Call for Solutions - Sentinel - Overwatch for the Cloud

Army Contracting Command - Rock Island Arsenal, on behalf of the Enterprise Cloud Management Agency (ECMA), is soliciting innovative solutions for Sentinel — Overwatch for the Cloud, a commercial cloud observability and security monitoring platform, with Phase 1 Solution Brief responses due by September 9, 2026 at 1 p.m. Central Time. No set-aside applies.

The solution must monitor cloud workloads across multi-cloud environments (AWS, Azure, Google, Oracle) spanning up to 25,000 hosts, 1,600 cloud accounts, and 250 tenants across NIPR and SIPR network domains. Required capabilities include complete workload visibility through automated discovery and real-time metrics tracking; automated security scoring with compliance mapping to CIS, NIST, ISO 27001, SOC 2, HIPAA, and PCI DSS standards; tamper-proof audit logging; native ingestion of four fundamental telemetry pillars (Metrics, Events, Logs, Traces); real-time runtime threat detection to block SQL injections and remote code execution; automated Infrastructure-as-Code drift detection and remediation; and support for both agentless and agent-based monitoring. Desired capabilities include consumption and budgeting integration with cloud service providers and spend prediction with optimization recommendations.

The platform must be built on Commercial Off-The-Shelf technologies, hold an active or in-process DoD Cloud Computing Security Requirements Guide Impact Level 5 Provisional Authorization, and support OpenTelemetry standards. The Government intends to award a Firm-Fixed-Price contract under FAR Part 12 with a 12-month Base Period and four 12-month Option Periods.

Phase 1 requires a Solution Brief (maximum 5 pages plus attachments) evaluated through a two-stage compliance and technical merit gate. Offerors must demonstrate three verifiable reference examples of similar implementations at comparable scale within the past three years, maintain active SAM.gov registration and a Unique Entity Identifier, and disclose organizational conflicts of interest.