Veris Group, LLC

Veris Group, LLC, doing business as Coalfire Federal, is a foreign-owned cybersecurity consulting firm and subsidiary of Coalfire Systems Inc. that operates as a prime contractor on federal cybersecurity and risk management services, competing in full-and-open procurements without set-aside designations. Coalfire Federal delivers risk management framework implementation, security controls testing, independent verification and validation, penetration testing, and incident response across civilian federal agencies from its Herndon, Virginia headquarters, with an $80.1 million GSA Federal Supply Schedule contract (SIN 54151S and 54151HACS) serving as its primary vehicle for task order placement.

Coalfire Federal's customer concentration is heavily weighted toward civilian IT and health agencies. The top five funding agencies by award count—Social Security Administration (49 awards, $52.1 million combined potential value), Defense Logistics Agency Distribution (11 awards, $14.1 million), Department of Commerce US Census Bureau (10 awards, $1.7 million), Defense Information Systems Agency (10 awards, $9.6 million), and Department of Education Office of Federal Student Aid (9 awards)—account for 47% of recent awards across a 53-agency footprint. When ranked by potential value, GSA Federal Acquisition Service (7 awards, $149.9 million) emerges as the dominant customer, largely because it aggregates ordering activity across the Federal Supply Schedule vehicle itself; SSA remains the second-largest by dollars. This ranking split reflects the vendor's dual revenue model: direct MAS task orders to civilian agencies and centralized GSA contracting activity. Recent capability work includes a $2.9 million Peace Corps Information Assurances Support Services delivery order (February 2026, MAS vehicle, time and materials, Herndon performance), a $4.1 million NIH Advanced Research Projects Agency for Health Risk Management Framework Services task order (September 2024, HHS OCIO RMF BPA, firm fixed price), a $3.1 million Department of Health and Human Services Office of the Director Security Assessment and AI Pilot BPA call (September 2025, firm fixed price, Westlake, Maryland performance), and a $5.5 million Social Security Administration cybersecurity and risk management support services task order (September 2022, MAS vehicle, firm fixed price).

The vendor's vehicle footprint centers on civilian IT procurement instruments. The Multiple Award Schedule carries 70 task orders valued at $186.1 million combined potential value, followed by Information Technology Schedule 70 (29 task orders, $17.6 million), the 8(a) STARS III GWAC (22 task orders, $21.1 million), Indefinite Delivery Contract SS001260092 (21 task orders, $19 million), and the HHS Office of the Chief Information Officer Risk Management Framework BPA (10 task orders, $17.7 million). Activity has been uneven—nine awards in 2022, three in 2023, nine in 2024, five in 2025, and three through early 2026—with eight awards (combined potential value $18.9 million) facing ultimate completion in the next twenty-four months and therefore subject to recompete.

Service Contract Inventory reporting shows SCI-reportable invoiced revenue of $6.3 million in FY2022, $8.4 million in FY2023, and $10.6 million in FY2024, across 24.0, 34.0, and 42.6 FTEs respectively. On federal services contracts captured in SCI, government-paid hourly rates ranged from a 10th percentile of $97.16/hr to a median of $114.90/hr and a 90th percentile of $187.07/hr. The GSA Schedule labor portfolio spans 20 categories from Consultant I at $103.70/hr (associate degree, one year experience) through Subject Matter Expert IV at $268.50/hr (bachelor's degree, ten years experience), with mid-spectrum roles including Security Engineer II at $145.43/hr and Penetration Tester III at $190.16/hr; no security-cleared positions are offered. Across SCI-reportable prime contracts, subcontractors accounted for an average of 11% of total contractor hours, with 17 named subcontractors engaged. The vendor operates as a 90% prime contractor footprint (171 of 191 awards) and names ATG Innovations LLC, an Economically Disadvantaged Women-Owned Small Business, as a recurring subcontractor for security control assessor and cybersecurity support services across multiple HHS component awards. Outside its prime work, Coalfire Federal subcontracts to Accenture Federal Services (financial management and student aid system support), KBR Wyle Services (cyber assessment and engineering), General Dynamics Information Technology (healthcare system hosting), and L3Harris Technologies (security control assessment).

Veris Group is a services firm with a focus on providing information assurance and cybersecurity services to organizations. We deliver Risk, Security, and Compliance services as well as Information Technology and Program Management solutions.