What Plurilock does

Plurilock Security Inc. is a publicly traded (TSXV:PLUR; OTCQB:PLCKF) Canadian cybersecurity company headquartered in Vancouver, British Columbia, serving Five-Eyes and NATO-aligned government agencies and Global 2000 enterprises. The company operates a services-led, product-enabled model built around an AI-native cyber resilience platform with two proprietary software products — PLURILOCK ADAPT (behavioral biometrics-based continuous authentication enabling passwordless login) and PLURILOCK DEFEND (data protection and defense) — supplemented by an extensive tear-sheet module catalog spanning adversary simulation (penetration testing, red/purple teaming, OT/SCADA testing), data protection (DLP, IAM, PKI, zero trust), cloud security (CASB, cloud governance, multi-cloud hardening), and GRC (CPCSC, CMMC, CISO Baseline 360, AI risk assessment).

The company distributes through two wholly-owned subsidiaries — Aurora (U.S. commercial and federal sales, leveraging the NASA SEWP contract vehicle) and Integra Networks (Canadian commercial and federal sales, operating since 1985 and serving 50+ organizations including Shared Services Canada, DND, and RCMP) — providing embedded procurement access on both sides of the border. Revenue is generated across four streams: critical/professional services (FY25 $12.65M, 48% YoY growth), software and technology sales (one-time licenses for EDR, data security, application control), recurring multi-year support and maintenance, and hardware/infrastructure sales to government data center customers. Disclosed FY25 revenue is $60.99M USD (5% YoY growth), with EBITDA loss narrowed 45% to $5.47M.

In 2025–2026 the company divested its India-based Cloud Codes subsidiary (C$1.78M, September 2025) to refocus on North American defense and government services, raised approximately CAD$6.2M across two private placements, executed a leadership restructuring (30% executive comp reduction, CTO/COO elimination, ~CAD$900K annualized savings), and attracted a ~12% strategic stake from ZenaTech, a NasdaqCM-listed defense-drone technology company. The company is positioned to benefit from a CAD$81.8B Canadian defense budget and CAD$6.6B Defense Industrial Strategy, with a new CPCSC Compliance Readiness Program launched for the defense industrial base ahead of summer 2026 certification enforcement.

Name

Plurilock

Legal name

Plurilock Security Inc.

Website

https://plurilock.com

Company type

Public

Founded year

2008

Operating status

Operating

Headcount range

51–100 employees

Short description

Plurilock Security Inc. is a publicly traded Canadian cybersecurity company that delivers an AI-native cyber resilience platform — including proprietary ADAPT and DEFEND products plus professional services — to Five-Eyes governments, defense agencies, and large enterprises through its Aurora (U.S.) and Integra Networks (Canada) subsidiaries.

Ownership category

akta.pro rank

Product category

Cybersecurity Platform

NAICS

Computer Systems Design and Related Services (54151), Software Publishers (51321), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

akta.pro secondary industries

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Cyber Recovery & Ransomware-Resilient Backup Services (BPAEALAG), Confidential AI & Privacy-Preserving ML (federated learning, MPC, HE, TEEs) (HDAAAKAI), Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), Privileged Access Management (PAM) (HDADAAAC), Application Security & Secure Software (DevSecOps) (EDAOAIAK)

Keywords

• Cybersecurity services
• Continuous authentication
• Data protection
• Penetration testing
• Cloud security services

Headquarters

HQ city

Victoria

HQ country

Canada

HQ region

North America

Offices8 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Critical Services Revenue: Professional services including security operations center services, vulnerability assessments, penetration testing, red/purple teaming, compliance consulting, and managed IT. The Critical Services division generated $12.65 million in fiscal 2025, representing 48% year-over-year growth and demonstrating strong demand expansion.
2. Software and Technology Sales: Sales of cybersecurity software including EDR, data security, application control, and related support services to government and enterprise customers. Includes AI-native platform products ADAPT and DEFEND.
3. Hardware and Infrastructure Sales: Sales of data center build-out components including high-performance server components and infrastructure support to federal and state government customers.
4. Recurring Support and Maintenance: Multi-year contract renewals with government agencies including Option Year 1 of multi-year engagements, providing recurring revenue visibility. Support typically includes three-year support terms for software deployments.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels6 records

Core offering

Plurilock sells an AI-native cybersecurity platform built on proprietary products PLURILOCK ADAPT (continuous authentication via behavioral biometrics) and PLURILOCK DEFEND (data protection), complemented by a services portfolio spanning cyber adversary simulation, data protection, cloud security, and governance/risk/compliance. The company delivers these offerings to Five-Eyes governments, NATO-aligned agencies, defense contractors, and Global 2000 enterprises, with operations through subsidiaries Aurora (United States) and Integra Networks (Canada).

Product overview

Plurilock is a services-led, product-enabled, AI-native cybersecurity company operating as a platform-plus-modules architecture. The core Plurilock Platform provides AI-native cyber resilience through proprietary IP and AI playbooks, with complementary sub-products PLURILOCK ADAPT (continuous authentication) and PLURILOCK DEFEND (data protection). The company operates through subsidiaries Aurora (U.S.) and Integra Networks (Canada) for regional systems integration and government sales. The portfolio includes specialized service modules covering cyber adversary simulation (penetration testing, red/purple teaming, social engineering), cloud security (CASB, cloud governance, guardrails, visibility, multi-cloud hardening), data protection (DPaaS, IAM, PKI, zero trust), and governance risk compliance (CPCSC, CMMC, CISO assessments). Critical Services represents a high-growth operational resilience division serving government and enterprise customers.

Differentiator

Problem solved

Functional benefit

Brands

• Aurora: Systems integration, U.S. commercial and federal sales
• Integra Networks

Products and services

• Plurilock Platform
• PLURILOCK ADAPT
• PLURILOCK DEFEND
• Data Protection as a Service (DPaaS)
• Adversary Simulation and Readiness Services
• Penetration Testing as a Service (PTaaS)
• Red and Purple Teaming
• AI Risk Assessment Services
• Identity and Access Management (IAM) Services
• Public Key Infrastructure (PKI) Services
• Zero Trust Maturity Assessment Services
• Emergency Support Services
• Critical Services
• CPCSC Readiness Services
• SOC Operations and Support
• Managed IT Services

Quantifiable outcome

• 85% of organizations fail their first NIST 800-171 assessment - Plurilock's CPCSC compliance readiness program addresses this gap
• +3 more outcomes

Named customers8 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability4 records

Feature8 records

Partnerships

One partnership is on record.

• Gluu, Inc.strategicTechnology or Integration · 18 November 2020Strategic collaboration announced November 18, 2020, enabling both companies to offer integrated solutions combining Gluu's identity and access management with Plurilock's AI-driven continuous authentication technologies. The Plurilock adapter is included in the open source Gluu Server distribution starting from version 4.2.2, with Plurilock planning to develop additional components for Gluu's platform.

Scale indicators12 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Mandiant: Mandiant (now Google Cloud) provides incident response, threat intelligence, and managed detection services to government agencies and Global 2000 enterprises. Most directly comparable to Plurilock's Critical Services division (adversary simulation, SOC, DFIR) and shares the same high-stakes government customer profile.
• CrowdStrike: AI-native endpoint and cloud workload protection platform with a growing professional services arm (CrowdStrike Services) covering incident response, red/blue team operations, and SOC consulting. Comparable to Plurilock in EDR-led offerings, AI positioning, and government enterprise market.
• Booz Allen Hamilton: Major U.S. government IT and cybersecurity consultancy serving Five-Eyes defense and intelligence agencies. Directly comparable to Plurilock's government-focused cybersecurity services and CPCSC/CMMC compliance readiness offerings for defense contractors.
• Leidos: U.S. defense and government IT services contractor with significant cybersecurity practice serving DISA, intelligence community, and federal civilian agencies. Comparable to Plurilock's U.S. federal cybersecurity services delivered through the Aurora subsidiary and NASA SEWP vehicle.
• ManTech: Government cybersecurity and IT services firm (acquired by Carlyle in 2022) specializing in defense, intelligence, and federal civilian markets. Highly comparable to Plurilock's federal systems integration work, security clearances, and DoD contract posture.
• Palo Alto Networks Unit 42: Threat intelligence and incident response services arm of Palo Alto Networks, providing adversary simulation, SOC consulting, and DFIR to global enterprises. Comparable to Plurilock's Cyber Adversary Simulation and Critical Services offerings.

Direct peers

• Herjavec Group: Canadian-founded MSSP and cybersecurity services firm specializing in managed detection, identity, and advisory services for enterprises and government. Directly comparable to Plurilock's services-led MSSP model and Canadian government customer base.
• Scalar Decisions (Scalar Security): Canadian-headquartered IT security services and solutions provider serving enterprise and government customers across Canada. Directly comparable to Plurilock's Canadian commercial/government services delivery through Integra Networks.
• Optiv: U.S. cybersecurity solutions and services integrator providing advisory, identity, cloud security, and managed security services to large enterprises. Directly comparable to Plurilock's services-led model, zero trust/IAM practices, and systems integration business.

Emerging players

• Beyond Identity: Passwordless authentication and continuous identity verification platform using device-bound credentials and risk-based authentication. Comparable to Plurilock ADAPT's behavioral biometrics and continuous authentication positioning.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/plurilock

Compliance10 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Subsidiaries2 records

Funding overview

Funding rounds11 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A3 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Plurilock