Asset Manager

Updated:

Cycurion

Cycurion is a Nasdaq-listed cybersecurity firm focused on U.S. federal and commercial clients, led by CEO Kevin Kelly.

Cycurion

Cycurion was founded in 2017 by Kevin Kelly, a veteran of the government IT and cybersecurity contracting space. The firm initially built its reputation providing advanced cyber engineering, risk management, and IT modernization services to U.S. federal agencies, operating largely as a subcontractor in a competitive landscape dominated by larger defense integrators. The underlying operational history traces back further through predecessor entities and team experience, but the formal Cycurion structure reflects a deliberate attempt to build a platform capable of both organic growth and acquisition-driven consolidation. The firm's strategy centers on servicing the complex cybersecurity demands of government and commercial clients. Cycurion deploys capital through direct service contracts rather than external fund structures. Its core competencies span network security monitoring, incident response, vulnerability management, and cloud security architecture. The business model relies on winning multi-year federal task orders alongside a growing commercial practice aimed at mid-market enterprises. Consistent with its structure as an operating company, Cycurion does not make fund commitments, pursue venture-stage equity, or manage third-party limited partner capital — it deploys working capital into talent, cleared personnel, and small-scale technology acquisitions to expand service capabilities. Geographic coverage is concentrated in the United States, with operations tied to federal installations in the Washington, D.C. metropolitan area. Cycurion completed its initial public offering and began trading on the Nasdaq under the ticker CYCU in October 2024 (per SEC filings, 2024). The transaction combined the operating business with a special purpose acquisition vehicle and provided public market currency for future acquisitions. As of the go-public date, specific AUM figures are not applicable since Cycurion operates as a professional services firm rather than an asset manager. The company's scale is measured by contract backlog, revenue, and cleared professional headcount rather than committed capital. Adjacent corporate structure is limited to its direct operating subsidiaries aligned around federal and commercial practice groups, with no disclosed philanthropic foundations or club-based co-investment vehicles. The structural differentiator is Cycurion's hybrid posture: it is neither a pure government contractor relying on opaque small-business set-aside schedules, nor a conventional technology product company pursuing recurring SaaS revenue. As a small, publicly traded cybersecurity services firm with heavy federal exposure, Cycurion occupies a narrow competitive zone where public market transparency coexists with the security-cleared labor model and procurement cycles of defense contracting. This architecture creates a unique governance profile — quarterly earnings calls and SEC oversight sit alongside classified program work and government client concentration that cannot be fully disclosed to shareholders.

General information

Firm type

Asset Manager

Year founded

2017

AUM

Undisclosed

Location

Region

North America

Country

United States

City

McLean

Corporate office

McLean, VA, United States

Principals

Kevin Kelly

CEO

Sector focus

Cybersecurity

Frequently asked questions

Who runs Cycurion, and what is its operating structure?

CEO Kevin Kelly leads the firm, which operates as an integrated cybersecurity services company rather than a fund or investment vehicle. Cycurion went public via a business combination in October 2024 and trades on Nasdaq under the ticker CYCU. It does not manage outside limited partner capital.

How does Cycurion generate its revenue?

Revenue comes from multi-year service contracts with U.S. federal agencies and a growing set of commercial clients. The firm delivers cybersecurity engineering, risk management, and IT modernization services on a project and retainer basis. It does not operate a software-as-a-service product line as its primary revenue engine.

Does Cycurion take outside investment capital or manage funds?

No. Cycurion is an operating company, not an asset manager. It raised capital through a public listing to fund acquisitions and organic growth, but it does not accept commitments from institutional limited partners or operate pooled investment funds.

Is Cycurion a government contractor or a commercial cybersecurity firm?

Cycurion is both. The firm was built on a foundation of classified and unclassified federal cybersecurity work, particularly within the U.S. Department of Defense and civilian agency ecosystem. It has since expanded into commercial markets, serving mid-market enterprises that require enterprise-grade security operations.

What is Cycurion's acquisition strategy?

The firm has stated its intention to use public currency to acquire smaller cybersecurity and IT services firms that can expand its federal contract vehicles, geographic reach, or technical capabilities. The NASDAQ listing provides the equity and visibility to execute a roll-up strategy in the fragmented government cybersecurity services market.

Where does Cycurion physically conduct its work?

The firm is headquartered in McLean, Virginia, placing it near major federal clients and procurement centers in the Washington, D.C. region. Most of its workforce is U.S.-based and holds security clearances appropriate to the classified environments in which it operates.

How is Cycurion governed given its public listing?

As a Nasdaq-listed company, Cycurion is subject to SEC oversight, publishes quarterly financial reports, and maintains a board of directors. Governance follows standard public company requirements, though portions of its government contract performance remain subject to security classification restrictions that limit full public disclosure.

Profile maintained by using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.

Need institutional-grade insight on asset managers?

Altss delivers:

Principals with verified direct contactsAllocation history by asset classOSINT-derived deal signals
Book a demo

Prefer a guided tour?

We’ll walk you through:

Interactive funding timelinesCustom mandate & allocation filters
Book a demo

More McLean Asset Manager profiles