Zero Trust Post Quantum Cryptography (PQC) Roadmap AOI 26-A006
Below is a brief summary. Please check the full solicitation before applying (link in resources section).
Executive Summary:
The Naval Information Warfare Center (NIWC) Atlantic Rapid Capabilities Office is seeking commercial technologies that can help the Department of the Navy automate its transition to Post-Quantum Cryptography (PQC). This effort focuses on discovering, inventorying, and continuously monitoring cryptographic assets across Navy and Marine Corps networks to generate automated Cryptographic Bills of Materials (CBOMs) that support enterprise-wide risk management and PQC migration.
This is an Other Transaction Authority (OTA) prototype opportunity intended for commercial technologies that can rapidly deploy, integrate across enterprise and tactical environments, and demonstrate mature capabilities. Companies selected for Phase 2 will participate in a live demonstration of their technology.
Solution Briefs must be submitted via the Vulcan platform no later than 2359 Eastern Daylight Time (EDT) 07 July 2026. Late submissions will not be considered.
How much funding would I receive?
The solicitation does not specify the prototype award amount, award range, or anticipated contract value. These initial contracts typically range from $500,000 to about $5 million.
What could I use the funding for?
The prototype is intended to develop and demonstrate an automated solution capable of:
Discovering cryptographic algorithms, protocols, certificates, key lengths, and implementations across Department of the Navy environments.
Supporting enterprise IT, cloud, mobile systems, operational technology (OT), and tactical or embedded platforms.
Generating machine-readable Cryptographic Bills of Materials (CBOMs).
Continuously monitoring cryptographic assets for changes.
Supporting PQC migration planning, vulnerability assessments, and centralized risk reporting.
Integrating with Navy authoritative data repositories.
Operating across secure cloud environments and disconnected, intermittently connected, and low-bandwidth (DIL) environments.
Are there any additional benefits I would receive?
Potential benefits include:
Opportunity to participate in a Phase 2 live demonstration.
Potential for a follow-on production agreement without further competitive procedures if a prototype agreement is awarded.
Opportunity to demonstrate commercial technology directly to NIWC Atlantic and Department of the Navy stakeholders.
What is the timeline to apply and when would I receive funding?
Key dates include:
Opportunity opens: 29 June 2026.
Solution Brief deadline: 2359 Eastern Daylight Time (EDT) 07 July 2026.
Tentative Phase 2 Pitch: 20–21 July 2026 in Charleston, South Carolina.
Companies selected for Phase 2 will be notified in writing as soon as practicable.
The solicitation does not specify when prototype awards will be made or when funding will be received.
Solution Briefs must be submitted via the Vulcan platform no later than 2359 Eastern Daylight Time (EDT) 07 July 2026.
Where does this funding come from?
Funding is provided through:
Naval Information Warfare Center (NIWC) Atlantic Rapid Capabilities Office.
Commercial Solutions Opening (CSO) N65236-26-S-0001.
Area of Interest 26-A006: Zero Trust Post Quantum Cryptography (PQC) Roadmap.
Command Focus Area: Battlespace Connectivity.
Who is eligible to apply?
The solicitation is seeking commercial vendors capable of delivering a prototype solution.
Offerors must:
Submit a Solution Brief through the Vulcan platform.
Demonstrate the required Secret Facility Clearance at the time of Solution Brief submission.
Include the prime contractor's CAGE Code.
Meet the nontraditional business participation requirements described in CSO N65236-26-S-0001 Paragraph 6.2 or explicitly state any proposed cost share.
Demonstrate their solution in an unclassified environment during Phase 2 if invited.
Preference may be given to companies with solutions at a minimum Technology Readiness Level (TRL) 7 and prior experience with automated asset discovery, code security analysis, or enterprise-scale vulnerability scanning.
Who is not eligible to apply?
The following will not be considered:
Contractors that do not possess the required Secret Facility Clearance at the time of Solution Brief submission.
Solution Briefs submitted after 2359 EDT on 07 July 2026.
Solution Briefs emailed directly to the Government point of contact instead of submitted through the Vulcan platform.
The solicitation does not identify any additional eligibility exclusions.
What companies and projects are likely to win?
The strongest proposals will offer a mature, integrated commercial solution that can:
Automatically discover cryptographic assets across enterprise, cloud, endpoint, OT, and tactical environments.
Support both passive and active scanning.
Automatically generate machine-readable CBOMs.
Continuously monitor cryptographic baselines.
Meet applicable security and compliance requirements.
Operate within cloud-native and scalable architectures.
Identify legacy cryptography alongside FIPS 203, FIPS 204, and FIPS 205 implementations.
Operate in DIL environments.
Integrate with Department of the Navy centralized repositories.
Preference may also be given to companies that:
Demonstrate a corporate PQC migration roadmap.
Minimize operational overhead.
Have solutions at TRL 7 or higher.
Can demonstrate enterprise-scale deployments and rapid scalability.
How competitive will this solicitation be?
This opportunity is likely to be competitive because:
The Government reserves the right to limit the number of companies invited to Phase 2.
Selection is based on evaluation of the submitted Solution Briefs.
Phase 2 requires a live demonstration of the proposed solution.
Preference may be given to more mature technologies with demonstrated operational capability.
The solicitation does not specify the anticipated number of awards or invitees.
Are there any restrictions I should know about?
Applicants should be aware that:
Solution Briefs must not contain Controlled Unclassified Information (CUI).
Solution Briefs must be submitted through the Vulcan platform.
Submission as a Scout Card alone is not sufficient; the Solution Brief must also be uploaded as an attachment.
A Secret Facility Clearance is required at submission.
The prime contractor's CAGE Code must be included.
Teaming partners must be identified if used to satisfy nontraditional participation requirements.
Cost share must be explicitly stated if proposed.
The Government requires a mandatory live, unclassified demonstration during Phase 2.
Late submissions will not be considered.
How long will it take me to prepare an application?
The solicitation does not specify an expected preparation time.
However, companies should anticipate preparing:
A compliant Solution Brief.
Documentation supporting nontraditional business participation or cost share.
Secret Facility Clearance information and CAGE Code.
Materials necessary for a live technology demonstration if invited to Phase 2.How can BW&CO help?
Developing a competitive NIH cooperative agreement application requires more than a strong technical concept. Applicants must also demonstrate program alignment, a clear development strategy, meaningful collaboration, measurable milestones, and compliance with NIH requirements.
How can BW&CO help?
BW&CO helps technology companies compete for Department of Defense OTA opportunities by:
Assessing solution alignment with the Area of Interest.
Developing compliant, reviewer-focused Solution Briefs.
Positioning commercial capabilities against Government evaluation criteria.
Highlighting technical differentiators, maturity, and transition potential.
Preparing companies for live Government pitch and demonstration sessions.