Shorepoint LLC

Shorepoint LLC, doing business as Shorepoint Cybersecurity, is a for-profit Subchapter S corporation headquartered in Herndon, Virginia, that delivers zero trust architecture implementation, security operations center management, post-quantum cryptography, vulnerability management, and incident response services to federal civilian agencies as a prime contractor on roughly one-quarter of its awards (26%) and as a subcontractor on the remainder (74%). The vendor competes across both full-and-open and Total Small Business set-aside vehicles, with the majority of recent prime awards designated Total Small Business.

Shorepoint's customer concentration is anchored by two mega-IDV vehicles. The Department of the Treasury represents $20.1 billion in combined potential value across two awards — a $20 billion ceiling Blanket Purchase Agreement (PROTECTS) for Treasury Enterprise Cybersecurity Technology & Services established January 17, 2025, and a $100.6 million task order (Treasury Shared Services Security Operations Center) issued September 24, 2025, exercising Option Year 1 under PROTECTS with performance through September 2033. The International Development Finance Corporation and Consumer Financial Protection Bureau each hold $300 million and $126 million single-award Indefinite Delivery Contracts respectively, with combined potential values of $303.2 million and $252.2 million. Below these mega-vehicles, the vendor serves the Department of Education (10 awards, $46.6 million), the Department of Energy Chief Information Officer (13 awards, including systems support and cybersecurity strategy work), and the Department of Homeland Security Cybersecurity and Infrastructure Security Agency (13 awards across CDM and vulnerability management programs). These five customers account for 100% of combined potential value across all awards.

Shorepoint places the vast majority of its work — 48 task orders carrying $20.29 billion in combined potential value — against the GSA Multiple Award Schedule. Nineteen task orders run through Alliant II, and 22 through the IT Schedule 70. The PROTECTS BPA to Treasury carries two task orders worth $110.7 million in combined potential value. On the GSA Schedule, Shorepoint offers 50 labor categories spanning entry-level enterprise information engineers at $87.75 per hour through senior cybersecurity project managers at $436.51 per hour, all at bachelor's-degree minimum with no security-clearance requirement. SCI-reported prime invoicing totaled $17.5 million across fiscal years 2022 through 2025, with $7.9 million in FY2023, $8.6 million in FY2024, and $966 thousand in FY2022; government-paid median hourly rates on prime contracts hold steady around $157.38 per hour, with senior labor pricing through $451.81 per hour. SCI shows Shorepoint deployed roughly 13.8 FTEs in FY2022, ramped to 19.9 FTEs in FY2023, peaked at 39.8 FTEs in FY2024, and held 33.1 FTEs in FY2025.

In its subcontractor role — where 74% of awards cluster — Shorepoint operates predominantly under ECS Federal, LLC on continuous diagnostics and mitigation data services, technical engineering support, and FBI REBL cybersecurity work, and under Accenture Federal Services LLC on Department of Energy cyber strategy, policy, and operations support through the CBOSS BPA and vulnerability management work under CISA programs. Shorepoint also subs to Mantech Advanced Systems International on CDM Defend Group work and to Booz Allen Hamilton on assessment and authorization services. Across SCI-reportable prime contracts, subcontractors perform 12% of contractor hours on average; 15 named subcontractors appear across the prime footprint. Recent prime awards exemplify the capability set: a $3.5 million zero trust architecture and enterprise services call order to the Office of the Chief Information Officer under the GSA Multiple Award Schedule (closed out September 2024 with $3.5 million invoiced across 24,886 contractor hours); a $19.3 million data integration delivery order to the National Nuclear Security Administration under the GSA Schedule (running through September 2027); and a $3.2 million system owner support delivery order to IDFC under the $300 million CFESSS Indefinite Delivery Contract (running through September 2028).

Activity has accelerated markedly — seven awards in 2022 grew to 25 in 2024, followed by 20 in 2025 — with a recompete window showing only four awards (combined potential value $34.4 million) reaching ultimate completion in the next twenty-four months. The source data spans 69 total awards (prime and sub combined) across 19 customer agencies, with combined potential value of $20.84 billion but only $182.3 million obligated to date (1% of ceiling).