The Federal Integrators

On Jun 18, 2026, Accenture announced it would take a majority stake in Dragos and acquire all of runZero and NetRise in a roughly $4.1–4.2B push into operational-technology (OT) cybersecurity — valuing Dragos alone at about $3.25B and folding the three under Dragos CEO Robert Lee (deals expected to close Aug–Sep 2026). The combined unit is projected at ~$208M ARR as of Jun 2026 (+~53% YoY), aimed at an OT-security market Accenture sizes at ~$27B in 2026 → ~$59B by 2031 (~16% CAGR). The deal illustrates how the government-services world captures cyber value: a global integrator that sells services to critical-infrastructure and government clients reached into the software layer by acquisition — buying a certified, vendor-neutral OT platform rather than building it. The federal integrators are a distinct, certification-gated buyer-and-target universe with their own economics.

Where integrators sit: between appropriation and technology

Government rarely buys security software directly off a price list. It buys outcomes — a defended network, an authorized cloud, a modernized weapons system — through large prime contractors who assemble labor, technology, and clearances into a deliverable under a multi-year contract vehicle. The integrator is therefore the layer where the federal cyber appropriation (14) converts into spend. That position has three consequences: (1) the integrators are large, stable revenue bases ($7–17B each) with multi-year backlog, which makes them resilient acquirers and steady sub-contract demand for smaller certified firms; (2) their moat is cleared talent, contract vehicles, and certifications (16d), not product IP, so they buy product when they need it (the Accenture pattern); and (3) they are counter-cyclical to commercial cyber but exposed to appropriation and administration risk — the variable that dominated the group in 2025–26.

The integrators: what each is and how it makes money

Leidos (NYSE: LDOS; FY2024 revenue $16.7B, +8%, fiscal year ended early Jan 2025) is the largest pure-play federal services prime, spanning defense, intelligence, civil, and health. Its cyber work is woven through IT modernization and digital-modernization contracts rather than sold as a branded product; it makes money on cost-plus and fixed-price labor at scale, with margin leverage from higher-value digital and solutions work.

Booz Allen Hamilton (NYSE: BAH; FY2025 revenue $12.0B, +12.4%, fiscal year ended Mar 31 2025) is the consulting-led integrator — heavily exposed to defense and the IC, and the group's most aggressive in AI and advanced cyber. Its model is high-end advisory plus engineering delivery; it also runs a venture arm (Booz Allen Ventures) that takes early stakes in dual-use and cyber startups, giving it an acquisition-funnel view few peers have.

General Dynamics Information Technology (GDIT) is the federal-IT arm of General Dynamics' Technologies segment (a ~$13B segment overall). GDIT competes on large enterprise-IT and infrastructure-modernization vehicles; cyber appears as zero-trust, network-defense, and managed-security delivery embedded in those programs.

CACI International (NYSE: CACI; FY2025 revenue $8.6B, +13%, fiscal year ended Jun 30 2025) leans toward technology and "expertise" work for defense and intelligence — signals, electronic warfare, secure communications, and software. It is among the more product-and-technology-weighted integrators, which has supported faster organic growth.

SAIC (NASDAQ: SAIC; FY2025 revenue $7.48B, ~+3.1% organic, fiscal year ended Jan 31 2025) is a pure government-IT and digital-engineering prime spun out of the old SAIC/Leidos split; it competes on enterprise IT, cloud migration, and mission engineering across defense and civilian agencies.

Peraton (private; Veritas Capital) is a defense-and-intelligence prime assembled by roll-up (Northrop's IT/mission-support carve-out, Perspecta). Its 2025–26 story is instructive: Veritas is no longer expected to take Peraton public, as federal-services valuations cratered from their late-2024 highs amid budget uncertainty — a direct read on how administration risk re-prices the whole group's exit math.

ManTech (private; Carlyle, taken private 2022) and Parsons (NYSE: PSN) round out the cyber-relevant set, alongside BAE Systems (gov electronics/IT) and the defense-tech crossover names — Palantir (gov analytics) and Anduril (autonomy/defense) — that increasingly compete for the same mission budgets (14).

Why the integrators buy cyber rather than build it

The integrator moat is access, not product: cleared people, prime positions on contract vehicles (GSA, GWACs, SEWP), and authorizations (FedRAMP, IL4/IL5, CMMC — 16d). That makes them structurally short differentiated technology and structurally long distribution into the government. The recurring deal pattern is to acquire a certified or category-leading product company and push it through the integrator's distribution. Accenture–Dragos is the headline 2026 version (services-prime buys OT software platform); the same logic drives smaller bolt-ons across the group, which is why a sub-scale-but-certified cyber product company with government traction is a natural integrator target. The offsetting risk is disintermediation: as commercial platforms (CrowdStrike, Palo Alto, Microsoft GCC High, Zscaler) achieve FedRAMP/IL authorization themselves, they can sell more directly, compressing the integrator's reseller margin and pushing integrators further up into AI/mission engineering to defend value.

Falsifiable bear case

(1) Appropriation and administration risk is real and was realized. In 2025 the administration tasked the Department of Government Efficiency (DOGE) with cutting roughly $65B of consulting spend and explicitly named Leidos, Booz Allen, SAIC, and CACI; thousands of contracts were flagged "non-mission-critical," William Blair downgraded the group, and Peraton's IPO was shelved. The integrator thesis depends on the appropriation actually flowing — if civilian-agency budgets are cut faster than defense/IC budgets grow (14), the demand floor sags and acquirer balance sheets tighten. (2) Disintermediation by authorized platforms. If commercial vendors keep clearing FedRAMP/IL on their own, the integrator's distribution moat erodes at the product layer. (3) Labor, not technology, is the constraint. These are people businesses; a cleared-talent shortage caps growth regardless of demand, and AI that automates delivery can compress the very labor revenue the model rests on. The bull case — durable, certification-gated, counter-cyclical demand — is largely intact, but budget timing is the swing variable, and 2025–26 proved it can swing hard.

→ / angle

Sources: Accenture to acquire majority stake in Dragos, all of runZero & NetRise ($4.1B), announced Jun 18 2026 — SecurityWeek · Accenture newsroom — critical-infrastructure cybersecurity platform · Leidos FY2024 results ($16.7B) — SEC 8-K · Booz Allen FY2025 results ($12.0B) — SEC 8-K · CACI FY2025 full-year results ($8.6B) — CACI IR · SAIC FY2025 results ($7.48B) — SEC 8-K · DOGE federal-IT vendor impact / Peraton IPO shelved — TBR · Federal services downgrades on DOGE risk — Seeking Alpha

Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.