Castellum, Inc.

Disclosure controls and procedures are controls and other procedures that are designed to ensure that information required to be disclosed in our reports filed or submitted under the Securities Exchange Act of 1934 (the "Exchange Act") is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed in Company reports filed or submitted under the Exchange Act is accumulated and communicated to management, including our Chief Executive Officer ("CEO") and Chief Financial Officer ("CFO"), to allow timely decisions regarding required disclosure.

As required by Rules 13a-15 and 15d-15 under the Exchange Act, our CEO and CFO carried out an evaluation of the effectiveness of the design and operation of our disclosure controls and procedures as of September 30, 2026. Based upon their evaluation, our CEO and CFO concluded that our disclosure controls and procedures (as defined in Rules 13a- 15 (e) and 15d-15 (e) under the Exchange Act) were effective as of September 30, 2026.

Changes in Internal Control over Financial Reporting

There have been no changes in the Company’s internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the nine months ended September 30, 2026 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.