Lightweight Device Security Agent for OT, IoT, and Edge Environments Commercial Solutions Opening (CSO) Program
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Department of Homeland Security (DHS) is seeking lightweight security agents for Operational Technology (OT), Internet of Things (IoT), and edge environments through a Commercial Solutions Opening (CSO) program. This initiative aims to rapidly acquire innovative, field-ready security technologies to address evolving cyber threats. The current focus is on Focus Area 1: Security, with concept papers due by January 30, 2026, at 5:00 p.m. ET.
Scope of Work
DHS is looking for commercially available, lightweight security agents capable of providing device-level threat detection and alerting across OT, IoT, and edge environments, while remaining compatible with broader enterprise IT systems. The CSO program will identify solutions for three focus areas:
- Security: Technologies enhancing visibility, detection, resilience, or response in OT, IoT, and edge environments where traditional security solutions are impractical.
- Interoperability: Technologies improving connectivity, data exchange, or coordination across OT systems.
- OT / IT Integration: Technologies enabling responsible integration between OT environments and enterprise IT systems.
For Focus Area 1: Security, key requirements include device-level threat detection, lightweight agent architecture (minimal resource footprint, no kernel modification), OT/IoT compatibility (segmented/intermittently connected environments), usability on conventional IT systems, actionable alerting with integration into existing DHS SOC tools, scalable deployment, resilience, and compliance with DHS cybersecurity requirements.
Contract & Timeline
- Type: Commercial Solutions Opening (CSO) leading to potential Firm Fixed Price contracts.
- Duration (for awards): One base year and one option year.
- Set-Aside: None specified (merit-based for innovative commercial items).
- Concept Paper Due (Focus Area 1 - Security): January 30, 2026, 5:00 p.m. ET.
- General CSO Solicitation Open Until: September 30, 2026.
- Published: January 16, 2026.
- Place of Performance (for awards): Designated government facilities within the National Capital Region (NCR).
Evaluation
Concept papers will be evaluated on their individual merits, focusing on whether the proposed commercial product is innovative and demonstrates strong Product Capability (effectiveness, footprint, integration, scalability, resilience, compliance, maturity) and Price. The Government may award multiple contracts and reserves the right to request interviews or additional information. SAM.gov registration is required for award eligibility.
Additional Notes
Submissions for Focus Area 1 must be emailed to Tanya.Hill@hq.dhs.gov and Tracy.Miller@hq.dhs.gov with the subject line "CSO Requirement 70RDA126R00000004 - Focus Area 1 - Security." Concept papers should not exceed 2 pages. All costs for preparing submissions are the responsibility of the offeror. The Government will review responses as they are submitted and may award at any time.