Post-quantum migration is becoming something federal agencies buy from their integrators, not from standalone crypto shops.

On October 5, 2026, Science Applications International Corp. (NASDAQ: SAIC) said it had closed its acquisition of Information Security Corporation, a 30-year-old provider of PKI, encryption, and credential management software. SAIC called it a “strategic tuck-in acquisition” and disclosed no price, multiple, or deal structure, per SAIC’s release on GlobeNewswire. Terms could not be independently verified; no SEC filing was cited in the material reviewed.

The strategic signal matters more than the undisclosed purchase price. ISC’s flagship CertAgent has sat on NSA’s Commercial Solutions for Classified Components List for more than a decade, and SAIC describes the technology as embedded across intelligence and defense identity systems. These integration and PQC claims trace entirely to SAIC’s release, with no third-party audit of specific algorithms such as ML-KEM or ML-DSA.

This tells federal and enterprise crypto leaders where migration capability is pooling. A roughly $7.3 billion integrator is absorbing an already-accredited crypto vendor rather than building crypto-agility in-house, which points to consolidation of the independent PKI and PQC pool ahead of NSM-10 and CNSA 2.0 deadlines.

The practical takeaway: expect more undisclosed acquisitions of accredited crypto vendors, and factor a narrowing supplier field into migration planning. Buyers who assumed a competitive market for crypto-agility services should map their options now, before the primes finish absorbing them.

Source: GlobeNewswire