Zero Trust Post Quantum Cryptography (PQC) Roadmap AOI 26-A006 under RCC CSO N6523626S0001

Naval Information Warfare Systems Command (NIWC Atlantic) seeks a commercial prototype solution to automate discovery, identification, and cataloging of cryptographic assets across Department of Navy and Marine Corps networks and systems, with responses due July 8, 2026. This is a Commercial Solutions Opening (CSO) issued under solicitation N65236-26-S-0001, Area of Interest 26-A006, with no set-aside.

Place of performance is across the United States. The solution must support hybrid passive and active scanning to detect cryptographic protocols, algorithms, key lengths, and certificates across enterprise IT (on-premise and cloud), mobile systems, operational technology, and tactical/embedded weapon platforms. The system must automate generation of a Cryptographic Bill of Materials (CBOM) in machine-readable format and enable continuous monitoring for baseline changes. Vendors must hold a Secret Facility Clearance and provide their Cage Code with submissions through the Vulcan platform.

Highly desired attributes include cloud-native and scalable architecture optimized for GovCloud, recognition and tracking of NIST PQC standards (FIPS 203, 204, 205), operational support for disconnected or low-bandwidth environments, and integration with Department of Navy authoritative data repositories. Secondary desired attributes include vendor documentation of corporate PQC migration timelines and FIPS 140-3 validations, plus minimal operational overhead on tactical assets. Evaluation favors Technical Readiness Level 7 or higher with prior enterprise-scale experience in automated asset discovery or vulnerability scanning. In-person mandatory unclassified demonstrations are anticipated in Charleston, South Carolina on July 20–21, 2026. Prototype agreements may result in direct award of a follow-on production contract without further competition. NAICS code is 541715; PSC code is AC13.