Mr. Ian Paterson reports

PLURILOCK SIGNS COLLABORATION AGREEMENT WITH ADGA TO SUPPORT DEFENCE SUPPLIERS PURSUING CPCSC CERTIFICATION

Plurilock Security Inc. has signed a collaboration agreement with ADGA Group Consultants Inc., a Canadian defence and security company serving the defence, public safety and critical infrastructure sectors.

Under the agreement, the companies will support Canadian organizations pursuing certification under CPCSC, the government of Canada's new cybersecurity certification program for defence suppliers. Plurilock will provide CPCSC Level 2 readiness, gap assessment, evidence collection and assessment reporting services through its critical services division. ADGA intends to establish and operate an independent certification body for CPCSC Level 2, subject to accreditation. The roles are intentionally separate, though complementary: Plurilock will not make certification decisions or represent itself as a certification authority, and the parties will maintain information barriers consistent with ISO/IEC 17024 impartiality requirements.

CPCSC sets mandatory cybersecurity controls for suppliers to Canada's defence procurement system and is designed for interoperability with allied frameworks, including the U.S. CMMC program. CPCSC requirements began being introduced into select government of Canada's defence contracts in summer 2026. Plurilock launched a CPCSC readiness program in May, 2026, building on the company's experience with CMMC in the United States. The agreement with ADGA is designed to complement that readiness work while keeping certification fully independent.

The agreement aligns with Plurilock's established federal and defence business. The company's Integra Networks subsidiary has served Canadian federal customers since 1985, and holds Canadian federal and North Atlantic Treaty Organization contracting vehicles. The government customers Plurilock serves depend on a secure supplier base, and helping that supplier base prepare for CPCSC extends the company's service to the same federal mission.

"Canada's government and its allies are raising the cybersecurity bar for every company that supplies them, and, for the defence industrial base, that deadline has arrived," said Ian L. Paterson, chief executive officer of Plurilock. "We have served Canadian federal customers for decades, and securing the supply chain those customers depend on is a natural extension of that work. ADGA is a respected Canadian defence firm, and this agreement lets us help organizations get ready while certification decisions stay entirely in independent hands."

"While CPCSC Level 2 is still ahead of us, the work of preparing industry for it starts now," said Lt.-Gen. Jean-Marc Lanthier (retired), chief executive officer of ADGA. "Our collaboration with Plurilock lets us put nearly 60 years of trust with Canada's defence and security community to work, building the certification capability our sector will need to secure its supply chain."

Financial terms of individual engagements will be established under future statements of work and were not disclosed. The agreement is non-exclusive with a two-year term.

About Plurilock Security Inc.

Plurilock is a services-led, product-enabled, artificial-intelligence-native cybersecurity company that solves complex cyber problems in high-stakes environments where failure is not an option. Trusted by Five Eyes governments, NATO-aligned agencies and Global 2000 enterprises, the company defends critical infrastructure and safeguards the systems that power modern life. Its critical services division delivers operational resilience through unmatched expertise, proprietary intellectual property and AI-driven playbooks.

We seek Safe Harbor.