Zero Trust Automated Threat-Based Cyber Assessment Solutions
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Department of Defense (DoD) Chief Information Officer's (CIO) Zero Trust Portfolio Management Office (ZT PfMO) is conducting market research through a Request for Information (RFI) to identify industry solutions for Automated Zero Trust (ZT) Threat-Based Cyber Assessment (TBCA). The DoD seeks to transition from manual to continuous, automated, and threat-based cybersecurity assessments. Responses are due February 10, 2026, by 12 PM ET.
Purpose and Scope
This RFI aims to understand available solutions, capabilities, and implementation considerations for automated ZT TBCA. It is for market research purposes only and does not constitute a solicitation. The DoD is interested in solutions that can emulate adversarial activities to assess ZT implementations on UNCLASSIFIED and SECRET networks, validate ZT Target Level outcomes, reduce assessment time and costs, and support continuous monitoring for configuration drift. Solutions should be deployable within a Component’s environment (on-prem, cloud, hybrid) and ready for production/ATO by Q2 FY26, and procurable by DoD Components.
Requested Information from Industry
Vendors are asked to provide input on various aspects, including:
- Onboarding strategies and required Impact Levels for tools.
- Suitable threat frameworks (e.g., MITRE ATT&CK).
- How automated TBCA can support Purple/Blue/Red teams.
- The evolution of TBCA tooling to replace manual assessments.
- Existing government sponsor environments and total cost of ownership estimates.
- Capabilities for continuous analysis and configuration drift monitoring.
- Consideration of Advanced level ZT activities and earliest timeframe for production readiness.
- Reporting capabilities.
Submission Details
- Format: Unclassified responses, limited to 10 pages, single-spaced, Times New Roman 12-point font, one-inch margins, in MS Word or PDF format.
- Content: Include company information (name, DUNS/EUI, CAGE Code, POC) and detailed responses to the requested information, along with feasibility feedback, potential risks, challenges, and innovations.
- Due Date: February 10, 2026, by 12 PM ET.
- Submission Method: Electronic only to whs.mc-alex.ad.mbx.eosd-psb-branch-mailbox@mail.mil and leanne.m.condren.civ@mail.mil.
- Contact: Ms. Leanne Condren.
Contract & Timeline
- Type: Sources Sought / Request for Information (RFI)
- Set-Aside: None specified
- Response Due: February 10, 2026, 12 PM ET
- Published: January 6, 2026