are an SBA-certified Service-Disabled Veteran-Owned Small Business and a Florida corporation. Qualifying requirements may use SDVOSB set-aside or sole-source procedures when the contracting officer determines the applicable conditions are met.

Production Engineering Depth

We ship and operate systems across applied AI, payments, cloud, and multiple chains. Public artifacts are identified precisely, and private implementation material is available for qualified technical review by arrangement.

AI-Augmented Delivery

We build on reusable systems we already own and operate, including our multi-agent engineering harness, the autonomous defensive research fleet, and HSS Credit Rating, which lets a certified small business scope and deliver focused builds in weeks rather than months without trading away rigor.

Evidence, Not Slideware

Selected capabilities on this page map to public code, documentation, or runnable demonstrations. BitBooth's public repository contains documentation, an OpenAPI specification, and examples; implementation review is available by arrangement.

Flat-Fee Scoping

Engagements are scoped to a written fee against a defined deliverable and timeline, which keeps the work predictable and removes the hourly creep, billable discovery meetings, and surprise invoices that erode trust on a small contract.

Navy Mission Standard

Founder Derek Heinrichs served eight years in the United States Navy as an Interior Communications Electrician and Diver and is a service-connected disabled veteran who carries that same standard of accountability and discipline into every engagement.

Relevant Engineering Experience

Founder-Built and Company-Operated Portfolio

None of the projects below is federal past performance. They are founder-developed, company-operated, internal, or public reference systems, and each entry identifies the available evidence. HSSC is actively seeking its first bounded federal or prime-contractor workstream.

Autonomous Defensive Research Fleet

Multi-Agent AI Engineering

A containerized fleet of nineteen specialized agent roles running under a single orchestrator, each isolated in its own container with its own scope and credentials. It is the orchestration, isolation, and failure-handling pattern a mission program needs from agentic systems, built and operated in house.

Role
Sole Engineering Team
Design
Container-isolated, single orchestrator
Status
Live internal system

HSS Security Lab

Defensive Security Engineering

An internal lab of twelve smart-contract vulnerability archetypes, each carried from a working exploit to a verified patch, paired with hss-sniffer, our custom Solidity static analyzer run across more than 776 production scans. Together they harden delivery before anything ships and stand as proof you can vet before award.

Role
Sole Engineering Team
Scope
12 archetypes, 776-plus scans
Status
Live internal lab

Independent Security Research

Coordinated Disclosure Practice

An ongoing research practice submitting findings to coordinated-disclosure programs across blockchain protocols, financial infrastructure, and federal vulnerability disclosure programs. The work spans consensus logic, cryptographic key handling, access control, and denial-of-service classes. Individual findings, and the programs they belong to, are not discussed. That discipline is the point: an engineer who handles other people's vulnerabilities correctly is the one you want holding yours.

Role
Sole Researcher
Domains
Protocol, fintech, federal VDP
Disclosure
Coordinated, findings not published

HSS Credit Rating

On-Chain Analytics System

An on-chain credit rating system that evaluates protocol risk and currently rates five protocols. It demonstrates data ingestion, scoring methodology, and the kind of repeatable analytical pipeline that transfers cleanly to federal risk and assurance work.

Role
Sole Engineering Team
Coverage
Five protocols rated
Status
Live internal system

BitBooth Gateway

Multi-Chain Payment Infrastructure

A multi-chain payment gateway for AI agents paying per API call, live in production on Base mainnet settling real USDC through the Coinbase CDP Facilitator with additional chains supported as settlement rails. Public API documentation, an OpenAPI specification, runnable examples, and @bitbooth/mcp-fetch are available; implementation review can be arranged for qualified evaluations.

Role
Sole Engineering Team
Status
Live on Base mainnet; public docs and examples
Repo
github.com/Drock91/bitbooth-docs

Arcanie Interchain Token Factory

Cross-Chain ERC-20 Deployer

Cross-chain ERC-20 token deployment tool built on Axelar Interchain Token Service, with XRPL EVM sidechain as the canonical home chain. Issues a single token that exists across connected networks without wrapped-asset inventory management. Demonstrates cross-chain bridge integration and deterministic contract deployment.

Role
Sole Engineering Team
Status
Live internal tool
Chains
XRPL EVM, Ethereum, Base via Axelar ITS

XRPL EVM AMM Reference

On-Chain AMM Implementation

Public reference implementation of an automated market maker on the XRPL EVM sidechain. Demonstrates Solidity smart contract design, AMM math (constant product), liquidity pool mechanics, and deployment on the XRPL EVM environment. Used internally as a baseline for engagements and as a public vetting artifact for evaluators assessing technical depth.

Role
Sole Engineering Team
Status
Live reference
Repo
github.com/Drock91/XRPL_EVM_AMM
Service Packages

Flat-Fee Offerings

A small federal buyer or prime can start with one approved backlog item. Scope, exclusions, and acceptance evidence are defined before access is requested. See the federal repair page.

Accessibility Patch Proof

$1,500

Target five business days. Up to three supplied findings in one shared component.

Public Web Repair Sprint

$6,000

Target ten business days. Up to ten supplied findings in one component family.

Prime Workstream

Scoped

White-label code repair under a named delivery lead, using the same acceptance package.

Public Data Evidence Increment

Future

Schema validation, reconciliation, accessible dashboards, and audit evidence after a funded scope is defined.

Codes & Size Standards

NAICS and PSC Codes

The primary NAICS below is confirmed across HSSC's published registration data. Reconcile additional NAICS against the current SAM Assertions record before representing them as registered. PSC fit depends on the predominant item or service purchased.

NAICS Codes

Small Business
541511Custom Computer Programming Services (Primary; published as registered)
541512Computer Systems Design Services (relevant; confirm current SAM record)
513210Software Publishers (relevant to subscriptions; confirm current SAM record)
518210Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (conditional; confirm current SAM record)

Relevant Product Service Codes

Selected by Requirement
DA01IT and Telecom - Business Application/Application Development Support Services (Labor)
DJ01IT and Telecom - Security and Compliance Support Services (Labor)
DA10IT and Telecom - Business Application/Application Development Software as a Service
Company Data

Contact and Registrations

Entity

Legal Name
Heinrichs Software Solutions Company
Entity Type
Florida corporation
Founded
2026
Owner
Derek Heinrichs (service-connected disabled Navy veteran)
Location
Florida, United States

Federal IDs

UEI
SXG3SA9JMM47
CAGE Code
1ZSB5
SAM.gov
Active
SBA VetCert
SDVOSB certified, June 4 2026 through June 3 2029
Primary NAICS
541511

Need the printable version? Download the current one-page capability statement directly. This web page remains the canonical detailed version.

Download Current PDF Contracting Inquiry