ShorePoint Acquires Coalfire Federal Contract Portfolio to Expand Cybersecurity Engineering - Analysis

ShorePoint has acquired a portfolio of federal contracts and the cybersecurity team supporting them from Coalfire Federal, the trade name of Veris Group LLC, expanding its engineering, automation and assessment capabilities. Announced November 4, the completed acquisition adds delivery capacity and customer relationships to the CM Equity Partners-backed cybersecurity provider rather than bringing the entire seller under its ownership. Coalfire Federal will continue operating independently.

The Herndon, Virginia-based buyer said the transaction adds a substantial number of prime contracts with new federal agency customers. In its announcement, ShorePoint described broader reach across federal civilian, defense, and state and local markets, alongside deeper federal risk-management and adversary-emulation expertise. The acquired professionals will join a business whose existing work includes Treasury security operations and Education Department post-quantum cryptography support.

Adding assessment depth to security operations

The transaction’s practical significance is the combination of operating cybersecurity systems with evaluating their security and compliance. ShorePoint’s Treasury work includes a shared-services security operations center, while Coalfire Federal’s award history includes information assurance for the Peace Corps and Risk Management Framework services supporting the Advanced Research Projects Agency for Health. Those assignments illustrate the assessment and risk-management disciplines behind the capabilities ShorePoint says it acquired.

This is an expansion within cybersecurity, not a move into an unrelated service line. ShorePoint already performs engineering and security operations work; the incoming team adds depth in assessing controls, managing federal security requirements and emulating adversaries. Coalfire Federal’s NIH security-assessment and AI-pilot order also shows experience at the intersection of assessment and emerging technology. That experience fits ShorePoint’s stated emphasis on AI-enabled security, although the buyer describes AI, high-performance computing security and post-quantum readiness as its own broader strategic priorities.

“Together, we can accelerate automation, engineering, and assessment at the speed that missions demand,” ShorePoint co-founder and CEO Matt Brown said in the announcement.

Procurement access provides another useful distinction. ShorePoint’s Treasury Enterprise Cybersecurity Technology & Services blanket purchase agreement has generated awarded security-operations work. Coalfire Federal’s GSA schedule contract was the ordering vehicle for its Peace Corps information-assurance award. These separate purchasing channels help explain the companies’ agency reach; the underlying orders, rather than vehicle participation alone, show actual customer engagements.

Expansion following CM Equity investment

The acquisition follows CM Equity Partners’ November 2025 strategic investment in ShorePoint. At that time, ShorePoint said it would remain a stand-alone company under its existing leadership and described the investment as supporting growth, expanded cybersecurity capabilities and new markets. Buying a contract portfolio together with its delivery team is consistent with that plan: it adds personnel and agency relationships within the company’s established specialty.

ShorePoint also has an acquisition history predating that investment. In March 2020, it acquired Cyberyllium, a data-transformation business specializing in designing, deploying and operating Elasticsearch capabilities. That earlier deal added data-platform expertise; the Coalfire Federal transaction extends the company’s assessment, engineering and risk-management capacity. The progression reflects acquisitions aimed at broadening technical delivery rather than diversifying away from cybersecurity.

Selected Government Contracts

These awards illustrate ShorePoint’s and Coalfire Federal’s work; the parties did not identify individual contracts included in the sale. Values and end dates below are potential totals and potential performance end dates.

TideLock Partners served as financial adviser to Coalfire Federal.