Dragos Brand Name or Equal

Sources Sought Synopsis

This is a sources sought synopsis for market research purposes, not a Request for Quotes (RFQ). The Marine Corps Installations East (MCIEAST) Public Works Division is seeking information on potential sources for an Industrial Control Systems (ICS) / Operational Technology (OT) cybersecurity platform. The requirement is for a Brand Name or Equal solution, specifically referencing the Dragos Platform.

Interested vendors must demonstrate their ability to meet the following characteristics, or provide an "or equal" product that meets them:

• Passive Asset Discovery: Identify ICS/OT assets without active scanning.
• ICS-Specific Threat Intelligence: Provide a continuously updated threat feed for ICS/OT environments.
• Deep Packet Inspection (DPI): Analyze OT protocols (e.g., Modbus, DNP3, Ethernet/IP) for threats.
• Baseline and Anomaly Detection: Detect deviations from normal OT network behavior.
• Forensic Investigation & Response Playbooks: Offer guided workflows for ICS threat response.
• Air-Gapped & Intermittent Connectivity Support: Functionality in environments with limited or no connectivity.

Interested parties must submit a capabilities statement (maximum 10 pages) addressing:

• Company Information: Name, address, UEI, CAGE, business size/status under NAICS 513210.
• Product Information: For "or equal" products, a detailed, point-by-point narrative demonstrating how each salient characteristic is met or exceeded.
• Relevant Experience: Summary of past performance with DoD or federal agencies for ICS/OT security.

Capabilities statements are due by 4:30 PM EDT on May 1, 2026.

• Arlene Williams (Contract Specialist): arlene.d.williams@usmc.mil
• Waymon Gardner (Contracting Officer): waymon.gardner@usmc.mil

The government will use this information to determine the acquisition strategy. This is not a solicitation and does not commit the government to award a contract.

Solicitation / RFP / RFQ

This is a Sources Sought Synopsis for informational and market research purposes only. The Marine Corps Installations East (MCIEAST) Public Works Division is seeking sources for a Brand Name or Equal requirement for an Industrial Control Systems (ICS) / Operational Technology (OT) cybersecurity platform. The solution must provide asset identification, threat detection, and incident response capabilities specifically for critical infrastructure and facilities-related control systems.

• Passive Asset Discovery: Identify and inventory ICS/OT assets and network devices without active scanning.
• ICS-Specific Threat Intelligence: Access to a continuously updated, proprietary threat intelligence feed focused on global ICS/OT adversaries, malware, and vulnerabilities.
• Deep Packet Inspection (DPI) for Industrial Protocols: Perform DPI on a wide range of OT protocols to identify anomalous behavior and threats.
• Baseline and Anomaly Detection: Baseline normal network behavior and detect deviations, policy violations, and potential threats.
• Forensic Investigation & Response Playbooks: Built-in workflows to guide response to threat detections.
• Air-Gapped & Intermittent Connectivity Support: Full functionality in air-gapped or intermittently connected environments.

Not specified in this synopsis.

Interested parties are requested to submit a capabilities statement package (maximum 10 pages) by 4:30 PM EDT on May 15, 2026.

The Government will use the submitted information to determine the appropriate acquisition strategy, including the potential for a small business set-aside.

This is not a Request for Quotes (RFQ) and does not commit the Government to award a contract. The Government is seeking information on the Dragos Platform or an "or equal" product. Capabilities statements should include:

1. Company Information (name, address, UEI, CAGE, business size/socio-economic status).
2. Product Information: A detailed, point-by-point narrative description of how an "or equal" product meets or exceeds the six salient characteristics. General marketing material is not sufficient.
3. Relevant Experience: A summary of past performance demonstrating experience in providing ICS/OT security solutions to the Department of Defense or other federal agencies.