APRIVA Mobile Endpoint Security Architecture Virtual Private Network Follow-on Sole Source
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Defense Information Systems Agency (DISA), specifically the IT Contracting Division - PL84, has issued a Sources Sought / Notice of Intent to award a sole source contract to Apriva Information Security Systems. This contract is for Apriva Mobile Endpoint Security Architecture (MESA) Virtual Private Network (VPN) License Agreement and Engineering Support Services for the Department of Defense Mobility Classified Capability (DMCC) – Secret end user devices. The government is seeking to determine if any other sources can provide these unique services. Responses are due May 29, 2026.
Scope of Work
This requirement covers the provision of Apriva MESA VPN License Agreements and associated Engineering Support Services. These services are critical for the DMCC-Secret end user devices, which include legacy Samsung Galaxy S20 CROM, S7 Tablet CROM, Windows Data-at-Rest (DAR) Dell 7320, Windows DAR Dell 7210, HP ProBook G4, and HP ProBook G5. The Apriva MESA VPN is identified as the only VPN currently compliant with the National Security Agency (NSA) Commercial Solutions for Classified (CSfC) program and proven compatible with the existing DMCC-S Secure Mobile Device Gateways (SMDG) architecture and these legacy EUDs.
Contract & Timeline
- Type: Sources Sought / Notice of Intent to Sole Source
- NAICS: 541511 (Custom Computer Programming Services)
- Product Service Code: DA10 (Support Services, Delivered As A Service Contract)
- Response Due: May 29, 2026, by 1:00 PM ET
- Published: May 21, 2026
Submission & Evaluation
Companies believing they can provide these services must indicate their interest in writing and provide a detailed capability statement by the response deadline. The government will consider all responsible sources in evaluating its determination to issue a sole-source contract. This notice is not a request for quote or proposal, and no reimbursement will be provided for submission costs.
Additional Notes
The government cites 10 USC 3204 (a) (1) as the statutory authority for other than full and open competition, due to Apriva being the only responsible source. Replacing the existing infrastructure is beyond the current scope and would result in a loss of DISA's $43M investment. Awarding to another source would lead to substantial cost duplication and potential mission failure due to system dependencies. A sole source Justification & Approval document will be posted upon approval.
Set-Aside
No set-aside designation is specified for this Sources Sought notice.