DuoCircle and the CIS CyberMarket
DuoCircle is a vendor in the Center for Internet Security (CIS) CyberMarket, the collaborative purchasing program that gives U.S. State, Local, Tribal, and Territorial (SLTT) government agencies access to vetted cybersecurity products at group-buying prices. CIS reviews the suppliers and the products; member agencies skip the per-vendor negotiation and get standardized terms.
Two DuoCircle products sit inside the CIS catalog:
- DMARC Report. Active CIS partnership. DMARC monitoring, enforcement guidance, and the Done With You enforcement service, all at CIS-discounted rates.
- Phish Protection. CIS-reviewed inbound email security. Available at CIS-discounted rates on a self-pay basis.
What changed in 2026
Federal funding for the CIS CyberMarket subsidy program has been wound down. Agencies that previously had their CyberMarket fees paid through the federal subsidy will transition to self-pay to keep the same products in place.
The catalog itself, the vetting, and the CIS-discounted pricing did not go away. DuoCircle’s CIS partnership for DMARC Report is intact, Phish Protection remains CIS-reviewed, and SLTT agencies can still procure both at the discounted rates through the CIS path. The change is who pays, not what’s available.
If you were a subsidy-funded customer, the practical question is: are you still getting value out of DMARC monitoring or Phish Protection? If yes, the cleanest path is to switch the same account to self-pay at the CIS-discounted rate. We’ll help you do that with no contract gymnastics.
Talk to a DuoCircle expert about transitioning your account, or about starting fresh as an SLTT agency.
Why SLTT was a fit in the first place
The SLTT customers CIS aggregated, small municipalities, county agencies, school districts, tribal governments, were exactly the kind of organizations standard enterprise vendors didn’t take seriously: small budgets, real cybersecurity exposure, no patience for procurement gauntlets. That is the same engagement gap DuoCircle was founded to address. CIS was a clean path to reach those customers, and they remain a real customer segment for us with or without the subsidy.
What customers said
Outside the SLTT program but in the same operating mode, here’s how a current customer (with explicit permission to be quoted) describes working with us:
“Our customers needed something that just worked. DuoCircle is easy to work with and willing to make it happen. Their solution is solid.”
Dennis Schroder, President and CEO, Arakÿta
The full case study is at Arakÿta Case Study.
How we engage
The engagement model is the same one that’s run since 2014:
- Experts, not sales reps. When you call DuoCircle, the person who picks up will be technical and able to make decisions.
- Direct-to-customer. No managed channel program in the way; you talk to us, not through a value-added reseller layer.
- 24/7 live support and SLA across all products. This is the founding-charter promise; it still applies.
- Friction-free trust posture. SOC 2 Type 2 audited annually since 2022 (Hancock Askew & Co). The Bonterms Mutual NDA is published publicly; sign it and the report comes back the same day. No procurement runaround.
Talk to an Expert about email security for your agency.