Cycurion acquires Secuvant and Panoptic platform for $2.875m

NASDAQ-listed Cycurion has completed a reverse merger to absorb Secuvant and its Panoptic threat-visibility platform, targeting higher-margin recurring revenue.

concept image with risk warning brain and a real time map

Cycurion (NASDAQ: CYCU) has closed its acquisition of Secuvant, LLC, the McLean, Virginia-based managed security services firm behind the Panoptic cyber-risk management platform. The reverse merger transaction was consummated on 2 June 2026, roughly two weeks after the merger agreement was signed on 21 May, and brings Secuvant into Cycurion as a wholly owned subsidiary.

The total consideration is approximately $2.875 million, structured as $875,000 in cash and 888,888 shares of Cycurion preferred stock valued at roughly $2 million. Secuvant's former shareholders are also eligible for contingent earn-out payments across a three-year period from 2026 to 2028, comprising guaranteed annual payments of $100,000 plus performance-based amounts tied to gross profit from specified revenue streams. Any performance earn-out will be settled half in cash, half in Cycurion common stock. Ancillary arrangements include registration rights, lock-up, leak-out and escrow terms.

The deal and the platform

Panoptic is positioned by Cycurion as a continuous threat and vulnerability management platform offering intelligent risk prioritisation and real-time security analytics. Secuvant, founded in 2014, serves mid-market enterprise clients using its proprietary Cyber7 framework for managed security, threat management and compliance services. The combined company intends to cross-sell Panoptic to Cycurion's existing government and enterprise client base and to migrate the revenue mix toward SaaS-style recurring contracts.

L. Kevin Kelly, chief executive of Cycurion, said the acquisition "advances our strategy of moving into higher-margin, recurring revenue businesses while increasing the breadth and depth of products that we deliver to our clients." Ryan Layton, former chief executive of Secuvant and now an integration adviser to Cycurion, will support the transition rather than take a named executive role.

Market context

The continuous threat and vulnerability management (CTVM) category is crowded. Established vendors including Tenable, Qualys and Rapid7 dominate at the enterprise tier, while a wave of AI-augmented startups is competing on prioritisation accuracy and workflow integration. Managed security service providers (MSSPs) have increasingly acquired point-solution vendors to build platform stacks that command higher contract values and reduce customer churn — a pattern that mirrors Cycurion's stated rationale here.

The deal's modest headline price — sub-$3 million — places it firmly in the small-cap tuck-in bracket rather than a transformative platform acquisition of the kind that typically reshapes a market. That does not diminish the strategic logic, but investors should note that the earn-out structure means Secuvant's former owners retain a direct financial incentive tied to Panoptic's commercial performance, aligning integration risk with near-term revenue outcomes.

Regulatory and competitive read-across

Cycurion's government client base means the combined entity will be subject to ongoing US federal procurement compliance requirements, including FedRAMP authorisation considerations for any cloud-delivered components of Panoptic. Mid-market organisations are also navigating an expanding compliance surface — from SEC cyber-incident disclosure rules that came into force in late 2023 to sector-specific frameworks under CISA's cross-sector cybersecurity performance goals — which could broaden the addressable market for Panoptic's compliance-oriented capabilities.

The company's forward-looking statements, filed pursuant to the Private Securities Litigation Reform Act, cite integration risk, customer retention and the company's ability to commercialise Panoptic at scale as material uncertainties. Cycurion has not disclosed Panoptic's current annual recurring revenue, customer count, or net retention rate, limiting independent assessment of the platform's commercial traction at the time of closing.