This is a new requirement for a secure, high-fidelity network flow analytics platform. The system must meet or exceed the following technical capabilities:
\n\nNetflow Telemetry Querying: Provide access to a massive, global network flow database with the ability to run targeted queries on source/destination IP addresses, ports, protocal types, packet counts, and timestamps.
\n\nThreat Infrastructure Tracking: Enable users to trace malicious command and control (C2) servers, map botnets, analyze hostile infrastructure, and perform forensic attribution.
\n\nPassive DNS & IP Reputation: Integrated access to historical passive DNS databases and IP threat scores to quickly context-resolve suspect nodes.
\n\nEncrypted Traffic Profiling: Capabilities to identify and analyze anomalous traffic patterns and identify threat actors utilizing virtual private networks (VPNs) or encrypted tunneling.
\n\nSecure, web-based software platform with 24/7/365 availability.
\n\nAPI endpoints for integrating intelligence feeds directly into the unit'slocal security tools, Security Information and Event Management (SIEM) systems, or data orchestrators.
\n\nOperations & Maintenance Support:
\n• Software Updates: Ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance periods at no extra cost.
\n• Technical Support: Helpdesk and administrator support for user troubleshooting, configuration assistance, and platform optimization
This posting is a Sources Sought only for market research, no quotes will be evaluated at this time.
","text":"This is a new requirement for a secure, high-fidelity network flow analytics platform. The system must meet or exceed the following technical capabilities:\n\nNetflow Telemetry Querying: Provide access to a massive, global network flow database with the ability to run targeted queries on source/destination IP addresses, ports, protocal types, packet counts, and timestamps.\n\nThreat Infrastructure Tracking: Enable users to trace malicious command and control (C2) servers, map botnets, analyze hostile infrastructure, and perform forensic attribution.\n\nPassive DNS & IP Reputation: Integrated access to historical passive DNS databases and IP threat scores to quickly context-resolve suspect nodes.\n\nEncrypted Traffic Profiling: Capabilities to identify and analyze anomalous traffic patterns and identify threat actors utilizing virtual private networks (VPNs) or encrypted tunneling.\n\nSecure, web-based software platform with 24/7/365 availability.\n\nAPI endpoints for integrating intelligence feeds directly into the unit'slocal security tools, Security Information and Event Management (SIEM) systems, or data orchestrators.\n\nOperations & Maintenance Support:\n\n• Software Updates: Ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance periods at no extra cost.\n\n• Technical Support: Helpdesk and administrator support for user troubleshooting, configuration assistance, and platform optimization\n\nThis posting is a Sources Sought only for market research, no quotes will be evaluated at this time.","origin":"detail"},"notice_type":{"code":"r","label":"Sources Sought"},"schema_version":1,"solicitation_number":"FA255026AC002","place_of_performance":{"zip":"80912","city":{"name":"Colorado Springs"},"state":{"code":"CO"},"country":{"code":"USA"}},"product_service_code":"DJ10"}],"due_at":"2026-09-24T18:00:00Z","due_date":"2026-09-24","closes_at":"2026-09-24T18:00:00Z","awardable":true,"dept_key":"d-057","dept_name":"DEPT OF DEFENSE","sub_key":"s-5700","sub_name":"DEPT OF THE AIR FORCE","office_key":"o-FA2550","office_name":"FA2550 50 CONS PKP","state":"CO","county":"08041","county_name":"El Paso County","city":"0816000","city_name":"Colorado Springs","country":"USA","winner_key":null,"amount":null,"linked_awards":0,"cancelled":false,"archived":false,"updated_at":"2026-09-24T03:25:58.922164Z","principal_notice_id":"2f53f3558ac34d7fa297af74b2b56ba2","description":{"text":"This is a new requirement for a secure, high-fidelity network flow analytics platform. The system must meet or exceed the following technical capabilities:\n\nNetflow Telemetry Querying: Provide access to a massive, global network flow database with the ability to run targeted queries on source/destination IP addresses, ports, protocal types, packet counts, and timestamps.\n\nThreat Infrastructure Tracking: Enable users to trace malicious command and control (C2) servers, map botnets, analyze hostile infrastructure, and perform forensic attribution.\n\nPassive DNS & IP Reputation: Integrated access to historical passive DNS databases and IP threat scores to quickly context-resolve suspect nodes.\n\nEncrypted Traffic Profiling: Capabilities to identify and analyze anomalous traffic patterns and identify threat actors utilizing virtual private networks (VPNs) or encrypted tunneling.\n\nSecure, web-based software platform with 24/7/365 availability.\n\nAPI endpoints for integrating intelligence feeds directly into the unit'slocal security tools, Security Information and Event Management (SIEM) systems, or data orchestrators.\n\nOperations & Maintenance Support:\n\n• Software Updates: Ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance periods at no extra cost.\n\n• Technical Support: Helpdesk and administrator support for user troubleshooting, configuration assistance, and platform optimization\n\nThis posting is a Sources Sought only for market research, no quotes will be evaluated at this time.","html":"This is a new requirement for a secure, high-fidelity network flow analytics platform. The system must meet or exceed the following technical capabilities:
\n\nNetflow Telemetry Querying: Provide access to a massive, global network flow database with the ability to run targeted queries on source/destination IP addresses, ports, protocal types, packet counts, and timestamps.
\n\nThreat Infrastructure Tracking: Enable users to trace malicious command and control (C2) servers, map botnets, analyze hostile infrastructure, and perform forensic attribution.
\n\nPassive DNS & IP Reputation: Integrated access to historical passive DNS databases and IP threat scores to quickly context-resolve suspect nodes.
\n\nEncrypted Traffic Profiling: Capabilities to identify and analyze anomalous traffic patterns and identify threat actors utilizing virtual private networks (VPNs) or encrypted tunneling.
\n\nSecure, web-based software platform with 24/7/365 availability.
\n\nAPI endpoints for integrating intelligence feeds directly into the unit'slocal security tools, Security Information and Event Management (SIEM) systems, or data orchestrators.
\n\nOperations & Maintenance Support:
\n• Software Updates: Ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance periods at no extra cost.
\n• Technical Support: Helpdesk and administrator support for user troubleshooting, configuration assistance, and platform optimization
This posting is a Sources Sought only for market research, no quotes will be evaluated at this time.
","origin":"detail"},"contacts":[{"name":"David Anderson","role":"primary","email":"david.anderson.182@spaceforce.mil","phone":"7195677291"},{"name":"Alejandro Castellanos","role":"secondary","email":"alejandro.castellanos@spaceforce.mil","phone":"7195676185"}],"place_of_performance":{"zip":"80912","city":{"name":"Colorado Springs"},"state":{"code":"CO"},"country":{"code":"USA"}},"office_address":{"zip":"80912-2116","city":"SCHRIEVER SFB","state":"CO","country":"USA"},"naics_codes":["541511"],"award":null,"attachments":[],"awards":[],"related":[{"key":"FA2550ST","latest_notice_id":"cb32fe7544744eabafcf11207145bbbc","title":"Schriever Space Force Base Other Transaction HVAC Sources Sought","solicitation_number":"FA2550ST","notice_type":"r","first_type":"r","first_posted":"2026-09-02","last_posted":"2026-09-02","notices":1,"due_at":"2026-10-01T23:00:00Z","due_date":"2026-10-01","closes_at":"2026-10-01T23:00:00Z","awardable":true,"open":true,"removed":false,"dept_key":"d-057","dept_name":"DEPT OF DEFENSE","sub_key":"s-5700","sub_name":"DEPT OF THE AIR FORCE","office_key":"o-FA2550","office_name":"FA2550 50 CONS PKP","naics":null,"psc":null,"set_aside":null,"state":"CO","county":"08041","county_name":"El Paso County","city":"0816000","city_name":"Colorado Springs","country":"USA","winner":null,"winner_key":null,"amount":null,"linked_awards":0,"cancelled":false,"archived":false,"removed_at":null,"updated_at":"2026-09-24T03:25:58.922164Z"}]}