Zero Trust Automated Threat-Based Cyber Assessment Solutions
ID: ZTTBCA0001Type: Sources Sought
Overview

Buyer

DEPT OF DEFENSEWASHINGTON HEADQUARTERS SERVICES (WHS)WASHINGTON HEADQUARTERS SERVICESWASHINGTON, DC, 203011000, USA
Timeline
    Description

    The Department of Defense, through the Washington Headquarters Services, is seeking information on automated Zero Trust Threat-Based Cyber Assessment (TBCA) solutions as part of a Request for Information (RFI). The objective is to transition from manual, compliance-based cybersecurity assessments to continuous, automated, and threat-based approaches that can emulate adversarial activities to assess Zero Trust implementations on both UNCLASSIFIED and SECRET networks. This initiative is crucial for validating adherence to the DoD Zero Trust Strategy, reducing assessment time and costs, and supporting continuous TBCA across various environments, including on-premises, cloud, and hybrid setups. Interested parties are invited to submit unclassified responses, limited to ten pages, electronically by 12 PM ET on February 10, 2026, to Leanne Condren at leanne.m.condren.civ@mail.mil.

    Point(s) of Contact
    Files
    Title
    Posted
    The Department of Defense (DoD) Chief Information Officer (CIO) Zero Trust Portfolio Management Office (ZT PfMO) has issued a Request for Information (RFI) seeking automated Zero Trust (ZT) Threat-Based Cyber Assessment (TBCA) solutions. This RFI is for market research purposes only and does not constitute a solicitation. The DoD aims to transition from manual, compliance-based cybersecurity assessments to continuous, automated, and threat-based approaches. The objective is to identify solutions that can emulate adversarial activities to assess ZT implementations on UNCLASSIFIED and SECRET networks, validate adherence to the DoD Zero Trust Strategy, reduce assessment time and costs, and support continuous TBCAs. The ZT PfMO is looking for solutions applicable across various environments (on-prem, cloud, hybrid) that can run within a Component's environment, be ready for production by Q2 FY26, and be procurable by DoD Components. Industry input is requested on strategies for onboarding, impact level access, threat frameworks, aid to cyber teams, replacement of manual assessments, existing government deployments, total cost of ownership, continuous analysis capabilities, assessment of Advanced level ZT activities, earliest deployment timeframe, and reporting capabilities. Responses, limited to ten pages, must be unclassified and submitted electronically by 12 PM ET on February 10, 2026.
    Lifecycle
    Title
    Type
    Similar Opportunities
    Loading similar opportunities...