What WidePoint-ORC does

WidePoint-ORC Corporation (formerly ORC, Inc.) is a wholly-owned subsidiary of publicly traded WidePoint Corporation (NYSE American: WYY) and operates as a federal-focused identity management and Public Key Infrastructure (PKI) provider headquartered in Fairfax, Virginia. The company has issued U.S. Government authentication credentials continuously since 1999 and is authorized as a certificate authority under three distinct federal frameworks — the Department of Defense External Certificate Authority (ECA) program, the GSA Shared Service Provider (SSP) program, and the Non-Federal Issuer PIV-Interoperable (NFI PIV-I) program — making it one of a very small set of trusted third parties able to issue Medium Assurance, Medium Hardware Assurance, Server, and Code Signing Certificates across these channels. Its core products include PIVotal ID HSPD-12/PIV smart-card credentials, ECA digital certificates, NFI/PIV-I cross-certified credentials, TPM-based hardware authentication, and a Federated eAuthentication Gateway (EAG) supporting SAML, OCSP, and SCVP.

The company's technology stack centers on its proprietary Common Identity Enabling Infrastructure (CIEI), which integrates identity management, eAuthentication, access management, and provisioning/workflow services, and is backed by a five-layer secure audited hosting facility with 24x7 monitoring. Revenue is generated through a mix of one-time/multi-year certificate license fees (typical certificate terms of 1 or 3 years, e.g., $1,402 for a 3-year MERS NFI device certificate), managed services for PIV-I credential issuance and lifecycle management, secure hosting subscriptions, and information assurance consulting.

WidePoint-ORC serves federal agencies, DoD contractors, NATO allies and foreign nationals interacting with the DoD, Fortune 500 commercial enterprises, healthcare, higher education, financial services (including MERS), port security, and law enforcement organizations — with more than 18,000 unique companies having received PIVotal ID credentials. Distribution combines enterprise/government field sales, an authorized reseller program, a self-serve ECA online portal with expedited same-day issuance, and in-person credential issuance appointments at locations in Fairfax VA, Columbus OH, and Hampton VA. The parent company reported $58 million in new and renewal contract awards in the first half of 2026, signaling continued federal demand momentum for the broader identity management portfolio.

Name

WidePoint-ORC

Legal name

WidePoint-ORC Corporation

Website

https://orc.widepoint.com

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

11–50 employees

Short description

WidePoint-ORC is a federally authorized PKI and credential issuance subsidiary of WidePoint Corporation (NYSE American: WYY), issuing DoD ECA, GSA SSP, and NFI PIV-I digital certificates to U.S. government agencies, DoD contractors, and over 18,000 commercial enterprises since 1999.

Ownership category

akta.pro rank

Product category

Identity & Access Management

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• PKI certificates
• Identity management
• Digital credentials
• Smart card authentication
• Federated identity

Headquarters

HQ city

Fairfax

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Digital Certificate Issuance: Revenue from issuing digital identity certificates including ECA, PIV, PIV-I, and NFI certificates. Certificates are issued with 1 or 3-year validity periods. Includes expedited same-day issuance services.
2. PIV-I Credential Services: Provides three PIV-I credential solutions: Fully Managed (WidePoint performs all functions including registrar and issuer roles), Backend Managed (WidePoint trains customer personnel and hosts systems), and Certificate Manufacturing Authority (provides hosted CAs for customers with existing FIPS 201 approved Card Management Systems).
3. NFI Device Certificates: Non-Federal Issuer device certificates for MERS eRegistry transactions, priced at $1402 for 3-year certificates.
4. Security Consulting Services: Professional consulting services for systems engineering, information assurance, acquisition management, program management, and auditing.
5. Secure Hosting Services: Managed hosting services from a secure, audited facility with redundant power, climate control, physical security, and 24x7x365 monitoring.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

WidePoint-ORC is an authorized certificate authority and identity management provider that issues PKI-based digital certificates and credentials for U.S. federal agencies, DoD contractors, and commercial enterprises. Its portfolio includes PIVotal ID (HSPD-12/PIV) credentials, External Certificate Authority (ECA) certificates, NFI/PIV-I credentials, smart cards, TPM-based authentication, and federated identity services, delivered alongside managed secure hosting and information assurance consulting.

Product overview

WidePoint-ORC is a unified identity management and PKI platform offering government-compliant credential and certificate authority services. The core product portfolio centers on PIVotal ID credentials for federal HSPD-12/PIV compliance, supported by ECA (External Certificate Authority) for DoD contractors and NFI/PIV-I credentials for non-federal interoperability. Additional offerings include Smart Cards, TPM solutions, Federated Identity management, Secure Hosting, and Consulting services. The company operates as the only trusted third party authorized to issue Medium Assurance, Medium Hardware Assurance, Server Certificates, and Code Signing Certificates under DoD ECA, GSA SSP, and NFI/PIV-I programs. Products are delivered through authorized resellers and direct engagement, with credentials issued to over 18,000 unique companies including Fortune 500 enterprises.

Differentiator

Problem solved

Functional benefit

Products and services

• PIVotal ID (HSPD-12/PIV) Government-compliant PIV smart-card credentials containing photographic images, biometric fingerprint data, PINs, and digital certificates for physical and logical access control, issued to federal agencies, contractors, and commercial enterprises requiring HSPD-12 compliance.
• ECA (External Certificate Authority) Certificates DoD-approved digital certificates issued to contractors, vendors, allied partners, NATO allies, and government trading partners for identification, digital signatures, encryption, server authentication, and domain controller security at medium, medium-token, and medium-hardware assurance levels, with expedited/same-day issuance available.
• NFI/PIV-I Credentials Non-Federal Issuer PIV-Interoperable credentials cross-certified with the Federal Bridge, available as Fully Managed, Backend Managed, or Certificate Manufacturing Authority offerings, enabling commercial enterprises to use one credential for internal company badges, secure website access, smart card logon, document/email signing, encryption, and physical RFID access.
• PKI Services End-to-end public key infrastructure services including certificate authority management, authentication, digital signature support, and cryptographic key management for government and enterprise customers.
• MERS NFI Device Certificates Non-Federal Issuer device certificates used by MERS eRegistry participants in the mortgage industry to digitally sign and encrypt registry transactions, with 3-year validity.
• Smart Cards Physical credential cards with embedded chip electronics supporting multi-factor authentication via fingerprint matching, photo matching, PINs, and digital certificates.
• TPM (Trusted Platform Module) Authentication Hardware-based security solution using Trusted Platform Module technology to deliver Medium Hardware Assurance authentication to workstations, enabling dual authentication between identity and device certificates and protection of multiple attribute certificates per user.
• Federated eAuthentication Gateway (EAG) Federated identity management solution supporting SAML 1.0/1.1/2.0 authentication, Single Sign-On translation, and validation services (OCSP, SCVP, PDVAL), with trust for DoD PKI and FBCA-compliant PKIs to enable cross-domain access.
• Secure Hosting Managed hosting from a secure, audited facility with five layers of physical security, redundant power and climate control, and 24x7x365 monitoring to support certificate authority operations.
• Information Assurance Consulting Professional consulting services covering systems engineering, information assurance, acquisition management, program management, auditing, and cybersecurity support for government and commercial clients.

Quantifiable outcome

• PIVotal ID credentials issued to more than 18,000 unique companies including Fortune 500 companies, small businesses, colleges and universities, private & public research organizations, healthcare organizations, banks and financial institutions

Named customers7 records

Segments7 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Four partnerships are on record, tiered core and major.

• U.S. Department of DefensecoreStrategic or Co-development PartnerWidePoint-ORC is a DoD approved External Certificate Authority (ECA), authorized to provide digital certificates for DoD contractors, vendors, allied partners, NATO allies, and foreign nationals. This is a foundational government partnership enabling the company's primary credential issuance services.
• GSA (General Services Administration)coreStrategic or Co-development PartnerWidePoint-ORC is a GSA Shared Service Provider (SSP) Program participant, providing trusted identity credentials for federal agencies under GSA governance.
• Federal Bridge Certificate Authority (FBCA)coreStrategic or Co-development PartnerWidePoint-ORC PIV-I credentials are directly cross certified with the Federal Bridge, enabling interoperability with federal agencies and government-wide acceptance.
• MERSCORP Holdings (MERS)majorStrategic or Co-development PartnerWidePoint-ORC serves as certificate issuer for MERS eRegistry transactions, providing NFI Device certificates for the mortgage industry's digital certificate needs.

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Sectigo: Sectigo is a commercial certificate authority offering PKI, TLS/SSL, and IoT certificates. Comparable as a direct certificate authority peer; WidePoint-ORC is more federally focused while Sectigo is more commercial/SMB-oriented.
• Entrust: Entrust is a leading global provider of PKI, digital certificates, and identity & access management solutions serving government and enterprise. Directly comparable to WidePoint-ORC's PKI certificate authority and credential issuance offerings, with overlap in federal and commercial segments.
• DigiCert: DigiCert is a major digital certificate authority and PKI provider for TLS, IoT, and enterprise identity. Comparable to WidePoint-ORC's PKI and certificate issuance business; DigiCert is more commercially oriented while WidePoint-ORC is federally focused.
• HID Global: HID Global is an identity solutions provider offering smart cards, credential management systems, and PKI services for government, healthcare, education, and enterprise. Strong overlap with WidePoint-ORC's PIV-I, smart cards, and credential issuance products.
• IDEMIA: IDEMIA is a global identity credentials provider producing secure physical identity documents, smart cards, and biometric credentials for governments. Directly comparable to WidePoint-ORC's smart card and PIV-I credential offerings for federal and public-sector identity programs.
• GlobalSign: GlobalSign is a certificate authority and PKI provider offering identity and digital signature solutions for enterprises. Comparable in core PKI and certificate issuance capabilities, serving similar regulated-industry customers in Europe and globally.

Others

• Booz Allen Hamilton: Booz Allen Hamilton is a major federal IT and cybersecurity services contractor. Comparable as a peer in the federal IT services ecosystem where WidePoint-ORC competes, though Booz Allen is a broader consulting and systems integrator rather than a focused PKI issuer.

Broad incumbents

• Verizon Public Sector: Verizon's public sector business provides managed security and identity services to federal agencies. Broad incumbent with overlapping credentials and managed services offerings, though not as focused on PKI certificate authority as WidePoint-ORC.
• Thales (Digital Identity & Security): Thales operates a broad digital identity and security portfolio including PKI, HSMs, and authentication. Overlaps with WidePoint-ORC in PKI and credential issuance but operates at much larger scale across defense, finance, and government.

Emerging players

• Keyfactor: Keyfactor provides PKI-as-a-service and certificate lifecycle automation for enterprise and government. Comparable as an emerging player in modern PKI management, though more cloud-native / SaaS-focused than WidePoint-ORC's traditional issuance model.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/widepoint-orc

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WidePoint-ORC