NATO Request for Information: Malware Analysis and Detection Engineering Platform

The NATO Communications and Information Agency (NCIA) issued a Request for Information on July 6, 2026, seeking market research on a Malware Analysis and Detection Engineering Platform, with responses due by July 17, 2026, at 12:00 hours Central European Time; participation is restricted to companies from NATO member countries. This RFI is issued for planning and budgeting purposes only and does not constitute a request for bids or binding solicitation.

NCIA seeks vendor input on draft requirements for a fully managed, contractor-operated malware analysis and detection service. The platform must support secure manual and automated malware analysis using static and dynamic techniques, execution in isolated environments, multiple operating systems, mobile device analysis (iOS and Android), concurrent execution, long-duration analysis, and encrypted traffic analysis. The detection engineering component requires creation, testing, and management of YARA, Suricata, and Snort rules with version control, rollback capabilities, rule validation, external rule import, synchronization with MISP instances, and advanced filtering and export functions. Additional capabilities include secure malware sample and artifact storage and lifecycle management, controlled and auditable access with role-based controls and comprehensive logging, collaborative workspace features with shared cases and artifacts, and reporting and visualization including dashboards and visual execution graphs. The contractor must provide all infrastructure, maintenance, monitoring, patching, updates, and support; the purchaser retains responsibility for analysis and detection engineering activities.

Respondents should submit capability statements and feedback using the provided Excel template. Contact Leonora Alushani at RFI-424358-TSSU-MADE@ncia.nato.int with questions; reference RFI-424358-TSSU-MA-DE in all correspondence.