WhiteHawk Advances Cyber Resilience with New Contracts and AI Governance Acquisition

Federal Pilot Validates Cyber Risk Platform at Scale

WhiteHawk Limited (ASX:WHK) has secured a 90-day Cyber Risk Radar pilot with a top 10 U.S. federal systems integrator, covering approximately 400 public and private sector organisations. This engagement offers a rare opportunity to demonstrate its integrated cyber resilience capabilities across a large-scale federal environment, combining entity illumination, continuous risk monitoring and portfolio-level reporting. The pilot underlines WhiteHawk’s growing foothold in government and critical infrastructure markets, where demand for scalable, automated cyber risk solutions is intensifying.

Recurring Revenue Strengthened by Renewals and New Contracts

During the quarter, WhiteHawk invoiced US$353,000 and reported US$225,000 in receivables. The company renewed its Cyber Risk Program with a major U.S. university for a fourth consecutive year and extended a Cyber Risk Radar subscription with a major U.S. city for a second year, covering 40 entities. Additionally, a global investment firm expanded its engagement to include software-based penetration testing. WhiteHawk also secured a new Cyber Analyst Platform as a Service (CAPaaS) contract with a South Florida non-profit, supporting experiential cyber analyst education across county high schools. These developments underscore the company’s success in deepening customer relationships and broadening its service offerings.

Strategic Partnerships and Market Expansion Across Asia-Pacific

WhiteHawk has been actively building a diversified partner ecosystem to extend its market reach and simplify procurement. Notable collaborations include a strategic alliance with Adisyn Services to deliver automated cyber risk and compliance solutions across APEC markets, and preparations to list datasets and analytics on Grist Mill Exchange for allied government and commercial customers. The company is also leveraging established procurement frameworks like CAUDIT to access universities and research institutions in the Asia-Pacific region. This multi-channel approach complements WhiteHawk’s established U.S. government experience and supports its ambition to become a trans-Pacific cyber resilience provider.

Proposed Quixxi Acquisition to Expand AI Governance Capabilities

Subject to shareholder approval, WhiteHawk plans to acquire Quixxi, which would bring the Clarity AI platform into its portfolio. This acquisition aims to position WhiteHawk at the forefront of the burgeoning AI governance market by adding AI discovery, monitoring, and application intelligence capabilities. The move is expected to broaden WhiteHawk’s addressable market, accelerate recurring SaaS revenue, and enhance cross-selling opportunities across existing government and enterprise clients. The integration could also expand WhiteHawk’s international footprint and intellectual property assets.

Financials and Cash Flow Reflect Investment Phase

WhiteHawk reported a net cash outflow from operations of US$752,000 for the quarter, with average monthly operating expenditure around US$251,000. Cash and cash equivalents stood at US$332,000 at quarter-end, supplemented by an undrawn US$100,000 credit facility. Management anticipates improved operating cash flows in coming quarters, driven by revenue from recent contract wins and the potential contribution from the Quixxi acquisition. The company has a track record of successfully raising capital to support working capital needs and new contracts.

Focus on Cyber Workforce Development and Research Collaboration

WhiteHawk is expanding into cyber workforce development through its CAPaaS platform, which provides an operational learning environment for students analysing live cyber risks. The company is collaborating with Florida International University and Capital Technology University on a US National Science Foundation research proposal valued at approximately US$1.6 million. This initiative aligns with global government efforts to address the cybersecurity skills shortage and represents a scalable avenue for recurring platform adoption.