Vertical software32% entry signalMarket screenStructure decidesentry cost

GovCon Compliance & Clearance Management Software

Prepared 2026-09-09

The buyer population — Defence services

Base industry report for 9111 →
Establishments · CanadaA
13
with employees
Under 10 employeesA
38%
most common size: 500+

Of 13 Canadian establishments with employees, 38% have fewer than ten — an industry where large establishments carry real weight. Each of those is one potential account, before any filter for size or fit.

Entry signal — what decides who wins here

Structure decides
Structure decides One thing must be true Execution decides

The binding constraint is not executional. Being better than the incumbent does not, by itself, get you in — this one is cleared with capital, an asset, or a permission.

What you would have to beat

Raise or borrow the entry ticket, or buy an operator who has already paid it. The barrier is money rather than permission, so it yields to a balance sheet — and an acquisition is usually cheaper than a start.

How it was read
Binding constraintUNVERIFIEDentry cost — Capital — being better does not, by itself, clear it.
Measured inputsUNVERIFIEDnot applied — This is a software market. The industry’s business counts describe its BUYERS, not the market being entered, so they are left out of the signal.

This is not a probability of success, and it is not a verdict on you. No survival probability is published per market, and inventing one would be worse than saying so. What the bar reads is how much of the outcome sits inside an operator's control: green means the hurdles are ones a better operator clears, red means the binding constraint is capital, an asset or a permission rather than execution. Someone arriving with an advantage this screen did not assume can win a market shown in red.

Companies named in this market · 6

The binding constraint — entry cost

The product must be right in a way most SaaS need not be: DCAA-compliant timekeeping and indirect-rate accounting are audited, and CMMC Level 2 obliges the vendor itself to be assessed before a defence contractor may run its data. Deltek and Unanet already carry those certifications. The certification, not the software, is the barrier. Nothing is disclosed here. Every vendor named on this record is private, or sits inside a parent that does not break the line out, so no revenue floor can be built and the market size is genuinely unknown rather than estimated.

I

The incumbent

Who owns this market and who is coming for it. Fields a screen never reached say so rather than guessing.

Incumbent
Deltek Costpoint and Unanet
Scale
The two DCAA-compliant ERP and timekeeping systems most defence contractors are effectively required to use
Challengers
PROCAS, JAMIS, Exostar (identity and CMMC supply chain), Summit 7 and other GCC High integrators
Lock-in mechanism
Not assessed — screened before diligence
Price movement
Not assessed
Is the buyer consolidating?
No
V

The field

Every vendor named on this record, and what each one discloses. Most disclose nothing, which is why the market is not sized.

Competitor set · 4 named · 0 disclose revenue

NameRevenueShareNote
Deltek CostpointC not disclosed — Private; no disclosure
UnanetC not disclosed — Private
PROCAS / JAMISC not disclosed — Private
ExostarC not disclosed — Private

Nobody here publishes revenue. The market is not sized for that reason — an estimate built on nothing would only look like knowledge.

S

Startups & challengers

Newer and smaller vendors going at the incumbent — funded challengers first. Named, not researched to the depth of the field above; a company with a page here links to it.

CompanyStageWhat it doesRaised
Deltek Funded challenger Project-based ERP for government contractors, architects, engineers and agencies —

Evidence

Evidence. UNVERIFIED — screened on analyst judgment. Incumbent names and positions are from general market knowledge and were NOT independently researched for this record; no financials are attached because none were sourced. Verify before acting.

#

Where the industry talks

The associations, forums and events where people in this trade actually talk shop — where to listen before entering, and where the first customers are found. Each link was opened on the date shown.

AssociationCanadaA
Canadian Association of Defence and Security Industries (CADSI)
defenceandsecurity.ca · 1,500 members (2026-09)

Member companies ('1,500 members strong') per its Membership Overview page; the same site elsewhere says '1,700+'. The Canadian defence-contractor trade body.

Checked 2026-09-22
EventCanadaA
CANSEC
defenceandsecurity.ca

CADSI's annual defence and security trade show in Ottawa (CANSEC 2027 next); the site says it draws 21,500+ industry and government attendees. Exhibiting is CADSI-members only.

Checked 2026-09-22
AssociationUSA
National Contract Management Association (NCMA)
ncmahq.org · 20,000 members (2026-09)

Individual members ('over 20,000') per its About page. Contract managers on both the government and contractor side; runs World Congress and Contract Management magazine.

Checked 2026-09-22
AssociationUSC
National Defense Industrial Association (NDIA)
ndia.org

Blocked automated access (Incapsula). Search results show it live with corporate and individual membership tiers and chapter events; the main US defence-industry association.

Checked 2026-09-22
AssociationInternationalA
AFCEA International
afcea.org · 30,000 members (2026-09)

Individual members (30,000, plus 1,700 corporate members and 140 chapters) per its About AFCEA page. Defence IT and cyber contractors; publishes Signal.

Checked 2026-09-22
AssociationUSA
Professional Services Council (PSC)
pscouncil.org

Trade association for US government services contractors; acquisition-policy advocacy and compliance events. No member count on its homepage.

Checked 2026-09-22
AssociationUSA
The Cyber AB
cyberab.org

The CMMC accreditation body; runs the ecosystem of C3PAOs, registered practitioners and the CS5 conference. Any vendor claiming CMMC readiness is assessed through this system.

Checked 2026-09-22
PublicationUSA
Washington Technology
washingtontechnology.com

Trade news for government contractors (Top 100, Fast 50, CMMC coverage); articles dated within the last day. GovCon Wire (govconwire.com) is the other daily.

Checked 2026-09-22

cansec.ca redirects to an unrelated access-control company; CANSEC's real page is on defenceandsecurity.ca. Reddit's r/govcon could not be verified by search or RSS and is omitted.