Zero Trust Post Quantum Cryptography (PQC) Roadmap AOI 26-A006 under RCC CSO N6523626S0001

The Department of the Navy, through NIWC Atlantic, is seeking a commercial solution to automate the discovery, identification, and cataloging of cryptographic assets across its enterprise and tactical environments in response to the imminent threat posed by cryptographically relevant quantum computers. This initiative, issued under Commercial Solutions Opening N65236-26-S-0001 with solicitation number 26-A006, aims to create a continuous, enterprise-wide Cryptographic Bill of Materials (CBOM) that dynamically maps all cryptographic algorithms, protocols, key lengths, and certificates in use on on-premise and cloud IT systems, mobile platforms, operational technology, and embedded weapon systems. The solution must support hybrid scanning methodologies—including passive network sniffing and active, authenticated, or agent-based discovery—and operate effectively in disconnected, intermittently connected, and low-bandwidth tactical environments without disrupting mission-critical operations. The CBOM must feed directly into authoritative Navy data repositories to enable centralized risk reporting, prioritized migration planning to Post-Quantum Cryptography, and real-time vulnerability assessments. Proposals must be submitted via the Vulcan platform no later than 11:59 p.m. EDT on July 8, 2026, and must include the prime contractor’s Cage Code, a detailed account of nontraditional business participation as defined in the CSO, and must not contain Controlled Unclassified Information. Submission requires a Secret Facility Clearance, which must be verifiable at the time of proposal submission, and is a hard pass/fail requirement. Offerors who pass the initial review will be invited to a live, in-person pitch in Charleston, South Carolina, tentatively scheduled for July 20–21, 2026, where they must provide a Bottom Line Up Front summary, top-level cost estimate, and conduct a mandatory unclassified demonstration of their solution executing a representative operational scenario. The solution must also minimize processing, memory, and bandwidth overhead on tactical assets and ideally include documented timelines for FIPS 140-3 validations of the vendor’s cryptographic modules. While no contract value or pricing structure is specified, the effort is structured as a prototype agreement under a CSO, and successful candidates will support the Navy’s broader Zero Trust and quantum-readiness roadmap mandated by NSM-10 and OMB M-23-02.