Merlin Cyber
Merlin Cyber is a privately held U.S. federal government cybersecurity solutions aggregator and integrator, serving federal, state, and local agencies for nearly 30 years with vetted third-party products, FedRAMP acceleration, and token-based procurement via the MINT program.
- Company typePrivate
- Founded1996
- HeadquartersRichmond, United States
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Merlin Cyber does
Merlin Cyber, legally Merlin International, Inc., is a U.S. federal-government-focused cybersecurity solutions provider founded in 1996 and headquartered at 1861 International Drive, Suite 500, McLean, Virginia. The company operates as the go-to-market affiliate of the broader Merlin Group conglomerate, which also encompasses Merlin Ventures (a $75M+ cybersecurity investment fund), CGC/Constellation GovCloud (a FedRAMP/StateRAMP authorization acceleration platform), and InfoSec Global Federal/ISG Federal (post-quantum cryptography and cryptographic agility solutions). Merlin Cyber serves U.S. federal, state, and local government agencies with a portfolio organized into two tracks: direct services (Identity Security Modernization, Self-Funded IT Modernization, Post-Quantum Readiness, Ransomware Protection, Zero Trust Maturity, FedRAMP Acceleration) and a curated partner ecosystem of vetted third-party cybersecurity products from vendors including CyberArk (privileged access management), Zimperium (mobile threat defense), Veeam (backup/recovery), Armis (asset security), Palo Alto Networks, Netskope, Okta, Darktrace, 1E, and Contrast Security.
The company's underlying technology architecture is built around three proprietary frameworks: the MINT (Merlin Interchangeable Nominal Tokens) procurement system, which provides 1:1 USD-denominated tokens redeemable across the vendor portfolio for SaaS subscriptions, perpetual licenses, maintenance, professional services, and training; the Self-Funded Modernization approach that redirects third-party ERP support savings (via Rimini Street partnership) toward cybersecurity investments; and the Constellation GovCloud (CGC) platform that delivers FedRAMP and StateRAMP authorization as a managed cloud service, reducing time and cost for vendors seeking government market access. Distribution occurs via direct enterprise field sales and federal contract vehicles including IT Schedule 70, CIO-CS, CIO-SP3, and SEWP V, complemented by a selective channel partner program.
The business model combines subscription-based resale of third-party cybersecurity products, professional services revenue from modernization consulting and transition engagements, and managed services revenue from the CGC FedRAMP acceleration platform. Revenue figures are not publicly disclosed. Pricing is negotiated enterprise-style with multi-year contracts; the MINT token system provides flexible procurement optionality for federal, state, and local buyers. Customer concentration is anchored in U.S. federal civilian agencies, with the U.S. Department of State publicly disclosed as a named deployment (Zimperium mobile threat defense), and an adjacent go-to-market toward state/local government and the supply side (cybersecurity vendors seeking FedRAMP authorization). The company is privately held under Merlin Group ownership with no public market listing, employs 51-100 people, and has served government customers for nearly 30 years.
Merlin Cyber firmographics
Firmographics- Name
- Merlin Cyber
- Legal name
- Merlin International, Inc.
- Website
- https://merlincyber.com
- Company type
- Private
- Founded year
- 1996
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Merlin Cyber is a privately held U.S. federal government cybersecurity solutions aggregator and integrator, serving federal, state, and local agencies for nearly 30 years with vetted third-party products, FedRAMP acceleration, and token-based procurement via the MINT program.
- Ownership category
- akta.pro rank
Merlin Cyber industry classification
Industry- Product category
- Government Cybersecurity Solutions
- NAICS
- Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Cyber Defense & Information Security (National Security) (BPAIAHAE)
- akta.pro secondary industries
- Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)
Keywords
Where Merlin Cyber is headquartered
LocationHeadquarters
- HQ city
- Richmond
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Merlin Cyber business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Supply Chain
Revenue model
- Cybersecurity Solutions Resale: Merlin Cyber resells and integrates best-in-class cybersecurity technologies to U.S. government agencies. Revenue is generated through product sales, subscriptions, and professional services associated with vendor products. The company operates as a vetted aggregator bringing emerging and established cyber vendors to the government market.
- IT Modernization Services: Revenue from modernization consulting and transition services that help agencies move from single-vendor ERP arrangements to third-party support, enabling cost savings that fund further innovation.
- FedRAMP Acceleration Platform: Through the Constellation GovCloud (CGC) platform, Merlin provides FedRAMP and StateRAMP authorization services, helping vendors achieve compliance in reduced time and cost to access the government market.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Enterprise government procurement through contract vehicles |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
Merlin Cyber product offering
Product offeringCore offering
Merlin Cyber is a cybersecurity solutions aggregator and integrator that serves U.S. federal, state, and local government agencies. The company resells and integrates a vetted portfolio of third-party cybersecurity technologies spanning identity security, zero trust, mobile threat defense, endpoint protection, cloud security, cryptographic discovery, and FedRAMP compliance acceleration. It also operates the MINT token-based procurement program, the CGC FedRAMP acceleration platform, and a Self-Funded Modernization initiative through its partnership with Rimini Street.
Product overview
Merlin Cyber operates as a cybersecurity platform and go-to-market affiliate of Merlin Group, serving U.S. federal, state, and local government agencies for nearly 30 years. The company offers a portfolio of cybersecurity solutions through two main channels: direct service offerings and a vetted partner ecosystem. Direct services include Identity Security Modernization, Self-Funded IT Modernization (via Rimini Street partnership), Post-Quantum Readiness (ISG Federal), Ransomware Protection, Zero Trust Maturity, and FedRAMP Acceleration on the CGC Platform. The partner ecosystem includes products from CyberArk (identity security/PAM), Zimperium (mobile threat defense), Veeam (backup/recovery), Armis (asset security), InfoSec Global Federal (cryptographic asset management), Palo Alto Networks, Netskope, and others. The MINT (Merlin Interchangeable Nominal Tokens) program provides a flexible procurement mechanism enabling government customers to access the full portfolio of cybersecurity tools and services through a unified token-based system.
Differentiator
Problem solved
Functional benefit
Brands
- MINT (Merlin Interchangeable Nominal Tokens): A token-based procurement program enabling public sector customers to procure cybersecurity products from one or more vendors with flexibility
- CGC (Cloud Government Compliance)
- Merlin Ventures
- ISG Federal / InfoSec Global Federal
Products and services
- Identity Security Modernization Comprehensive identity security services helping federal agencies modernize identity and access management aligned with Zero Trust architecture requirements.
- Self-Funded IT Modernization Service that transitions government agencies to third-party software support with Rimini Street to break vendor lock-in, reduce costs, and self-fund innovation for SAP, Oracle, VMware, and other mission-critical systems.
- Post-Quantum Readiness (ISG Federal) Cryptographic asset discovery, automated certificate lifecycle management, and quantum-ready PKI and signing solutions to enable crypto-agility across government environments.
- Ransomware Protection Cybersecurity solutions specifically designed to protect U.S. government agencies from ransomware attacks.
- Zero Trust Maturity Solutions to accelerate Zero Trust maturity with technically-vetted, mission-aligned cybersecurity capabilities.
- FedRAMP Acceleration (CGC Platform) Cloud platform enabling vendors to achieve FedRAMP and StateRAMP authorization in reduced time and cost, accelerating path to revenue for cloud-based cybersecurity products.
- MINT (Merlin Interchangeable Nominal Tokens) Procurement token program enabling Federal, State, and Local government organizations to redeem tokens for cybersecurity tools and services including cloud-based SaaS subscriptions, on-prem licensing, perpetual licenses with maintenance, and professional services.
- Partner Program Program for best-in-class and emerging cyber companies that have been technically vetted to meet U.S. Government requirements and advance modernization initiatives.
- Zimperium Mobile Threat Defense AI-driven mobile security solution providing continuous on-device threat detection with advanced integrations for Zero Trust architectures. FedRAMP-Authorized MTD provider for U.S. Department of State and federal agencies.
- CyberArk Identity Security Identity security solutions including Privileged Access Management (PAM) for federal agencies, helping meet Zero Trust objectives and government mandates including EO 14028, M-22-09, and CISA Zero Trust Maturity Model.
- Veeam Backup and Recovery Backup, recovery, portability, security, and intelligence solutions protecting data across platforms for government agencies.
- Armis Asset Security Real-Time, Context-Aware Vulnerability Intelligence for protecting extended asset attack surfaces against evolving threats.
- InfoSec Global Federal (ISG Federal) Cryptographic Asset Management Cryptographic asset discovery and control solutions enabling government agencies to discover, remediate, and manage cryptographic posture across on-prem, hybrid, and cloud environments.
Quantifiable outcome
- One enterprise client achieved savings exceeding $3 million annually while improving response times and operational performance after transitioning from single ERP vendor arrangement
Companies that use Merlin Cyber
Customer profileNamed customers1 record
Segments3 records
Ideal customer profiles3 records
Merlin Cyber technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration17 records
AI capability5 records
Feature4 records
Merlin Cyber partnerships and signals
Strategic signalPartnerships
14 partnerships are on record, tiered core and featured.
- Rimini StreetcoreStrategic partnership to help U.S. government agencies reduce IT costs and modernize infrastructure through a 'Self-Funded Modernization' approach. Rimini Street provides third-party software support for SAP, Oracle, VMware, and other mission-critical systems, redirecting savings toward cybersecurity and modernization without requiring new budget allocations. The partnership claims one enterprise client achieved savings exceeding $3 million annually.
- CyberArkcoreFeatured partner providing identity security solutions for government agencies. CyberArk's Privileged Access Management (PAM) and Identity Security platform helps federal agencies achieve Zero Trust objectives and comply with government mandates including EO 14028 and M-22-09.
- InfoSec Global FederalcorePartner providing cryptographic discovery and agility solutions. InfoSec Global Federal's AgileSec Analytics achieved FedRAMP Authorization on the CGC Platform, enabling government agencies to discover, remediate, and control cryptographic assets across on-prem, hybrid, and cloud environments.
- ZimperiumcorePartner providing mobile threat defense (MTD) and mobile app security. Zimperium is the first FedRAMP-authorized MTD provider, offering AI-driven security to defend against evolving mobile-first cyber threats for government agencies including the U.S. Department of State.
- VeeamfeaturedPartner providing backup, recovery, portability, security, and intelligence for government data protection across platforms.
- ArmisfeaturedPartner providing real-time, context-aware vulnerability intelligence for protecting extended asset attack surfaces in government environments.
- Palo Alto NetworksfeaturedPartner providing cloud and network security solutions for government agencies implementing zero trust architectures.
- NetskopefeaturedPartner providing SASE-based solutions for federal transformation and secure cloud access supporting TIC 3.0 requirements.
- Constellation GovCloud (CGC)coreMerlin's own FedRAMP acceleration platform that enables cybersecurity vendors to achieve FedRAMP and StateRAMP authorization in reduced time and cost. Multiple partners including InfoSec Global Federal and Cynamics have achieved FedRAMP authorization on this platform.
- CynamicsfeaturedPartner that secured FedRAMP authorization as a managed service on the CGC Platform, providing network detection and response capabilities for government agencies.
- DarktracefeaturedAI-driven cybersecurity partner providing autonomous threat detection and response capabilities for government networks.
- OktafeaturedIdentity and access management partner supporting zero trust implementations for federal agencies.
- 1EfeaturedEndpoint management partner providing real-time visibility, control and compliance solutions for remote government workforce scenarios.
- Contrast SecurityfeaturedApplication security testing partner supporting DevSecOps initiatives by shifting security left in the CI/CD pipeline.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Merlin Cyber competitors and assessment
Company assessmentMarket position
Competitive moat4 records
Key highlights7 records
Customer concentration
Merlin Cyber social profiles
Digital presenceMerlin Cyber compliance and trust
Trust signalCompliance5 records
Merlin Cyber financial estimates
Financial estimateRevenue estimate
Valuation estimate
Merlin Cyber leadership team
Management profileNumber of profiles
Profiles12 records
Merlin Cyber subsidiaries and ownership
Company hierarchySubsidiaries4 records
Merlin Cyber funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Merlin Cyber M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Merlin Cyber
What does Merlin Cyber do?
Merlin Cyber is a cybersecurity solutions aggregator and integrator that serves U.S. federal, state, and local government agencies. The company resells and integrates a vetted portfolio of third-party cybersecurity technologies spanning identity security, zero trust, mobile threat defense, endpoint protection, cloud security, cryptographic discovery, and FedRAMP compliance acceleration. It also operates the MINT token-based procurement program, the CGC FedRAMP acceleration platform, and a Self-Funded Modernization initiative through its partnership with Rimini Street.
Is Merlin Cyber a public or private company?
Merlin Cyber is a private company. It is classified as corporate owned and is currently operating.
When was Merlin Cyber founded?
Merlin Cyber was founded in 1996. It employs 51 to 100 people.
Where is Merlin Cyber based?
Merlin Cyber is headquartered in Richmond, United States, in the North America region.
How does Merlin Cyber make money?
Three revenue lines are on record. Cybersecurity Solutions Resale is the primary driver. The others are IT Modernization Services and fedRAMP Acceleration Platform.
Does Merlin Cyber have an API?
No public API is recorded for Merlin Cyber.
What industry is Merlin Cyber in?
Merlin Cyber's product category is Government Cybersecurity Solutions. Its primary akta.pro industry code is BPAIAHAE, Cyber Defense & Information Security (National Security), with a secondary code of BPAEAMAG, Cybersecurity Operations Outsourcing (SOC / SecOps). Its NAICS code is 54151 and its SIC code is 7373.