Nooks will run the security office for up to 100 DIU portfolio companies under a $146.8M ceiling

The subscription moves accreditation from a capital project to a recurring line item, and leaves adjudication where it already was. Nooks manages the physical and digital infrastructure so a customer buys capacity instead of constructing and accrediting a SCIF for every new contract or office ^[7]. The managed half covers facility and personnel clearance processes, Defense Counterintelligence and Security Agency compliance, insider-threat programs, and administration of DD Form 254, the document that defines the security requirements of a classified contract ^[9]. That is an outsourced security office: an FSO prepares, submits and tracks, but the government still decides.

So the schedule risk moves less than the floor plan does. Fast Company reported that clearances can take up to 18 months, and that some providers work with simulated information while they wait ^[14]. Pearson told the publication that fast-moving AI could be obsolete by the time a clearance arrived ^[15]. A subscription can hand a company an accredited workstation and secure video conferencing ^[6]; it cannot hand the company someone cleared to sit there. Nooks says its facilities can become operational in months rather than years ^[16], which is a claim about rooms, and rooms were never the 18-month item.

Then the money, which is smaller than the headline. A $146.8 million ceiling over four years ^[1] is $36.7 million a year ^[1]. If the caseload reaches the stated cap of 100 companies ^[8] and drawdown were even, that is about $367,000 per company per year ^[2] to cover suites, workstations, secure video, data-center capability across ten metropolitan areas ^[4], plus the security function. Whether that displaces a startup's own capital plan depends on what building and accrediting one SCIF costs, and this announcement does not give that number. The ceiling is also the maximum rather than booked revenue ^[10], and no initial obligation was specified ^[11]. A ceiling promises only the largest possible invoice, not booked revenue.

For the shared-infrastructure argument to transfer to a specific company, three things have to hold: that company is inside the selected portfolio ^[5], its people are already cleared or its work can proceed while they are not, and its per-seat subscription costs less than the build it avoids. The first is a DIU decision. The second is DCSA's. Only the third is Nooks'.

DIU signed this 24 days after the director's memo that created the Bridge Program ^[3], which says the government can move quickly when the obstacle is procurement rather than adjudication. The disclosure that would settle the rest is a published per-seat rate next to a build-and-accredit cost. With those two figures the capex argument becomes arithmetic. Without them it is a thesis with a ceiling attached.