Business Model & Revenue
Cycurion is a McLean, Virginia-based provider of cybersecurity, IT modernization, and AI-driven solutions serving primarily government (SLED sector), healthcare, and corporate clients. The company operates through subsidiaries Axxum Technologies, Cloudburst Security, Cycurion Innovation, and the recently acquired Secuvant (June 2026). Its proprietary ARx cybersecurity platform delivers continuous monitoring, threat detection, and incident response, while the Secuvant acquisition added the Panoptic threat visibility platform and Cyber7 risk framework.
Revenue comes from multi-year government IT and cybersecurity contracts, program management engagements, and business continuity services. The business model is services-based with a strategic shift toward higher-margin, recurring-revenue government work — moving away from lower-margin legacy contracts. Management cites a $28M revenue run-rate including acquisitions, against FY2025 revenue of $15.1M. The recent $54.6M state Health and Human Services contract and a second 10-year, $58M engagement represent a structural shift in the company's contract backlog and revenue visibility, transforming Cycurion from a small-scale IT services roll-up into a positioned government cybersecurity platform — if it can finance the transition.
Financial Highlights
Full-Year Results
| Metric | FY2025 | FY2024 | YoY |
|---|---|---|---|
| Revenue | $15.1M | $13.8M | +9.4% |
| Gross Margin | 19.2% | 16.8% | +240bps |
| Net Loss | $(8.4)M | $(22.1)M | -62.0% |
Q1 2026 Results
| Metric | Q1 2026 | Q1 2025 | YoY |
|---|---|---|---|
| Revenue | $3.27M | $3.87M | -15.5% |
| Gross Margin | 21.1% | 17.5% | +360bps |
| Net Loss | $(2.13)M | $(10.25)M | -79.2% |
| Operating Cash Use | $(2.89)M | $(2.75)M | +5.3% |
Balance Sheet (as of March 31, 2026)
| Item | Amount |
|---|---|
| Cash | ≈$2.0M |
| Working Capital Deficit | $(12.0)M |
| Shares Outstanding (post-warrant) | ≈13.0M |
| Going Concern | Yes — disclosed |
Recent Financing Activity
On July 31, 2026, Cycurion closed a warrant inducement transaction: 3,341,439 shares exercised at $1.35 per share for $4.5M in gross proceeds. This extends runway by approximately one quarter at the current burn rate.
Contract Pipeline
| Contract | Value | Term | Status |
|---|---|---|---|
| State HHS Modernization | $54.6M | 10 years | Awarded; starts Nov 2026 |
| Second Gov't Engagement | $58.0M | 10 years | In pipeline |
| Additional Backlog | $8.0M | Various | Under execution |
| Total Visibility | ≈$120.6M |
Guidance: Management targets approximately $28M revenue run-rate including acquisitions, with organizational realignment expected to deliver $2.2M in annual cost savings.
Competitive Landscape
Cycurion operates in the government IT and cybersecurity services niche, competing for SLED-sector contracts that require specialized clearances, compliance certifications, and demonstrated mission-critical execution.
-
Leidos Holdings (LDOS): The dominant government IT services contractor with $15B+ in annual revenue. Competes at a different scale but controls many prime contracts that Cycurion subs on or partners through.
-
Science Applications International Corp (SAIC): Major federal and SLED IT services provider with $7B+ revenue. Competes for similar contract vehicles but at larger scale.
-
ManTech (acquired by Carlyle, 2022): Private government cybersecurity and IT services firm. Represents the takeout path for successful smaller players.
-
Cellebrite (CLBT): Digital intelligence and cybersecurity for government. Different product focus but competes for overlapping government budgets.
-
SecureWorks (acquired by Sophos, 2025): Managed detection and response. Overlaps with Cycurion's Secuvant/ARx platforms in the MDR space.
Competitive moats for Cycurion include: (1) the ARx and Panoptic proprietary platforms differentiated from generic MDR offerings, (2) existing relationships with state government agencies and top-tier consulting partners, (3) a contract backlog of approximately $120M that creates revenue visibility rare at this market cap, and (4) the Secuvant Cyber7 framework providing a structured methodology attractive to government procurement officers.
Catalysts
-
Nasdaq appeal hearing (August 2026): The outcome determines whether CYCU maintains its listing. A favorable ruling removes an overhang; an adverse ruling forces a move to OTC markets and likely triggers a selloff.
-
Q2 2026 earnings (estimated August 13): Investors will scrutinize cash burn, progress on the Halo/havenX closings, and any updates on the $58M second contract. Revenue guidance for the November contract commencement period is critical.
-
Contract commencement (November 2026): When the $54.6M engagement begins generating revenue. First billings will validate the $5M+ annual revenue projection and provide the first real cash flow data from the deal.
-
Halo/havenX merger resolution: If these acquisitions close despite the missed deadline, they add capabilities and revenue. If they fail, it signals execution issues and reduces the pro-forma revenue base.
-
Additional financing terms: Any subsequent capital raise — equity, debt, or strategic — will determine the dilution path. Favorable terms signal confidence; a heavily discounted raise signals distress.
Key Risks
- Going concern and liquidity crisis: $2.0M in cash against $2.89M quarterly operating cash burn and a $12M working capital deficit. The $4.5M warrant raise buys roughly one quarter of runway. Without additional financing before November, Cycurion risks insolvency before contract revenue commences.
- Nasdaq delisting: The August appeal hearing on minimum bid price deficiency could result in delisting regardless of the recent price surge. A delisting would trigger forced selling and severely reduce liquidity.
- Halo Privacy and havenX acquisitions at risk: A July 29 8-K disclosed that closing conditions for these mergers were unmet as of the July 31 deadline. If these deals collapse, the $28M revenue run-rate management cited includes contributions that may not materialize.
- Dilution from future equity raises: Even with the $4.5M warrant exercise, Cycurion will likely need additional capital before November. Any raise at or below current prices would be highly dilutive to the 13M share base.
- Contract execution risk: The $54.6M contract does not commence until November 2026 and billing timelines are undisclosed. Government contract modifications, scope changes, or funding delays could shift the revenue ramp materially.
Our Thesis
The investment case is a race between contract execution and insolvency. Cycurion's $54.6M state health contract is the largest in company history and represents 3.6x trailing twelve-month revenue of $14.5M. Management cites a second 10-year, $58M engagement and $8M in additional backlog, bringing total contract visibility to roughly $120M — extraordinary for a $10M market-cap company. The strategic pivot toward higher-margin SLED (state, local, education) government work is validated by gross margin expansion from 17.5% to 21.1% in Q1 2026. The Secuvant acquisition (June 2026) added the Panoptic threat platform, deepening the technology stack for these engagements.
Our $2.50 target applies a 1.5x price-to-sales multiple to estimated post-commencement revenue of approximately $20M (existing business plus two months of contract revenue in 2026), then discounts for probable dilution from the current 13M share count post-warrant exercise. Government cybersecurity contracts carry exceptional stickiness, and a 1.5x P/S is conservative for a company with $120M in backlog visibility. The risk is binary: if Cycurion cannot bridge its $12M working capital gap until November contract revenue begins, additional dilutive financing could compress per-share value well below this target.
Get reports like this delivered free
New small-cap research every week. No paywall, no fluff.