26Q0049- Synopsis Posting.pdf

DISTRIBUTION: DoD COMMUNITY ONLY

Sources Sought Synopsis: Brand Name or Equal for ICS/OT Security Platform

NAICS Code: 513210 — Software Publishers

Posted Date: April 22, 2026 Response Date: May 1, 2026 Contracting Office: Marine Corps Installations East (MCIEAST) Regional Contracting Office (RCO)

1. Description

This is a SOURCES SOUGHT SYNOPSIS for informational and market research purposes only. This is not a Request for Quotes (RFQ) and does not commit the Government to award a contract. The MCIEAST Public Works Division is seeking sources for a Brand Name or Equal requirement for a Dragos or equal Industrial Control Systems (ICS) / Operational Technology (OT) cybersecurity platform.

The Government requires a solution that provides asset identification, threat detection, and incident response capabilities specifically designed for the Marine Corps' critical infrastructure and facilities-related control systems environments.

2. Brand Name or Equal & Salient Characteristics

The basis of this requirement is the Dragos Platform. An "or equal" item will be considered if it meets the following salient physical, functional, or performance characteristics:

• 1. Passive Asset Discovery: Must passively identify and inventory ICS/OT assets, including controllers (PLCs, RTUs, etc.)

and network devices, without active scanning that could disrupt operations.

• 2. ICS-Specific Threat Intelligence: Must provide access to a continuously updated, proprietary threat intelligence feed focused exclusively on adversary groups, malware, and vulnerabilities targeting global ICS/OT environments.

• 3. Deep Packet Inspection (DPI) for Industrial Protocols: Must perform DPI on a wide range of vendor-specific and open-source OT protocols (e.g., Modbus, DNP3, Ethernet/IP, S7, etc.) to identify anomalous behavior and threats within command-and-control traffic.

• 4. Baseline and Anomaly Detection: Must be capable of baselining normal network behavior within the OT environment and detecting deviations, policy violations, and potential threat activity.

• 5. Forensic Investigation & Response Playbooks: Must include built-in workflows and investigative "playbooks" that guide analysts in responding to threat detections specific to ICS environments.

• 6. Air-Gapped & Intermittent Connectivity Support: Must be capable of full functionality in air-gapped environments or environments with limited or intermittent connectivity for updates and data transfer.

3. Requested Information & Submission Details

Interested parties are requested to submit a capabilities statement package demonstrating their ability to meet the requirements.

The capabilities statement shall be a maximum of 10 pages and should address the following:

1. Company Information: Company name, address, UEI number, CAGE code, and business size/socio-economic status under

NAICS 513210.

2. Product Information: If offering an "or equal" product, provide the product name and a detailed, point-by-point narrative description of how your product meets or exceeds each of the six (6) salient characteristics listed above. General marketing material is not sufficient.

3. Relevant Experience: A summary of past performance demonstrating experience in providing ICS/OT security solutions to the Department of Defense or other federal agencies.

DISTRIBUTION: DoD COMMUNITY ONLY

Please submit capabilities statements via email to the point of contact below no later than 4:30 PM EDT on May 15, 2026. The Government will use the information submitted to determine the appropriate acquisition strategy, including the potential for a small business set-aside.

4. Government Point of Contact

Arlene Williams Contract Specialist Email: arlene.d.williams@usmc.mil

And

Waymon Gardner Contracting Officer Email: waymon.gardner@usmc.mil mailto:arlene.d.williams@usmc.mil mailto:waymon.gardner@usmc.mil