Wildcard

What Wildcard does

Wildcard Corp. is a privately-held IT services and technology company founded in 2007 and headquartered in Stevens Point, Wisconsin, with 11-50 employees. The firm operates across three primary lines: cybersecurity (security assessments, penetration testing, threat modeling, incident response, vCISO, and compliance audits for HIPAA, FISMA, and PCI DSS), web development and hosting, and managed IT solutions. Its core technology stack is open-source-centric, headlined by CastleCMS — a Plone-based content management system with built-in two-factor authentication and automatic PII/metadata stripping — alongside CastleMail (PGP-capable email hosting), Wldcard Cloud, Crowdspire (fundraising platform), and Nextcloud integrations. Third-party dependencies include Cloudflare for DNS/CDN, AVG for endpoint protection, Stripe and PayPal for payments, and Microsoft Teams for collaboration.

Wildcard serves three primary segments: government agencies (federal, state, local), small-to-medium businesses (typically under 50 employees), and nonprofit organizations. Government revenue flows through a GSA IT Schedule 70 contract (47QTCA19D00MJ) under SIN 132-51 and SIN 132-40, supported by HUBZone SBA certification and 1GPA cooperative purchasing membership; the firm is also actively pursuing FedRAMP Authorization to Operate for Castle Cloud. SMB and individual customers transact through a self-serve e-commerce portal at dashboard.wildcardcorp.com.

Revenue mechanics are predominantly subscription and recurring: managed IT/security contracts, web hosting, email, colocation, device management, and domain registration (starting at $14/year) form the recurring base, while one-time project fees for graphics/templating design (starting at $5,000) and custom-quoted enterprise cybersecurity engagements form the professional services layer. Go-to-market combines direct enterprise field sales (with a free technology review as the lead magnet) and self-serve e-commerce, with only three named customers visible in the data (one anonymous government client, Lawton & Cates in legal, and Golden Sands RCD in conservation). No revenue, funding, or institutional ownership is disclosed; in February 2026 TrustBIX Inc. announced a non-binding Letter of Intent to acquire WILDCARD MSP (operating as xFacilitator Inc.), signaling a potential ownership transition.

Name

Wildcard

Legal name

Wildcard Corp.

Website

https://wildcardcorp.com

Company type

Private

Founded year

2007

Operating status

Operating

Headcount range

11–50 employees

Short description

Wildcard Corp. is a privately-held, HUBZone-certified IT services firm in Stevens Point, Wisconsin, offering cybersecurity assessments, managed IT, and open-source web/email/cloud products to government agencies, SMBs, and nonprofits.

Ownership category

akta.pro rank

Product category

Cybersecurity & Managed IT Services

NAICS

Investigation and Security Services (5616)

SIC

Services-Management Services (8741)

akta.pro primary industry

Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)

akta.pro secondary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Cybersecurity services
• Managed IT services
• Penetration testing
• Web development hosting
• Content management system

Headquarters

HQ city

Stevens Point

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales, Supply Chain

Revenue model

1. Managed IT and Security Services: Recurring managed services including cybersecurity assessments, penetration testing, threat modeling, incident response, and vCISO services. Typically sold as annual or multi-year contracts with monthly or annual billing.
2. Web Development and Hosting: Custom website development and hosting services, including SMB Website Hosting with CRM. One-time development fees combined with recurring hosting subscriptions.
3. SMB Products and Services: Self-serve products including email hosting, domain registration, device management/protection, colocation, and DEV-compliance tools. Sold on monthly or annual subscription basis.
4. Professional Services: Graphics and templating design services, service contracts, and managed systems. One-time project fees for design work and custom solutions.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

Wildcard Corp is a cybersecurity, web development, and IT solutions company that delivers managed security services (security assessments, penetration testing, threat modeling, incident response, and vCISO) and custom open-source website development and hosting for government agencies and small-to-medium businesses. Its proprietary products include CastleCMS (Plone-based secure CMS), CastleMail (PGP-encrypted email hosting), Wldcard Cloud (FedRAMP-track cloud hosting), and Crowdspire (crowdfunding platform), supported by domain registration, colocation, and managed IT infrastructure services.

Product overview

Wildcard Corp is a technology company offering a portfolio of integrated IT services, cybersecurity solutions, and cloud-based products. The core offerings include Cybersecurity Services (security assessments, penetration testing, threat modeling, incident response), CastleCMS (open-source content management built on Plone), and Managed IT infrastructure. Additional services span web hosting with CRM integration, email services (CastleMail), colocation, domain registration, and specialized solutions like Crowdspire for fundraising and DEV-compliance tools. The company also offers device management through AVG partnership and various managed service tiers for small to medium businesses.

Differentiator

Problem solved

Functional benefit

Brands

• CastleCMS: A powerful and secure content management system built on Plone, designed for websites, intranets, and web applications.
• CastleMail
• Crowdspire
• Wldcard Cloud
• Sparx

Products and services

• Cybersecurity Services Comprehensive managed cybersecurity services including security assessments, threat modeling, penetration testing, incident response, and compliance audits (HIPAA, FISMA, PCI DSS), built on PTES and OSSTMM methodologies for government agencies, enterprises, and SMBs.
• Web Development & Hosting Custom-developed websites and web applications built from the ground up using open-source software, including design, programming, hosting, and ongoing support services for organizations of all sizes.
• Managed IT Services Proactive managed IT support covering hardware, software, and responsive support services, delivered by experienced IT professionals to secure and maintain business technology environments.
• CastleCMS Secure open-source content management system built on Plone, designed for websites, intranets, and web applications with no licensing fees, built-in two-factor authentication, automatic PII/metadata stripping from uploaded documents, and WCAG 2.0 AA / ATAG 2.0 AA compliance.
• CastleMail Email hosting service supporting IMAP, SMTP with STARTTLS, Exchange Active Sync, and PGP-encrypted emails, with standard and premium access tiers and spam filtering via Xeams.
• Crowdspire Fundraising and campaign management platform that enables campaign contributions through Stripe and PayPal payment processing, with GDPR-compliant data request and deletion capabilities for campaign owners.
• Wildcard Cloud (Wldcard Cloud) Cloud hosting and infrastructure services provided by Wildcard with a free tier available; the government-compliance variant (Castle Cloud) is pursuing FedRAMP Authorization to Operate.
• SMB Website Hosting with CRM Website hosting packages for small and medium businesses including integrated CRM, DNS hosting, CDN, SSL, and IPv6 support, offered in No-Design and With-Design tiers with one-time setup fees plus recurring subscription.
• Managed Systems (Plone CMS Hosting) Managed hosting plans for Plone CMS, designed for single-server deployments typically for companies of 50 or fewer employees, with custom packages available for larger deployments.
• Domain Name Registration Domain registration services supporting multiple TLDs (.com, .net, .org, .info, .me, .io, .care, .cloud, .us, etc.) starting at $14.00 per year, with annual subscription billing.
• Colocation Services (Colocation Handson) Physical colocation services including 1U rack space in a community cage at $20/month and additional ISP interconnect (10 Mbps in/10 Mbps out) at $25/month.

Quantifiable outcome

• FedRAMP authorization in progress for government cloud services

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration11 records

AI capability3 records

Feature4 records

Partnerships

Five partnerships are on record, tiered core and minor.

• General Services Administration (GSA)coreChannel Partner/ Reseller/ DistributorWildcard holds GSA IT Schedule 70 contract enabling government agencies to procure IT professional services and cloud solutions through pre-competed contracts. This provides preferential access to federal procurement opportunities and serves as a core distribution channel for government customers.
• 1GPAminorChannel Partner/ Reseller/ Distributor1GPA (International Government Purchasing Alliance) partnership providing additional government procurement access for Wildcard services.
• Plone FoundationcoreTechnology or IntegrationWildcard builds CastleCMS on the Plone open-source content management system, contributing to and leveraging the Plone community. Wildcard positions itself as open source pioneers leading in Plone development and security.
• CloudflarecoreTechnology or IntegrationWildcard uses Cloudflare for DNS management and CDN services. Knowledgebase indicates customers should not move nameservers away from Cloudflare entries as website and email functionality depends on it.
• StripecoreTechnology or IntegrationStripe is used as the payment processor for Crowdspire.org and other Wildcard services, processing campaign contributions and general payments.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Arctic Wolf Networks: Managed detection and response (MDR) and vCISO-style security services provider serving SMB and mid-market customers, closely comparable to Wildcard's managed security and vCISO offerings.
• Pondurance: MDR, pen testing, threat modeling and incident response provider focused on mid-market and regulated industries; closely overlaps Wildcard's cybersecurity services practice.
• eSentire: MDR and security operations provider serving mid-market and SMB clients with 24/7 SOC capabilities, comparable in customer profile and service mix to Wildcard's managed security line.
• Blackpoint Cyber: MSSP focused on SMB and MSP partners with managed detection, response and compliance services — directly comparable in target customer and service delivery model.
• Trustwave: Managed security services, pen testing and incident response provider with deep federal and regulated-industry presence, comparable to Wildcard's enterprise and government cybersecurity practice.
• Schneider Downs Cybersecurity: Regional cybersecurity and IT advisory firm serving mid-market and government clients with pen testing, compliance and managed security — comparable in size, scope and regional concentration.
• NetSPI: Penetration testing, attack surface management and vulnerability management provider serving enterprise and regulated industries — directly comparable to Wildcard's core cybersecurity assessment practice.

Broad incumbents

• Rapid7: Public cybersecurity platform offering pen testing (Metasploit), vulnerability management and managed services; a scaled incumbent that overlaps Wildcard's assessment and pen-testing services.

Emerging players

• Acquia: Open-source CMS (Drupal) hosting and digital experience platform; comparable to CastleCMS/Plone in open-source CMS positioning and managed hosting delivery.
• Pantheon: Open-source CMS (Drupal/WordPress) hosting platform serving SMB and enterprise, directly comparable to Wildcard's SMB website hosting with CRM offering.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/WildcardCorp
• LinkedInlinkedin.com/company/wildcard-corp
• Facebookfacebook.com/wildcardcorp

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Wildcard