Guidepoint Security LLC

Guidepoint Security LLC, a Virginia-based cybersecurity solutions vendor, operates as a prime contractor (71% of recent awards) and subcontractor on federal IT infrastructure modernization, cybersecurity advisory, and software licensing work across the Department of Defense, civilian agencies, and homeland security customers. The company competes in the open federal procurement market with no small business set-aside designations.

Guidepoint's federal footprint centers on a single dominant vehicle: a $979.38 million single-award Blanket Purchase Agreement with Naval Information Warfare Systems Command, awarded July 14, 2023, and running through September 4, 2032. This BPA authorizes comprehensive cybersecurity advisory, assessment, authorization, and engineering capabilities across threat intelligence, vulnerability management, security testing, identity management, and security operations domains. The vehicle has generated dozens of task orders across multiple Department of Defense components since award. Beyond the NIWS BPA, Guidepoint holds positions on Alliant II (30 task orders), the GSA Multiple Award Schedule (17 task orders, $6.5 million combined potential value), and the Blanket Purchase Agreement N6600123A0054 (17 task orders, $2.9 million combined potential value).

Customer concentration is heavily skewed toward the Navy Information Warfare Systems Command, which represents $981.1 million (or 99% of combined potential value) across five awards — nearly all of that anchored to the single BPA vehicle. The Department of Justice Federal Bureau of Investigation Headquarters Division follows distantly at 17 awards and $5.7 million combined potential value. The top five customers by award count cover only 35% of awards, indicating broader federal reach: Department of Homeland Security Cybersecurity and Infrastructure Security Agency (26 awards), FBI Headquarters (17 awards), the Centers for Disease Control and Prevention (6 awards), Naval Sea Systems Command (6 awards), and Defense Information Systems Agency (6 awards). Service work spans across 70 distinct customer agencies, though most dollars concentrate at the Navy.

Guidepoint's capability portfolio is dominated by software licensing renewals and maintenance support, particularly for F5 security solutions (BIG-IP, authentication systems, and premium support modules). Representative prime work includes a $950 thousand DISA BPA call for F5 cybersecurity solutions (June 2026), a $267 thousand Air Force Global Strike Command order for eleven new F5 licenses and service agreements through February 2028, and a $241 thousand Naval Sea Systems Command purchase order for Spirion sensitive data manager subscriptions and professional services (July 2023). The vendor also delivers vulnerability assessment platforms (Pentera, Qualys), identity and access management software (Keeper Security, Secret Server), and application security testing tools (Burp Suite Enterprise). Civilian agency work includes a $720 thousand DISA delivery order under GSA Multiple Award Schedule for operational cybersecurity services at Fort Meade (December 2023) and a $77 thousand delivery order from the Office of Technology Services and Innovation for zero-trust assessment professional services (April 2023, closed-out April 2024).

Award activity has grown from four awards in 2022 to thirty in 2024, with a recent slight pullback to thirteen awards in 2026 year-to-date. Nine awards carrying combined potential value of $1.1 million face ultimate completion inside the next twenty-four months, presenting modest recompete exposure. Combined potential value across all 173 awards (prime and sub) totals $1.01 billion, though only $62.1 million (6%) is obligated, reflecting the preponderance of software licensing renewals and maintenance contracts with long-tail performance periods.

In its subcontractor role, Guidepoint delivers software subscriptions, cybersecurity consulting, and F5 technical support to major primes including CACI Inc. Federal (extensive CDM Defend Group A Bridge task orders for software COTS), Booz Allen Hamilton (CDM Defend Group BD Bridge and distance-learning support), Salient CRGT Inc. (EPA Enterprise Support Services and Endpoint Technology), Viasat Inc. (cybersecurity support for ArcLight 2 hubs), Science Applications International Corporation (NORAD USNORTHCOM IT Enterprise Services), ManTech Advanced Systems International (CDM Defend Group E and HUD OIG software), and Massachusetts Institute of Technology Lincoln Laboratory (software subscriptions). These sub relationships cluster around cybersecurity infrastructure modernization and endpoint technology programs.

Service Contract Inventory data captures limited visibility into Guidepoint's service-contract activity: $1 million in SCI-reportable invoiced amounts across five total records (two prime, three sub), spanning FY2022–FY2025. Prime SCI records show $661 thousand invoiced in FY2022 (2.0 FTEs) and $343 thousand in FY2023 (1.0 FTE), with zero FTE delivery in FY2024 and FY2025 on SCI-reportable primes. Government-paid rates on prime records run consistently around $161/hr (median), reflecting labor-hour or blended service delivery. This SCI footprint is a narrow slice of the vendor's federal services activity; the majority of Guidepoint's federal work — software licensing, maintenance renewals, and product subscriptions — falls below or outside the SCI reporting threshold.

Guidepoint Security LLC operates as a subsidiary of Guidepoint Security Holdings, LLC, a parent organization also engaged in federal contracting. The vendor's corporate structure includes a named subsidiary, Guidepoint Security Government Solutions LLC, though the source does not specify subsidiary-specific capability splits or operational independence. As a parent-subsidiary entity, Guidepoint has built significant federal experience delivering cybersecurity solutions from leading vendors (F5, Keeper Security, Burp Suite, Qualys, Pentera, Checkmarx) and established itself as a standard feeder to larger defense primes on cybersecurity infrastructure and endpoint protection modernization programs.