{"canonical":"https://abierto.us/opportunities/m9549426r0019","key":"M9549426R0019","url":"https://abierto.us/opportunities/m9549426r0019","title":"Notice of Intent to Sole Source - Insider Threat Monitoring Tool","solicitation_number":"M9549426R0019","notice_type":"p","open":false,"response_deadline":"2026-08-26T20:00:00Z","first_posted":"2026-05-19","last_posted":"2026-08-11","department":"DEPT OF DEFENSE","subagency":"DEPT OF THE NAVY","office":"COMMANDING OFFICER","naics":"541512","psc":"DA10","set_aside":null,"place_state":"VA","winner":null,"award_amount":null,"publications":[{"notice_id":"fdbb698a3d8145e7ab27cab03378ce33","title":"Insider Threat Monitoring Tool","solicitation_number":"M9549426R0019","notice_type":"r","base_type":"r","posted":"2026-05-19","posted_at":null,"due_at":"2026-05-29T14:00:00Z","due_date":"2026-05-29","cancelled":null,"archived":null,"archive_date":"2026-06-13","award_number":null,"awardee_name":null,"amount":null,"link_sam":"https://sam.gov/workspace/contract/opp/fdbb698a3d8145e7ab27cab03378ce33/view","enriched":false,"history":[]},{"notice_id":"99a23ebb700244c5bf3bf9f3909f2193","title":"Notice of Intent to Sole Source - Insider Threat Monitoring Tool","solicitation_number":"M9549426R0019","notice_type":"p","base_type":"r","posted":"2026-08-11","posted_at":null,"due_at":"2026-08-26T20:00:00Z","due_date":"2026-08-26","cancelled":null,"archived":null,"archive_date":"2026-09-10","award_number":null,"awardee_name":null,"amount":null,"link_sam":"https://sam.gov/workspace/contract/opp/99a23ebb700244c5bf3bf9f3909f2193/view","enriched":false,"history":[]}],"latest_notice_id":"99a23ebb700244c5bf3bf9f3909f2193","first_type":"r","notices":[{"dates":{"posted":"2026-05-19","response_deadline":{"raw":"2026-05-29T10:00:00-04:00","utc":"2026-05-29T14:00:00Z","date":"2026-05-29","time":"10:00:00","utc_offset_seconds":-14400}},"links":{"sam":"https://sam.gov/workspace/contract/opp/fdbb698a3d8145e7ab27cab03378ce33/view"},"naics":{"codes":["541512"],"primary":"541512"},"title":"Insider Threat Monitoring Tool","agency":{"office":{"code":"M95494","name":"COMMANDING OFFICER"},"subtier":{"code":"1700","name":"DEPT OF THE NAVY"},"department":{"code":"017","name":"DEPT OF DEFENSE"},"office_address":{"zip":"20380-1775","city":"WASHINGTON","state":"DC","country":"USA"},"organization_type":"OFFICE"},"status":{"active":false,"archive_date":"2026-06-13","archive_type":"auto15"},"contacts":[{"name":"Makyla Clark","role":"primary","email":"makyla.j.clark.civ@usmc.mil","phone":"703-571-6511"},{"name":"Ryan Brown","role":"secondary","email":"ryan.m.brown.civ@usmc.mil","phone":"703-571-6513"}],"base_type":{"code":"r","label":"Sources Sought"},"notice_id":"fdbb698a3d8145e7ab27cab03378ce33","provenance":{"extract":{"url":"https://s3.amazonaws.com/falextracts/Contract%20Opportunities/Archived%20Data/FY2026_archived_opportunities.csv","etag":"\"d9374b90a938e9923d910594731b7b57-106\"","fetched_at":"2026-09-16T16:22:53.920682Z","row_sha256":"1dfe9ec49a38286cd92483b2dda29d6ef3311d40eed569f3c6f28d6400621ec5","last_modified":"2026-09-13T14:50:39Z"},"updated_at":"2026-09-16T16:22:53.920682Z","first_seen_at":"2026-09-16T16:22:53.920682Z"},"description":{"text":"This Sources Sought is for informational purposes only. This is not a Request for Proposal or Request for Quote. It does not constitute a solicitation and shall not be construed as a commitment by the Government. Responses in any form are not offers and the Government is under no obligation to award a contract as a result of this announcement. No funds are available to pay for preparation of responses to this announcement. Any information submitted by Respondents to this notice is strictly voluntary. Description of Requirement The United States Marine Corps (USMC) is seeking information from interested organizations on capabilities in the marketplace for the maintenance, enhancement, and expansion of the Insider Threat Program Monitoring Tool. As part of the Marine Corps Insider Threat Program, there is a Monitoring Tool used to detect insider threats on the Marine Corps Enterprise Network (MCEN). The information compiled from these sources, integrated with information from various other sources (e.g., human resources, law enforcement, and counterintelligence) supports analysis and response to counter insider threats on the MCEN. This effort is specific to the monitoring tool application maintenance, capability enhancement, and expansion. The Marine Corps Insider Threat Program’s Monitoring Tool is mostly fielded. The platform includes the following capabilities: User Activity Monitoring (UAM) Behavioral Analytics Platform (User Behavior) Case Management System To support the USMC Insider Threat Program, the contractor shall field the Behavioral Analytics Platform, operate, enhance, expand, and sustain a comprehensive Insider Threat Monitoring System. 2.0 NAICS The anticipated North American Industrial Classification System (NAICS) code for this requirement is 541512, Computer Systems Design Services with a size standard of $34.0M in annual receipts. 3.0 Product Service Code (PSC) The anticipated Product Service Code (PSC) DA10, IT and Telecom – Business Application/Application Development Software as a Service. 4.0 Current Contract This requirement is a recompete effort currently performed under contract Number M9549421F0010. The incumbent Contractor is: EVERFOX, LLC, CAGE Code: 029J2. Feedback on the attached Draft PWS is encouraged. 5.0 Response Instructions: Respondents are invited to review the Attach Draft Performance Work Statement and submit a brief capability statement that is no more than eight pages (not including cover page) and in no smaller than 11-point font. The capability statement shall address the following: 1. Company Profile Name of Organization Unique Entity ID CAGE Code Tax Identification Number Physical and Website Address. 2. Two (2) Points of Contact (POCs) with names, positions, email addresses, and telephone numbers 3. Business Size Standard Indicate business size classification under NAICS 541512 (i.e., Large, Small Disadvantaged, Veteran, Women Owned, etc.) 4. Technical Capability Provide a narrative describing Organization’s capability to meet/perform the requirements of the Draft PWS. Responses must include a detailed description of their current ability to field, operate, and sustain a comprehensive Insider Threat Monitoring System or a planned capability or an anticipated date this would be achieved. Interoperability and Compliance: Demonstrate the capability to seamlessly integrate with and maintain interoperability across existing Department of War (DoW), United States Marine Corps (USMC), and Intelligence Community (IC) hardware, software, and configuration baselines. Additionally, respondents must provide evidence that their solution is fully compliant with the minimum capability requirements and standards established in CNSSD 504, as well as the National Insider Threat Policy. Standalone Functionality: Detail how the proposed solution operates as a discrete, standalone capability. The capability must function independently and cannot be a byproduct of, or strictly reliant upon, a bundled suite of additive tools designed for multiple, distinct purposes. Proprietary Licensing / Authorized Reseller: The Government anticipates that this requirement necessitates proprietary software licenses from EverFox, LLC. Respondents must state whether they are the Original Equipment Manufacturer (OEM), an authorized reseller capable of providing the required EverFox, LLC licenses, or if they are proposing an alternative solution. If proposing an alternative, the respondent must provide clear technical data proving the alternative meets all aforementioned interoperability and compliance requirements without violating existing intellectual property rights or requiring excessive re-engineering. 5. Relevant Experience Summary of past and present performance on similar requirements Include dollar values and specify whether work was performed for the Government or non-federal entities, and whether that experience was performed as a Prime Contractor or Subcontractor 6. Feedback and Recommendations (not included in page limit) Comments on the Draft PWS. Feedback on the proposed NAICS code, PSC selection, or contract type Submission Deadline: All responses to this Notice shall be submitted via email no later than 29 May 2026 at 10:00 AM EST, to: Ms. Makyla Clark (makyla.j.clark.civ@usmc.mil); and Mr. Ryan Brown (ryan.m.brown@usmc.mil). Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. All Government personnel reviewing Capabilities Statements will have signed Non-Disclosure Agreements and understand the obligations for proper use and protection from unauthorized disclosure of proprietary information as described at 41 U.S.C § 2102. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.","origin":"extract"},"notice_type":{"code":"r","label":"Sources Sought"},"schema_version":1,"solicitation_number":"M9549426R0019","place_of_performance":{"city":{"name":"Arlington"},"state":{"code":"VA"},"country":{"code":"USA"}},"product_service_code":"DA10"},{"dates":{"posted":"2026-08-11","response_deadline":{"raw":"2026-08-26T16:00:00-04:00","utc":"2026-08-26T20:00:00Z","date":"2026-08-26","time":"16:00:00","utc_offset_seconds":-14400}},"links":{"sam":"https://sam.gov/workspace/contract/opp/99a23ebb700244c5bf3bf9f3909f2193/view"},"naics":{"codes":["541512"],"primary":"541512"},"title":"Notice of Intent to Sole Source - Insider Threat Monitoring Tool","agency":{"office":{"code":"M95494","name":"COMMANDING OFFICER"},"subtier":{"code":"1700","name":"DEPT OF THE NAVY"},"department":{"code":"017","name":"DEPT OF DEFENSE"},"office_address":{"zip":"20380-1775","city":"WASHINGTON","state":"DC","country":"USA"},"organization_type":"OFFICE"},"status":{"active":false,"archive_date":"2026-09-10","archive_type":"auto15"},"contacts":[{"name":"Makyla Clark","role":"primary","email":"makyla.j.clark.civ@usmc.mil","phone":"703-571-6511"},{"name":"Ryan Brown","role":"secondary","email":"ryan.m.brown.civ@usmc.mil","phone":"703-571-6513"}],"base_type":{"code":"r","label":"Sources Sought"},"notice_id":"99a23ebb700244c5bf3bf9f3909f2193","provenance":{"extract":{"url":"https://s3.amazonaws.com/falextracts/Contract%20Opportunities/Archived%20Data/FY2026_archived_opportunities.csv","etag":"\"d9374b90a938e9923d910594731b7b57-106\"","fetched_at":"2026-09-16T00:55:27.040971Z","row_sha256":"bc6cfbf651f1126ca58ea660095c0f4b1a0b3382c21e321eb9ab74ebb4856e0a","last_modified":"2026-09-13T14:50:39Z"},"updated_at":"2026-09-16T00:55:27.040971Z","first_seen_at":"2026-09-16T00:55:27.040971Z"},"description":{"text":"The Marine Corps Installations Command (MCICOM) Headquarters (HQ) Contracting Office, located in Arlington, VA, intends to negotiate and award a sole-source contract to Everfox, LLC for the expansion, maintenance, and enhancement of the Insider Threat Monitoring Tool for the Marine Corps Insider Threat Program. Description of Action: The Government intends to award a hybrid firm-fixed/cost priced sole-source contract for the continuation of work previously completed under Task Order M95494-21-F-0010. This action includes the expansion, maintenance, and enhancement of the current proprietary User Activity Monitoring (UAM) platform, which consists of three modules: UAM, a Behavior Analytics Platform, and a Case Management System. This action is required to maintain the existing system, achieve full operational capability, and expand the service across the Marine Corps Enterprise Network in support of Federal and Department of War Insider Threat policy mandates. The anticipated Period of Performance is 30 Sept 2026 to 29 Sept 2032. Statutory Authority: This action will be executed on a basis of other than full and open competition pursuant to 10 U.S.C. § 3204(a)(1), as implemented by FAR 6.103-1: Only one responsible source and no other supplies or services will satisfy agency requirements. Justification Rationale: The Everfox, LLC Monitoring Tool is already fielded on the Non-Classified Internet Protocol Router Network (NIPRNet) by the Marine Corps. Selecting an alternative original equipment manufacturer would require a \"rip-and-replace\" approach. This introduces the risk of duplicating substantial contract costs, as the Government would be abandoning sunk costs in the existing deployment and paying new licensing, deployment, and accreditation costs for an unproven platform. Two of the three system modules have already secured the necessary Authorizations to Operate (ATOs), which are inextricably linked to Everfox’s proprietary architecture. Transitioning to an alternate vendor would nullify these ATOs and mandate a complete restart of the Risk Management Framework authorization process, introducing an unacceptable operational delay estimated at five to seven years. Such a delay would create a critical security vulnerability in the Marine Corps' security posture. Everfox is the sole vendor capable of delivering the required proprietary software while avoiding duplicated costs, compliance risks, and ensuring direct privity of contract with the OEM. Instructions to Interested Parties: This Notice of Intent is not a request for competitive proposals. As part of market research, a Sources Sought Notice (M95494-26-R-0019) was previously issued from 19 May to 29 May 2026. While the Government is proceeding with a sole-source award, any responsible source that believes it can meet the requirements may submit a capability statement, which shall be considered by the agency. Capability statements must clearly demonstrate, through verifiable technical specifications and past performance, the ability to provide an integrated solution that can sustain, expand, and enhance the existing proprietary Everfox platform without requiring a \"rip-and-replace,\" does not nullify existing ATOs, and is fully compliant with the technical requirements mandated by CNSSD 504. A determination by the Government not to compete this proposed action based on responses to this notice is solely within the discretion of the Government. Responses must be submitted via email to Contracting Officer Ryan Brown (email: ryan.m.brown.civ@usmc.mil) and Contracting Specialist Makyla Clark (email: makyla.j.clark.civ@usmc.mil) no later than 4:00 PM EDT, on 26 August 2026. Phone calls will not be accepted.","origin":"extract"},"notice_type":{"code":"p","label":"Presolicitation"},"schema_version":1,"solicitation_number":"M9549426R0019","place_of_performance":{"city":{"name":"Arlington"},"state":{"code":"VA"},"country":{"code":"USA"}},"product_service_code":"DA10"}],"due_at":"2026-08-26T20:00:00Z","due_date":"2026-08-26","closes_at":"2026-08-26T20:00:00Z","awardable":true,"dept_key":"d-017","dept_name":"DEPT OF DEFENSE","sub_key":"s-1700","sub_name":"DEPT OF THE NAVY","office_key":"o-M95494","office_name":"COMMANDING OFFICER","state":"VA","country":"USA","winner_key":null,"amount":null,"linked_awards":0,"cancelled":false,"archived":false,"updated_at":"2026-09-16T17:40:17.704408Z","principal_notice_id":"99a23ebb700244c5bf3bf9f3909f2193","description":{"text":"The Marine Corps Installations Command (MCICOM) Headquarters (HQ) Contracting Office, located in Arlington, VA, intends to negotiate and award a sole-source contract to Everfox, LLC for the expansion, maintenance, and enhancement of the Insider Threat Monitoring Tool for the Marine Corps Insider Threat Program. Description of Action: The Government intends to award a hybrid firm-fixed/cost priced sole-source contract for the continuation of work previously completed under Task Order M95494-21-F-0010. This action includes the expansion, maintenance, and enhancement of the current proprietary User Activity Monitoring (UAM) platform, which consists of three modules: UAM, a Behavior Analytics Platform, and a Case Management System. This action is required to maintain the existing system, achieve full operational capability, and expand the service across the Marine Corps Enterprise Network in support of Federal and Department of War Insider Threat policy mandates. The anticipated Period of Performance is 30 Sept 2026 to 29 Sept 2032. Statutory Authority: This action will be executed on a basis of other than full and open competition pursuant to 10 U.S.C. § 3204(a)(1), as implemented by FAR 6.103-1: Only one responsible source and no other supplies or services will satisfy agency requirements. Justification Rationale: The Everfox, LLC Monitoring Tool is already fielded on the Non-Classified Internet Protocol Router Network (NIPRNet) by the Marine Corps. Selecting an alternative original equipment manufacturer would require a \"rip-and-replace\" approach. This introduces the risk of duplicating substantial contract costs, as the Government would be abandoning sunk costs in the existing deployment and paying new licensing, deployment, and accreditation costs for an unproven platform. Two of the three system modules have already secured the necessary Authorizations to Operate (ATOs), which are inextricably linked to Everfox’s proprietary architecture. Transitioning to an alternate vendor would nullify these ATOs and mandate a complete restart of the Risk Management Framework authorization process, introducing an unacceptable operational delay estimated at five to seven years. Such a delay would create a critical security vulnerability in the Marine Corps' security posture. Everfox is the sole vendor capable of delivering the required proprietary software while avoiding duplicated costs, compliance risks, and ensuring direct privity of contract with the OEM. Instructions to Interested Parties: This Notice of Intent is not a request for competitive proposals. As part of market research, a Sources Sought Notice (M95494-26-R-0019) was previously issued from 19 May to 29 May 2026. While the Government is proceeding with a sole-source award, any responsible source that believes it can meet the requirements may submit a capability statement, which shall be considered by the agency. Capability statements must clearly demonstrate, through verifiable technical specifications and past performance, the ability to provide an integrated solution that can sustain, expand, and enhance the existing proprietary Everfox platform without requiring a \"rip-and-replace,\" does not nullify existing ATOs, and is fully compliant with the technical requirements mandated by CNSSD 504. A determination by the Government not to compete this proposed action based on responses to this notice is solely within the discretion of the Government. Responses must be submitted via email to Contracting Officer Ryan Brown (email: ryan.m.brown.civ@usmc.mil) and Contracting Specialist Makyla Clark (email: makyla.j.clark.civ@usmc.mil) no later than 4:00 PM EDT, on 26 August 2026. Phone calls will not be accepted.","html":null,"origin":"extract"},"contacts":[{"name":"Makyla Clark","role":"primary","email":"makyla.j.clark.civ@usmc.mil","phone":"703-571-6511"},{"name":"Ryan Brown","role":"secondary","email":"ryan.m.brown.civ@usmc.mil","phone":"703-571-6513"}],"place_of_performance":{"city":{"name":"Arlington"},"state":{"code":"VA"},"country":{"code":"USA"}},"office_address":{"zip":"20380-1775","city":"WASHINGTON","state":"DC","country":"USA"},"naics_codes":["541512"],"award":null,"attachments":[],"awards":[],"related":[{"key":"M9549426SSNADCFAS","latest_notice_id":"853596d9a5604a12930b311f57973f4d","title":"HQMC Financial and Administrative Support Services","solicitation_number":"M95494-26-SSN-ADCFAS","notice_type":"r","first_type":"r","first_posted":"2026-09-10","last_posted":"2026-09-10","notices":1,"due_at":"2026-09-30T16:00:00Z","due_date":"2026-09-30","closes_at":"2026-09-30T16:00:00Z","awardable":true,"open":true,"dept_key":"d-017","dept_name":"DEPT OF DEFENSE","sub_key":"s-1700","sub_name":"DEPT OF THE NAVY","office_key":"o-M95494","office_name":"COMMANDING OFFICER","naics":"541219","psc":"R499","set_aside":null,"state":null,"country":null,"winner":null,"winner_key":null,"amount":null,"linked_awards":0,"cancelled":false,"archived":false,"updated_at":"2026-09-16T07:31:38.954589Z"}]}