Zero Trust Automated Threat-Based Cyber Assessment Solutions

The Department of Defense (DoD) is seeking information from industry on automated Zero Trust Threat-Based Cyber Assessment solutions. The goal is to move beyond traditional, compliance-based assessments to a continuous, automated, and threat-based approach that provides dynamic insights into real-time risk. The solutions must validate that an environment meets DoD Target Level ZT activity outcomes, reduce time and costs associated with post-TBCA Purple Team assessments, and support continuous TBCAs to validate the 91 Target level Zero Trust Activities. Some key points to consider include: • The solution must run within a Component’s environment to execute emulated adversarial activities. • The solution must be ready for use in production/ATO environments by the end of Q2 FY26. • The solution must be a product that DoD Components are able to procure. • The Government seeks input on various aspects of the proposed solutions, including strategy, impact level, threat frameworks, and total cost of ownership.