Network Detection & Response (NDR) Modernization

The Department of State Office of Acquisition Management is procuring a comprehensive Network Detection and Response (NDR) solution to modernize its cybersecurity capabilities across its globally distributed IT enterprise. The solicitation seeks an advanced, AI-driven NDR system capable of automated threat detection, encrypted traffic inspection, east-west network visibility, and real-time threat analysis to enhance the Department's ability to detect, investigate, and respond to sophisticated network-based threats. Key requirements include integration with existing cybersecurity tools such as Splunk, Zeek, Suricata, and ServiceNow, along with mandatory compliance with federal standards including FedRAMP High authorization and Executive Order 14028. The solution must be delivered through U.S.-based services and infrastructure, with evaluation criteria focusing on technical approach, management capabilities, key personnel qualifications, past performance, and relevant certifications. The proposal submission deadline is September 18, 2025, with recent amendments and clarifications posted on September 12, 2025.

This procurement does not utilize any set-aside designations and will be awarded as a combination Firm Fixed Price and Time-and-Materials contract. The contract structure includes a one-year base period running from September 30, 2025 to September 29, 2026, with one optional one-year extension through September 29, 2027. The NDR solution must support the Department's extensive IT infrastructure encompassing approximately 280,000 nodes, 160,000 managed endpoints, and over 200 cloud instances. The deployment strategy follows a phased approach, beginning with DOS Data Centers during the base period, expanding to internet gateways and demilitarized zones in Option Year 1, and potentially extending to foreign and domestic posts in subsequent phases. The primary place of performance is designated as Arlington, Virginia, though the solution will ultimately serve the Department's global network infrastructure.