Definitive Contract HR001124C0427

The Defense Advanced Research Projects Agency (DARPA) awarded a $4.49 million firm fixed-price definitive contract to Punch Cyber Corp (doing business as Punch Cyber Analytics Group) on July 1, 2024, to support the Cyber Agents for Security Testing and Learning Environments (CASTLE) program. The contract, with an ultimate completion date of August 17, 2027, will be performed in Reston, Virginia. CASTLE aims to develop an artificial intelligence toolkit capable of instantiating realistic network environments and training cyber agents to enhance resilient network operations against advanced persistent threats. The program emphasizes developing an open-source AI toolkit using reinforcement learning to simulate defensive and attack scenarios, modeling over one hundred attack paths and defensive actions annually to enable live network experimentation and improved cyber defense capabilities.

Punch Cyber Corp, a cyber consulting firm specializing in advanced analytics and cybersecurity solutions, brings established experience in federal contracting and DARPA engagements, including prior contracts for research and development initiatives such as the SMOKE (Signature Management Using Operational Knowledge and Environments) program and synthetic user persona development. The award carries no set-aside designation and represents a continuation of the contractor's involvement in high-priority defense cybersecurity research initiatives. This contract falls within DARPA's broader mission to advance innovative technologies for national security, specifically focusing on developing AI-driven capabilities to strengthen network defense and operational resilience.