Managed Attribution Systems (Chameleon)

The Drug Enforcement Administration seeks a FedRAMP-authorized, cloud-hosted Managed Attribution System (Chameleon) supporting zero-footprint undercover browsing and evidence collection, with proposals due July 31, 2026 at 11:00 AM ET. The procurement is set aside 100% for small business and will be awarded on a firm fixed-price basis under FAR Part 12 commercial item procedures.

Place of performance is West Springfield, Virginia. The system must support up to 200 concurrent users across three geographic tiers—Tier 1 (CONUS, Canada, Western Europe), Tier 2 (Latin America, Eastern Europe, Asia), and Tier 3 (Middle East, Africa)—with anonymized IP address-based managed attribution. Required capabilities include persistent and non-persistent browsing modes, full forensic evidence collection, secure virtual desktop interfaces, emulated mobile phone functionality with integrated Exodus cryptocurrency wallet, audit trails of user activities, 2-factor authentication, and role-based access management. The contractor must maintain FedRAMP Moderate baseline authorization and comply with NIST SP 800-53 controls.

The base performance period runs from September 14, 2026 through September 13, 2027, with four optional one-year ordering periods and one optional six-month period, for a total of five years. Line items include annual concurrent subscriber licenses (200 units), administrator logging and audit licenses (200 units), video and social media platform access, dedicated infrastructure maintenance, storage, tiered geosite access, dedicated product support staff (0.5 to 1.0 FTE), product customization (0.5 FTE), training, Switchboard SE subscriptions and appliances, and mobile device emulators. The contractor must provide on-site and virtual training to end users and privileged administrators, with COR-approved travel. NAICS code is 518210; PSC code is DB10.