Merlin Group
Merlin Group is a network of affiliates — Merlin Ventures, Constellation GovCloud, and Merlin Cyber — that invests in, accelerates compliance for, and drives go-to-market for cybersecurity companies selling into the U.S. federal government and critical infrastructure markets.
- Company typePrivate
- Founded1994
- HeadquartersTysons Corner, United States
- Headcount—
- GTM typeB2B
- OfferingServices
What Merlin Group does
Merlin Group, founded in 1994 and headquartered in Tysons Corner, Virginia, is a privately held network of affiliates that invests in, enables, and scales technology companies with disruptive cybersecurity solutions for the U.S. Government and critical infrastructure markets. The company operates through three core affiliates: Merlin Ventures, an early-stage venture capital fund (with a $75M oversubscribed inaugural fund closed in June 2025) that invests in emerging cyber and dual-use technology companies; Constellation GovCloud (CGC), a FedRAMP and StateRAMP compliance acceleration PaaS with an online marketplace of pre-authorized solutions; and Merlin Cyber, a go-to-market execution arm providing public sector sales, sales operations, marketing, technical labs, and government affairs services. Additional capabilities include Merlin Labs (innovation testing and validation) and solution areas spanning post-quantum cryptography readiness, ransomware prevention, AI-driven SOC automation, and Zero Trust roadmap services.
The platform is supported by a CISO community of more than 400 security executives used for peer collaboration and product feedback, and has assembled a senior leadership bench drawing heavily from CISA, the Department of Defense, and major federal contractors. Revenue is generated across four streams: venture management economics (Merlin Ventures), subscription and platform fees plus marketplace commissions (CGC), professional services and partner enablement (Merlin Cyber), and testing/pilot services (Merlin Labs). Pricing is contract-based, primarily multi-year, and targeted at federal, defense, SLED, and critical infrastructure buyers, with no public pricing disclosed.
Merlin Group addresses two linked market failures: (1) federal and critical infrastructure buyers struggle to access cutting-edge cyber innovations because FedRAMP authorization can take 24+ months and exceed $2M; and (2) early-stage cyber companies lack the capital, compliance infrastructure, and public sector distribution to access this regulated market. The affiliate flywheel (capital → compliance → GTM) is engineered to solve both simultaneously, creating a closed-loop ecosystem where portfolio companies feed the marketplace and generate GTM pipeline.
Merlin Group firmographics
Firmographics- Name
- Merlin Group
- Legal name
- Merlin International
- Website
- https://themerlingroup.com
- Company type
- Private
- Founded year
- 1994
- Operating status
- Operating
- Short description
- Merlin Group is a network of affiliates — Merlin Ventures, Constellation GovCloud, and Merlin Cyber — that invests in, accelerates compliance for, and drives go-to-market for cybersecurity companies selling into the U.S. federal government and critical infrastructure markets.
- Ownership category
- akta.pro rank
Merlin Group industry classification
Industry- Product category
- Government Cybersecurity Services
- NAICS
- Management, Scientific, and Technical Consulting Services (5416), Portfolio Management and Investment Advice (523940)
- SIC
- Services-Management Consulting Services (8742)
- akta.pro primary industry
- Strategic Partnerships, Alliances & JVs Advisory (BPAHADAI)
Keywords
Where Merlin Group is headquartered
LocationHeadquarters
- HQ city
- Tysons Corner
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Merlin Group business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure
Revenue model
- Merlin Ventures – Early-Stage Venture Capital: Merlin Ventures is the venture capital fund of Merlin Group, investing in emerging cybersecurity and mission technology companies. It provides capital, domain expertise, government and commercial market access, and hands-on support to help founders accelerate product development and scale. Merlin Ventures raised an oversubscribed $75 million inaugural fund in 2025.
- CGC Compliance Acceleration Platform: Constellation GovCloud (CGC) is a Platform-as-a-Service (PaaS) built to enable federal security compliance for market readiness. It accelerates FedRAMP/StateRAMP ATO authorization and hosts an online marketplace of FedRAMP-compliant solutions and services. Revenue is derived from compliance services, platform fees, and marketplace commissions from listed vendors.
- Merlin Cyber – Go-to-Market Services: Merlin Cyber provides public sector go-to-market acceleration services including customized sales, sales operations, marketing, technical/labs, and government affairs capabilities. Revenue is generated through partner enablement fees, sales commissions, and professional services engagements with federal, defense, state, local, and education customers.
- Merlin Labs – Innovation Lab Services: Merlin Labs provides a secure, hands-on environment for integrating, testing, piloting, and refining cyber technologies against government and enterprise use cases, generating revenue through testing, piloting, and validation services for startups and mature cyber companies.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | No public pricing available — Merlin Group's services are enterprise/contract-based with no published pricing. |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels6 records
Merlin Group product offering
Product offeringCore offering
Merlin Group is a network of affiliates that invests in, enables, and scales cybersecurity technology companies for the U.S. Government and critical infrastructure markets. Its core offerings span venture capital funding for early-stage cyber innovators (Merlin Ventures), a FedRAMP/StateRAMP compliance acceleration platform and online marketplace (Constellation GovCloud), and public-sector go-to-market sales, marketing, technical, and government-affairs services (Merlin Cyber), supplemented by Merlin Labs validation services.
Product overview
Merlin Group is a network of affiliates that invests in, enables, and scales technology companies with disruptive cyber solutions. The ecosystem consists of three main affiliates: Merlin Ventures (early-stage venture capital fund investing in emerging cyber technologies), Constellation GovCloud (CGC) (a compliance acceleration platform-as-a-service that streamlines FedRAMP/StateRAMP authorization and operates a marketplace of compliant solutions), and Merlin Cyber (go-to-market execution engine providing public sector sales acceleration and Zero Trust modernization services). Additional offerings include Merlin Labs for innovation testing and validation, and solution areas covering PQC/post-quantum readiness, ransomware prevention and recovery, AI-driven SOC automation, and Zero Trust roadmap planning.
Differentiator
Problem solved
Functional benefit
Products and services
- Merlin Ventures Early-stage venture capital fund that invests in cybersecurity and mission technology companies, providing capital, domain expertise, and government/commercial market access to help founders accelerate product development and scale.
- Constellation GovCloud (CGC) Platform-as-a-Service (PaaS) built to enable federal security compliance for market readiness, accelerating FedRAMP/StateRAMP ATO authorization and hosting an online marketplace of FedRAMP-compliant solutions and services for government buyers.
- Merlin Cyber
- Merlin Labs (Innovation Lab)
Quantifiable outcome
- Merlin Ventures raised over $75 million in its debut fund in 2025, indicating strong investor confidence in the ecosystem model.
- +2 more outcomes
Companies that use Merlin Group
Customer profileNamed customers5 records
Segments4 records
Ideal customer profiles4 records
Merlin Group technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature4 records
Merlin Group partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core.
- InfoSec Global FederalcoreInfoSec Global Federal's AgileSec™ Analytics achieved FedRAMP Authorization on the CGC (Constellation GovCloud) platform. This integration enables government customers to access InfoSec Global's post-quantum cryptography (PQC) and cryptographic asset management solutions through CGC's compliance acceleration platform and marketplace.
- Rimini StreetcoreMerlin Cyber and Rimini Street announced a strategic partnership to help U.S. Government agencies cut operating costs through DOGE and other initiatives and modernize existing enterprise software and systems. The partnership combines Merlin Cyber's deep expertise in federal enterprise license agreements (ELA), public sector sales enablement, and technology innovation with Rimini Street's cost-effective enterprise software support solutions. Rimini Street leverages Merlin Cyber's strategic government affairs, go-to-market, and technical services to help federal, state, and local agencies maximize ROI on existing enterprise software assets. The two companies completed their first joint transaction bringing immediate and substantial IT cost relief and better enterprise software support to one of the largest cities in America.
- VeeamcoreVeeam and Constellation GovCloud (an affiliate of Merlin Group) partnered to bring Veeam's data resilience products to U.S. Public Sector customers with FedRAMP Authorization. Constellation GovCloud enables Veeam to achieve and maintain FedRAMP authorization, expanding Veeam's reach into the government market through a trusted compliance-ready channel partner.
Scale indicators5 records
Recent moves6 records
Expansion highlights5 records
Merlin Group competitors and assessment
Company assessmentDirect peers
- DataTribe: Cyber-focused startup foundry and venture capital firm that co-builds and invests in cybersecurity companies, often drawing founders from the intelligence community. Closely comparable to Merlin Ventures' cyber-investment thesis and the broader ecosystem model, though DataTribe leans more foundry/incubation and less on compliance and GTM services.
- Carahsoft Technology: Largest government IT distributor and value-added reseller in the U.S. public sector market, providing a channel for cybersecurity and emerging-tech vendors to reach federal, state, and local agencies. Directly comparable to Merlin Cyber's GTM engine and CGC's marketplace model, though Carahsoft is broader in scope and purely channel-based without an investment or compliance arm.
- Ballistic Ventures: Venture capital firm exclusively focused on early-stage cybersecurity companies, founded by veteran security operators. A direct peer to Merlin Ventures within the cyber-venture category, though Ballistic is a pure financial investor without the compliance platform or GTM services layer.
Emerging players
- Govini: Data and analytics platform for the federal market, helping government and industry navigate defense and civilian procurement. Adjacent to Merlin's positioning — both target the federal buyer — but Govini focuses on market intelligence and contract analytics rather than cyber GTM, compliance, and investment.
- Shift5: Cybersecurity and operational technology (OT) analytics company serving U.S. military and critical infrastructure operators, with a heavy focus on DoD and federal transportation. Comparable to Merlin Cyber's critical infrastructure and defense customer set, though Shift5 is a portfolio-style technology company rather than an ecosystem enabler.
- Rebellion Defense: Defense technology company building AI-driven software products for the U.S. military and government. Comparable in its federal cyber and mission-tech focus and the kind of dual-use narrative that Merlin Ventures targets, though Rebellion is a product company rather than an investor/compliance/GTM platform.
Broad incumbents
- Booz Allen Hamilton: Major federal consulting and engineering firm with one of the largest federal cyber practices in the U.S. Overlaps with Merlin Group on government cyber advisory, Zero Trust, and critical infrastructure protection work, but operates as a publicly-traded, multi-billion-dollar incumbent rather than a focused ecosystem.
- Leidos: Large federal systems integrator serving defense, intelligence, and civilian agencies with significant cyber, IT modernization, and FedRAMP-relevant practices. Overlaps with Merlin Group across government cyber and critical infrastructure, but operates at substantially greater scale as a public, multi-billion-dollar contractor.
- ManTech International (now part of CACI): Federal IT and cyber services provider (acquired by CACI in 2022) with deep footprint across DoD, intelligence, and federal civilian cyber missions. Comparable to Merlin Cyber in the federal cyber services space, but a much larger, public-market incumbent with broader agency relationships.
- Accenture Federal Services: Federal arm of Accenture, providing large-scale cyber, IT modernization, and digital transformation services to U.S. government agencies. Comparable to Merlin Cyber in public-sector GTM and Zero Trust modernization services, but a vastly larger, publicly-traded incumbent that competes for the same agency contracts and cyber talent.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights6 records
Customer concentration
Merlin Group social profiles
Digital presenceMerlin Group compliance and trust
Trust signalCompliance2 records
Merlin Group financial estimates
Financial estimateRevenue estimate
Valuation estimate
Merlin Group leadership team
Management profileNumber of profiles
Profiles12 records
Merlin Group subsidiaries and ownership
Company hierarchySubsidiaries4 records
Merlin Group funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Merlin Group M&A and investment
M&A and investmentM&A
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Merlin Group
What does Merlin Group do?
Merlin Group is a network of affiliates that invests in, enables, and scales cybersecurity technology companies for the U.S. Government and critical infrastructure markets. Its core offerings span venture capital funding for early-stage cyber innovators (Merlin Ventures), a FedRAMP/StateRAMP compliance acceleration platform and online marketplace (Constellation GovCloud), and public-sector go-to-market sales, marketing, technical, and government-affairs services (Merlin Cyber), supplemented by Merlin Labs validation services.
Is Merlin Group a public or private company?
Merlin Group is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Merlin Group founded?
Merlin Group was founded in 1994.
Where is Merlin Group based?
Merlin Group is headquartered in Tysons Corner, United States, in the North America region.
How does Merlin Group make money?
Four revenue lines are on record. Merlin Ventures – Early-Stage Venture Capital is the primary driver. The others are CGC Compliance Acceleration Platform, merlin Cyber – Go-to-Market Services and merlin Labs – Innovation Lab Services.
Who are Merlin Group's main competitors?
Direct peers on record are DataTribe, Carahsoft Technology and Ballistic Ventures. Emerging players are Govini, Shift5 and Rebellion Defense. Broad incumbents are Booz Allen Hamilton, Leidos, ManTech International (now part of CACI) and Accenture Federal Services.
Does Merlin Group have an API?
No public API is recorded for Merlin Group.
What industry is Merlin Group in?
Merlin Group's product category is Government Cybersecurity Services. Its primary akta.pro industry code is BPAHADAI, Strategic Partnerships, Alliances & JVs Advisory. Its NAICS code is 5416 and its SIC code is 8742.