Integrated Defensive Cyberspace System (IDCS) Secure Platform Architecture for Real-Time Threat Analysis and Network Defense (SPARTAN)

The Department of the Air Force, through the Defensive Cyber Systems Branch at AFLCMC/HNCD, is conducting market research under solicitation FA8307-25-R-B057 for the Integrated Defensive Cyberspace System (IDCS) Secure Platform Architecture for Real-Time Threat Analysis and Network Defense, known as SPARTAN. This effort aims to establish an enterprise-wide, modular, open-architecture platform designed to enhance cyberspace defense capabilities across cloud and on-premises environments, enabling real-time threat detection, continuous monitoring, and rapid operational adaptation. The initiative requires vendors to possess proven expertise in cybersecurity operations, system integration, C5I support, and Agile development methodologies, with a strong emphasis on delivering measurable outcomes through sustained innovation and process maturation. Primary performance is centered in San Antonio, Texas, where all Key Personnel Positions must either reside or commute four to five days per week, and the contractor must maintain a Facility Security Clearance at TS/SCI level. All personnel must hold at least a SECRET clearance, with TS/SCI required for key roles, and must possess valid Common Access Cards or External Certificate Authority credentials for system access. The solicitation mandates compliance with comprehensive cybersecurity standards including NIST SP 800-171, DoD RMF, DISA STIGs, AFIs, and EO 13556, with deliverables governed by strict documentation protocols tied to CSDR, FlexFile, and specific Data Item Descriptions. Attachments such as the Security Test Plan, Cybersecurity Plan, Incident Response Plan, Software Bill of Materials, and AI/ML Monitoring Reports must be submitted and adhere to DI-MGMT and other DoD specifications. Vendor responses are structured around a required whitepaper format with strict page limits per section and must include detailed information on business size, socioeconomic status, UEI/CAGE codes, FCL validation, and disclosures regarding foreign ownership or prior engagements with IDCS support vendors. Technical proposals must demonstrate competency in DevSecOps, measurable performance metrics like MTTD and MTTR, and alignment with CMMC and DODI 8140.03 certification standards. All submissions must be emailed to designated points of contact by the September 29, 2025 deadline, encrypted if containing CUI, and posted on SAM.gov. The contract vehicle is anticipated to be an IDIQ with task orders potentially using FFP or CPFF structures, though no pricing or budget ceilings are currently available as this remains a pre