Comprehensive Cybersecurity Solutions for Operational Technology (OT) Environments - Software Licensing Opportunity
Closed Special Notice Posted
- Solicitation number
- CS-001
- Agency
-
Department of Energy
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Idaho 83401, United States
- Points of contact
Notice details come from SAM.gov. Updated .
About this opportunity
The Department of Energy (DOE) and Idaho National Laboratory (INL) have issued a Special Notice regarding a software licensing opportunity for comprehensive cybersecurity solutions designed for Operational Technology (OT) environments. The notice was posted on April 7, 2025, with a due date of September 20, 2025, and falls under the NAICS code 541519 for Other Computer Related Services. This opportunity is part of the Cybersecurity for the Operational Technology Environment (CyOTE) program, which has developed specialized tools to strengthen cybersecurity monitoring, detection, and response capabilities. The notice specifically focuses on two primary software solutions: OPTIC (Operational Process for Trigger Identification and Comprehension) and CATCH (Collection and Analysis of Telemetry for CyOTE Heuristics). The opportunity is categorized as a perpetual license software procurement under PSC code 7A21.
The primary purpose of this Special Notice is to identify parties interested in licensing these cybersecurity software solutions rather than soliciting external services or providing funding opportunities. OPTIC serves as a downloadable application that helps OT professionals detect and analyze cyber anomalies while providing cybersecurity awareness training, while CATCH offers real-time telemetry collection and analysis with nine detection engines using the MITRE ATT&CK framework. Interested parties must contact td@inl.gov or visit https://cyote.inl.gov/ for additional information about licensing arrangements. The notice does not specify particular eligibility criteria for contractors but indicates potential collaboration opportunities may be available. These integrated tools are designed to enhance cybersecurity decision-making, improve operational resilience, and facilitate cross-industry collaboration to strengthen energy security in critical infrastructure environments.
Notice text
Comprehensive Cybersecurity Solutions for Operational Technology (OT) Environments
Introduction As cybersecurity threats against Operational Technology (OT) networks continue to grow, the Department of Energy (DOE) and Idaho National Laboratory (INL), through the Cybersecurity for the Operational Technology Environment (CyOTE™) program, have developed a suite of tools to strengthen cybersecurity monitoring, detection, and response. The initial release of solutions include — OPTIC, and CATCH— offering targeted capabilities to enhance protection and resilience in critical infrastructure.
Operational Process for Trigger Identification and Comprehension (OPTIC)
Overview: OPTIC is a downloadable application designed to support CyOTE methodologies by assisting OT professionals in detecting and analyzing cyber anomalies. It aids in differentiating between malicious threats and routine maintenance irregularities.
Key Benefits:
- Integrates with a Safety-Culture of OT environments
- Guides users through a structured workflow for anomaly documentation and analysis.
- Functions as a cybersecurity awareness training tool.
- Provides forensic research capabilities to investigate past cyber events.
- Saves time by consolidating government and industry standards into a single interface.
- Enhances cybersecurity decision-making and response efficiency.
Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH)
Overview: CATCH is a real-time telemetry collection and analysis framework designed to augment existing security controls with CyOTE analytics. It provides deep insights into network traffic, system logs, and user activities to detect cyber threats proactively.
Key Benefits:
- Offers nine detection engines for comprehensive threat monitoring.
- Uses the MITRE ATT&CK® framework for analyzing ICS vulnerabilities.
- Generates STIX 2.1 reports and automates threat intelligence sharing via TAXII.
- Enhances forensic investigations by correlating telemetry data across systems.
- Integrates with BAM and OPTIC to improve threat detection and response.
Integrated Cybersecurity Approach
These tools can work together to improve the cybersecurity ecosystem for OT environments. By leveraging the CyOTE tools, OPTIC and CATCH, organizations can:
- Detect and respond to cyber threats more effectively.
- Improve operational resilience and mitigate risks proactively.
- Collaborate across industry sectors to strengthen energy security.
Licensing Opportunity Notice This opportunity describes a chance to license the software mentioned from Idaho National Laboratory (INL). This is not a funding opportunity, grant, or a solicitation for external services. We are seeking parties interested in licensing these software solutions, with potential collaboration opportunities.
For more information, contact td@inl.gov or visit https://cyote.inl.gov/
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| SOFTWARE LICENSING OPPORTUNITY: CorrelateIQ - Correlation-Based System Intelligence | Department of Energy | No set-aside | |
| Operational Test and Training Infrastructure (OTTI) Commercial Solutions Opening (CSO) | Air Force | No set-aside | |
| Information Technology Laboratory Commercial Solutions Openings (CSO) | Engineer Research and Development Center | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity