It’s been 18 months since cybersecurity firm KCG expanded beyond its federal focus into commercial. Sequestration and uncertainty loomed and CEO Dusty Wince thought Fortune 500 companies would bite on the company’s high-end penetration testing and risk management services. He was right. KCG just moved into its new Reston, Va., HQ on Saturday, going from a space one mile down the road that could hold 65 people to 120. Even though most of the company's 250 employees work on customer sites, this new space allows for future expansion. Dusty says the move is partly driven by the company’s growing commercial business but government is still its biggest revenue generator. (Sure, hackers love Target, but the real prize will always be finding out who John Thune's stylist is.)

One of the first rooms to get set up was the conference room. KCG’s growth has been fueled by contracts like the $6B DHS win for Continuous Diagnostic and Mitigation (CDM) and Continuous Monitoring-as-a-service (CMaaS). KCG is one of 17 primes helping DHS secure .gov under this project. It’s also doing work for DOJ and the Education Department. The company is also seeing growth from being one of the companies able to certify cloud service providers to the government under FEDRAMP. The biggest boost has been offering a service that prepares companies for that compliance.