Project Sentinel: Joint-Service Offline Two-Person Integrity (J-SOTPI) for Tactical Systems

Closed Solicitation Posted

Not the latest version. See the latest solicitation from .

Solicitation number
26-A008
Agency
Responses due
Set-aside
No set-aside

Opportunity facts

Place of performance
South Carolina 29419, United States

Notice details come from SAM.gov. Updated .

About this opportunity

The Department of the Navy Information Warfare Systems Command seeks a prototype demonstrating enterprise-grade Two-Person Integrity (TPI) and Multi-Factor Authentication (MFA) for Privileged Access Management in disconnected tactical environments, with solution briefs due August 12, 2026. This is a Commercial Solutions Opening (CSO) with contract number N65236-26-S-0001; award may result in a follow-on production contract without further competitive procedures.

Place of performance is North Charleston, South Carolina. The solution must enforce concurrent dual-operator authorization (100% enforcement rate) for critical privileged actions—data deletion, privilege escalation, system configuration changes—using dedicated physical hardware components such as cryptographic tokens, smart cards, YubiKeys, or RSA tokens. The system must operate without reliance on external network reach-back, cellular connectivity, or mobile devices. Required platform support includes Windows, Linux, VMware/vSphere, and Hyper-V; vendors must explicitly detail supported operating system and hypervisor versions, required physical hardware components, and long-term supportability plans. The prototype must demonstrate Technology Readiness Level 7 or higher and integrate with Navy identity management solutions and support Smart Card, YubiKey, RSA SecurID, and biometric authentication methods.

Proposing companies must hold a Top Secret Facility Clearance with Sensitive Compartmented Information eligibility at time of submission; those lacking appropriate clearance will not advance to Phase 2. Solution Briefs must be submitted via the Vulcan platform (Vulcan-sof.com) and must not contain Controlled Unclassified Information. Selected briefs will advance to virtual pitch sessions tentatively scheduled for August 21 and 25, 2026. The solicitation includes nontraditional business participation requirements; teaming partners must be named with CAGE Codes provided. NAICS code is 541715; PSC code is AC13.

Notice text

In highly contested Joint All-Domain Command and Control (JADC2) environments, tactical systems cannot rely on external network reach-back or cellular signatures for authentication. Project Sentinel will validate an enterprise-grade software capability that enforces concurrent, hardware-validated dual-operator controls locally—ensuring that critical, single-point-of-failure actions cannot be executed single-handedly in disconnected space.

The Department of the Navy requires a prototype to demonstrate and validate an enterprise-level software capability for Two-Person Integrity (TPI) combined with Multi-Factor Authentication (MFA) for Privileged Access Management (PAM) within highly isolated, disconnected, and heterogeneous operational networks across Joint Force environments. We seek to prototype and scale a unified, non-cellular-reliant dual-authorization mechanisms to safeguard privileged functions—such as critical data deletion, privilege escalation, and network configuration changes—across diverse target systems (Windows, Linux, hypervisors, and network hardware). This effort seeks to evaluate a minimum viable product that enforces concurrent dual-operator authentication using dedicated physical hardware components (such as physical cryptographic tokens or smart cards, excluding mobile devices) in disconnected environments, ensuring critical system changes cannot be executed single-handedly. To ensure long-term supportability and integration, the technical response must explicitly define the physical hardware components required to support the solution, as well as the specific operating system and hypervisor versions supported (including legacy and modern Windows, Linux, VMware/vSphere, and Hyper-V distributions). Success will be measured by a 100% enforcement rate of concurrent, multi-factor dual-approvals under simulated disconnected-state operations, zero dependency on commercial cellular/internet networks, and documented cross-platform compatibility across all specified target systems.

Files

File Type Posted
AOI 26-A008 Final.pdf PDF

Notice history

Show all 12

Similar open opportunities

Opportunity Agency Set-aside Responses due
Area of Interest (AOI) for User Activity Monitoring (UAM) Centralization Prototype Other Transaction (OT) Fort George G Meade, Maryland, United States · NAICS 541519 Defense Information Systems Agency No set-aside
Operational Test and Training Infrastructure (OTTI) Commercial Solutions Opening (CSO) Colorado Springs, Colorado 80914, United States · NAICS 541715 Air Force No set-aside
JIATF 401 Commercial Solutions Opening (CSO) Alexandria, Virginia, United States Department of the Army No set-aside
Commercial Solutions Opening Tactical Maritime Survivability (TMS) and Target Vessel Embarkation Equipment (TVEE) California 95155, United States US Special Operations Command No set-aside
ACC-DTA Commercial Solutions Opening (CSO) Warren, Michigan, United States Department of the Army No set-aside

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar opportunities
  • Ask GovTribe AI about this opportunity