Cycurion, Inc.

Basis of Presentation

The accompanying unaudited consolidated condensed financial statements are presented in conformity with generally accepted accounting principles in the United States of America (“GAAP”) and pursuant to the rules and regulations of the SEC. Accordingly, they do not include all of the information and footnotes required by GAAP for audited financial statements. In the opinion of management, the unaudited consolidated condensed financial statements reflect all adjustments, which include only normal recurring adjustments necessary for the fair statement of the balances and results for the periods presented. The interim results for the three and six months ended June 30, 2025 are not necessarily indicative of the results to be expected for the year ended December 31, 2025 or for any future interim periods.

The accompanying unaudited consolidated condensed financial statements should be read in conjunction with the Company’s audited financial statements and notes thereto, included in the Annual Report on Form 10-K filed with the SEC on April 17, 2025.

Principles of Consolidation

These financial statements include the accounts of Cycurion, Inc. (f/k/a KAE Holdings, Inc.; f/k/a Cyber Secure Solutions, Inc.) and its wholly owned subsidiaries: Axxum, Cloudburst, Cycurion Innovation and SLG Innovation Inc. (“SLG”). All significant inter-company balances, fees, and expenses have been eliminated in consolidation.

Segment Information

Our Chief Executive Officer (“CEO”) is the chief operating decision maker who reviews financial information on a consolidated basis for purposes of allocating resources and evaluating financial performance. Accordingly, we determined we operate in a single reporting segment.

Our CEO assesses performance and decides how to allocate resources primarily based on consolidated net income, which is reported on our Consolidated Statements of Operations. Total assets on the Consolidated Balance Sheets represent our segment assets.

Reclassification

Certain amounts have been reclassified to improve the clarity and comparability of the financial statements. These reclassifications had no impact on previously reported total assets, liabilities, equity, net income (loss), or cash flows for any periods presented.

Emerging Growth Company

The Company is an emerging growth company as defined in Section 102(b)(1) of the Jumpstart Our Business Start-ups Act of 2012 (the “JOBS Act”) which exempts emerging growth companies from being required to comply with new or revised financial accounting standards until private companies (that is, those that have not had a Securities Act registration statement declared effective or do not have a class of securities registered under the Exchange Act) are required to comply with the new or revised financial accounting standards. The JOBS Act provides that an emerging growth company can elect to opt out of the extended transition period and comply with the requirements that apply to non-emerging growth companies, but any such an election to opt out is irrevocable. The Company has elected not to opt out of such extended transition period, which means that when a standard is issued or revised, and it has different application dates for public or private companies. The Company, as an emerging growth company, can adopt the new or revised standard at the time private companies adopt the new or revised standard.

This may make comparison of the Company’s financial statements with another public company that is neither an emerging growth company nor an emerging growth company that has opted out of using the extended transition period difficult or impossible because of the potential differences in accounting standards used.

Use of estimates

The preparation of financial statements in conformity with GAAP, requires management to make estimates and assumptions that affect the reported amounts of assets, liabilities, and disclosures regarding contingent liabilities at the date of the financial statements. These estimates may affect the reported amounts for certain revenues and expenses incurred during the reporting period; actual results may materially differ from these estimates.

Cash and Cash Equivalents and Restricted Cash

Cash and cash equivalents include cash on hand, deposits in banks, and any investments with maturities with less than three months from inception to maturity.

Common Stock Subject to Possible Redemption

The Company accounts for its common stock subject to possible redemption in accordance with the guidance in ASC 480. Shares of common stock subject to mandatory redemption (if any) are classified as a liability instrument and are measured at fair value. Conditionally redeemable common stock (including common stock that features redemption rights that are either within the control of the holder or subject to redemption upon the occurrence of uncertain events not solely within the Company’s control) is classified as temporary equity. At all other times, common stock is classified as stockholders’ equity. The Company’s shares of common stock sold in the initial public offering of Western feature certain redemption rights that are considered to be outside of the Company’s control and subject to occurrence of uncertain future events.

Accounts Receivable

Accounts receivable is stated at the original amount less an allowance for credit losses.

Accounts receivable is recognized in the period when the Company has provided services to its customers and when its right to consideration is unconditional. ASC 326 introduces an approach based on expected losses to estimate the allowance for credit losses, which replaces the previous incurred loss impairment model. The Company’s estimation of allowance for credit losses considers factors such as historical credit loss experience, age of receivable balances, subsequent collection, current market conditions, reasonable and supportable forecasts of future economic conditions.

The Company evaluates its accounts receivable for expected credit losses on a regular basis. The Company maintains an estimated allowance for credit losses to reduce its accounts receivable to the amount that it believes will be collected. The Company considers factors in assessing the collectability of its receivables, such as the age of the amounts due, the customer’s payment history, credit-worthiness and other specific circumstances related to the accounts. If there is strong evidence indicating that the accounts receivable is likely to be unrecoverable, the Company also makes specific allowance in the period in which a loss is determined to be probable. Accounts receivable balances are written off after all collection efforts have been exhausted.

The Company also assessed the creditworthiness and solvency of its customers as of June 30, 2025 and December 31, 2024 and has determined that those customers were unlikely not to settle their balances in full; accordingly, as of June 30, 2025 and December 31, 2024, the Company’s estimated allowance for credit losses was both zero.

Property, Plant, and Equipment

Property and equipment are recorded at cost less accumulated depreciation and amortization. Depreciation and amortization is recorded over the assets’ estimated useful lives using the straight-line method, which isthree tofive years for furniture and equipment, one year for capital leases andthree years for software. Leasehold improvements are amortized over the shorter of their useful life or the remaining term of the lease. Repairs and maintenance costs are expensed as incurred.

Goodwill

Goodwill represents the excess of the purchase price over the fair value of the net tangible and identifiable assets acquired in a business combination. Goodwill is reviewed for impairment annually during the fourth quarter of each fiscal year, or more frequently if impairment indicators arise. The review of goodwill impairment consists of either using a qualitative approach to determine whether it is more likely than not that the fair value of the assets is less than their respective carrying values or a one-step quantitative impairment test. In performing the qualitative assessment, we consider many factors in evaluating whether the carrying value of goodwill may not be recoverable. If, based on the results of the qualitative assessment, it is concluded that it is not more likely than not that the fair value of a reporting unit exceeds its carrying value, additional quantitative impairment testing is performed. The quantitative test requires that the carrying value of each reporting unit be compared with its estimated fair value. If the carrying value of a reporting unit is greater than its fair value, a goodwill impairment charge will be recorded for the difference (up to the carrying value of goodwill). Fair value is generally determined using a discounted cash flow analysis. During the three and six months ended June 30, 2025 and 2024, no impairment of goodwill was recognized.

Software Development Costs

The Company is undergoing new Software as a Service (“SaaS”) product development based on an acquired SaaS platform in previous years, which has not been utilized in its original form. Cost from the acquired SaaS platform, functionalities and modules and the redesigned features of the distinct new SaaS product are accounted for under ASC 985-20 (Costs of Software to Be Sold, Leased, or Marketed). Development costs were capitalized as “Software Development in Progress” after achieving technological feasibility.

Accounting for long-lived assets

The Company annually reviews its long-lived assets for impairment or whenever events or changes in circumstances indicate that the carrying amount of assets may not be recoverable. Impairment may be the result of becoming obsolete from a change in the industry or new technologies. Impairment is present if the carrying amount of an asset is less than its undiscounted cash flows to be generated.

If an asset is considered impaired, a loss is recognized based on the amount by which the carrying amount exceeds the fair market value of the asset. Assets to be disposed of are reported at the lower of the carrying amount or fair value less costs to sell.

Bank loans

The Company accounts for borrowings from banks as either current or long-term borrowings. Origination and closing costs for long term borrowings are accounted for using the effective interest method and accreted to the Company’s outstanding balances owed over the life of the long-term loan, and the related interest expense is recognized to the results of operations.

Revenue recognition

The Company adopted ASC Topic 606, Revenue from Contracts with Customers. Revenue from contracts with customers is recognized using the following five steps:

In applying ASC 606, the Company will recognize revenue when the Company has negotiated and formalized the terms of the transaction in the form of written contracts with their customers that set forth the sales price, the scope of services to be delivered by professional technology infrastructure and cyber engineers measured in hours, accompanied by hourly billing rates, and payment terms; typically, the performance obligations in the contract are the delivery of service hours; when the Company has obtained evidence that the service has been delivered and the performance obligations have been fulfilled, it will record revenue and either recognize an asset such as accounts receivable or decrease deferred revenue from its liabilities.

Management has determined that its services business can be segregated into four lines of business. Each line of business has its own methodology for recognizing revenue.

Advisory Consulting

The Company enters into service agreements with customers that will set forth the responsibilities of both parties, including the type of service to de delivered, the timing of the delivery of those services, and the associated price per unit for such services. The unit of measure in the agreement is typically hours. The advisory consulting services represent a single performance obligation, as they constitute a series of distinct hourly services that are substantially the same and transferred to the customer over time. The revenue from advisory service agreement will also set forth the timing of payments by the customers which is typically between 60 and 90 days from the date that an invoice is issued to the customer. The Company issues invoices when management has received acknowledgment from the customer that it has rendered service as measured in hours to the customer. As a practical matter, the Company continuously delivers service to customers, and the customer receives benefits from those services over time. The revenue advisory consulting is recognized over time as services are rendered, based on contractual hourly rates, and when the Company has received the aforementioned acknowledgement from its customers that service has been rendered related to hours accumulated over period of time, such as a week, or two weeks, or a month, which is determined on a customer by customer basis. The Company’s contracts do not include terms for returns, or warranties, or guarantees, or rebates, or discounts on the services rendered. The company also enters into annual contracts with customers to provide ongoing advisory and consulting services. Services are delivered continuously over the contract term and customers are billed periodically. The annual service contract represents a single performance obligation because the services are a series of distinct, substantially similar acts that are inseparable and transferred over time. Revenue is recognized over time straight-line over the contract term.

Managed Security Service Practice (MSSP)

Management has determined that its managed security service practice is a bundle of cybersecurity software tools, and expert 24x7x365 monitoring and breach resolution service that is accounted for as a single performance obligation that is delivered over time which is typically a month; the components of the bundle have individual commercial value; however, management believes assigning stand-alone value to each component is impractical because each component would not be able to be fully implemented or utilized if not packaged with the other components; therefore, management believes the MSSP can only be sold as a bundle package over time. At the time that the Company recognizes revenue it is has either already received funds in advance from its customer, or it is reasonably assured that it will collect funds from its customer; in the event that funds that are received in advance, they are accounted for as contract liabilities in the deferred revenue account until the Company fulfills the performance obligation; a majority of the Company’s contracts call for the Company to first deliver service and collect fees thereafter; the Company typically receives payment for these contracts within thirty to ninety days of delivery of service. The Company does not sell monitoring time, security software-tools, and breach resolution as stand-alone services, as the customer would not receive the benefits of these items if they were not sold as an integrated package. The cybersecurity needs to monitor the customer cybersecurity environment regularly, stay up to date on cyberthreats and solutions, maintain its software tools, and then address threats identified, or rectify situations when customer environments have been breached. It is not practical or viable to sell these components separately, as customers expect comprehensive solutions. While the components are separately identifiable, management does not believe they could market the components individually. The Company’s management does not believe their customers can benefit from the individual components alone, and there are not readily available resources in the market that can be obtained to make those components viable. The continuous monitoring allows the Company to identify and either neutralize and or rectify breaches by having up to the minute first-hand information, and the tools allow the Company to implement solutions rapidly; the absence all of the components would render the solutions and service offering significantly devalued and non-competitive in the marketplace.

The Company believes MSSP meets the criteria to combine the goods and services under a single performance obligation. The Company believes combined integrated solution is delivered continuously over a period of time; in accordance with the terms of the contract between the Company and its customers, the Company receives prepayments in advance from its customers, and recognizes those payments to revenues over a period of time, which is typically each month.

Managed Service Provider (MSP)

The Company’s managed service provider (MSP) service offering is the provision of IT infrastructure support to customers, specifically in the areas of desktop support, on-site troubleshooting, and cloud-based network infrastructure troubleshooting. This service is accounted for as a single performance obligation that is delivered over time, which is typically a month; At the time that the Company recognizes revenue, it either already received funds in advance from its customer, or it is reasonably assured that it will collect funds from its customer; in the event that funds that are received in advance, they are accounted for as contract liabilities in the deferred revenue account until the Company fulfills the performance obligation; a majority of the Company’s contracts call for the Company to first deliver service and collect fees thereafter; the Company typically receives payment for these contracts within thirty to ninety days of delivery of service.

MSP requires the integration of tools and labor in order for a customer to receive any benefit from the services provided. The Company refers to the guidance in ASC 606-10-25-19 to provide an analysis regarding this accounting recognition of this integrated service. Under MSP, the customer cannot receive any benefit purely from labor or individual software tools as a stand-alone service. The tools that the Company deploys require engineers to decipher results and develop solutions to problems during the service period covered in a contract.

While components can be separately identified, they must be used in conjunction with each other to serve the Company’s customers. The Company must continuously make available support engineers to customers whenever they need support and troubleshooting. The service includes remote resolution of issues or going onsite to customer locations to solve problems. The Company’s contracts with customers require the Company to have these resources available during the length of the contract; therefore, these services are continuously delivered as a service over time; accordingly, the Company recognizes revenue for such MSP contract on a monthly basis.

Software as a service (SaaS)

Management has determined that its software as a service is a suite of cybersecurity tools that are delivered either remotely or on customer premises. The service is delivered on a monthly basis. The cybersecurity tools are typically sold as a package; however, the individual components of the suite of tools can either be sold individually or bundled together. Nevertheless, if they are sold individually, or as a bundle, they are all delivered over time; accordingly, the Company recognizes revenue over time, which is typically monthly; At the time that the Company recognizes revenue it is has either already received funds in advance from its customer, or it is reasonably assured that it will collect funds from its customer; in the event that funds that are received in advance, they are accounted for as contract liabilities in the deferred revenue account until the Company fulfills the performance obligation ; a majority of the Company’s contracts call for the Company to first deliver service and collect fees thereafter; the Company typically receives payment for these contracts within thirty to ninety days of delivery of service.

The Company’s SaaS is delivered continuously over time; it is a subscription service where the Company provisions a suite of security software tools to its customers accessed via the internet that allows the customers to protect themselves from cyber-attacks using multiple tools within the suite. This subscription service is recognized to revenue monthly.

Cost of revenue

Cost of revenue primarily consists of compensation expenses for program personnel, and the fringe benefits associated with this compensation, subcontractor costs, and other direct expenses incurred to deliver services to customers.

Selling, General, and Administrative Expenses

Selling, general and administrative expenses are expensed as incurred.

Income taxes

The Company accounts for income tax using an asset and liability approach and allows for recognition of deferred tax benefits in future years. Under the asset and liability approach, deferred taxes are provided for the net tax effects of temporary differences between the carrying amounts of assets and liabilities for financial reporting purposes and the amounts used for income tax purposes. A valuation allowance is provided for deferred tax assets if it is more likely than not these items will either expire before the Company is able to realize their benefits, or that future realization is uncertain.

Earnings per share

The Company computes earnings per share (“EPS”) in accordance with ASC Topic 260, “Earnings per share”. Basic EPS is measured as the income or loss available to common stockholders divided by the weighted average number of common shares outstanding for the period. Diluted EPS is similar to basic EPS but presents the dilutive effect on a per-share basis of potential common shares (e.g., convertible securities, options, and warrants) as if they had been converted at the beginning of the periods presented, or issuance date, if later. Potential common shares that have an anti-dilutive effect (i.e., those that increase income per share or decrease loss per share) are excluded from the calculation of diluted EPS.

As of June 30, 2025, common stock equivalents were excluded from the computation of diluted net loss per share as the result of the computation was anti-dilutive (see Note 19).

Commitments and contingencies

Liabilities for loss contingencies arising from claims, assessments, litigation, fines and penalties and other sources are recorded when it is probable that a liability has been incurred and the amount of the assessment can be reasonably estimated.

Comprehensive income

Comprehensive income is defined to include all changes in equity except those resulting from investments by owners and distributions to owners. Among other disclosures, all items that are required to be recognized under current accounting standards as components of comprehensive income are required to be reported in a financial statement that is presented with the same prominence as other financial statements. The Company’s current component of other comprehensive income includes the foreign currency translation adjustment and unrealized gain or loss.

Accounting for Warrants

The Company accounts for warrants as either equity-classified or liability-classified instruments based on an assessment of the instruments’ specific terms and applicable authoritative guidance in ASC 480 and ASC 815, Derivatives and Hedging (“ASC 815”). The assessment considers whether the instruments are free standing financial instruments pursuant to ASC 480, meet the definition of a liability pursuant to ASC 480, and whether the instruments meet all of the requirements for equity classification under ASC 815, including whether the instruments are indexed to the Company’s own common shares and whether the instrument holders could potentially require “net cash settlement” in a circumstance outside of the Company’s control, among other conditions for equity classification. This assessment, which requires the use of professional judgment, was conducted at the time of warrant issuance and as of each subsequent period end date while the instruments are outstanding. Management has concluded that the Public Warrants, Private Placement Warrants, and all other warrants issued qualify for equity accounting treatment.

Recently Issued Accounting Pronouncements

In November 2024, the FASB issued ASU 2024-03, Income Statement-Reporting Comprehensive Income-Expense Disaggregation Disclosures (Subtopic 220-40): Disaggregation of Income Statement Expenses, requiring public entities to disclose additional information about specific expense categories in the notes to the financial statements on an interim and annual basis. ASU 2024-03 is effective for fiscal years beginning after December 15, 2026, and for interim periods beginning after December 15, 2027, with early adoption permitted. The Company is currently evaluating the impact of adopting ASU 2024-03.

In March 2024, the FASB issued ASU 2024-02 “Codification Improvements – Amendments to Remove References to the Concepts Statements” (“ASU 2024-02”), which contains amendments to the Codification to remove references to various FASB Concepts Statements. In most instances, the references are extraneous and not required to understand or apply the guidance. Generally, ASU 2024-02 is not intended to result in significant accounting changes for most entities. ASU 2024-02 is effective for the Company for fiscal years beginning after December 15, 2024. The Company does not expect this update to have a material impact on its financial statements.

In December 2023, the FASB issued ASU 2023-09, Income Taxes (Topic 740): Improvements to Income Tax Disclosures, which requires, among other things, additional disclosures primarily related to the income tax rate reconciliation and income taxes paid. The expanded annual disclosures are effective for our year ending December 31, 2025. The Company is currently evaluating the impact that ASU 2023-09 will have on the consolidated financial statements and whether the Company will apply the standard prospectively or retrospectively.

The Company has considered all other recently issued accounting pronouncements and does not believe the adoption of such pronouncements will have a material impact on its financial statements.