US-FED-00000394876 - Schriever Cyber Threat Intelligence Software - Deadline September 24,2026

This is a new requirement for a secure, high–fidelity network flow analytics platform. The system must meet or exceed the following technical capabilities:Netflow Telemetry Querying: Provide access to a massive, global network flow database with the ability to run targeted queries on source/destination IP addresses, ports, protocal types, packet counts, and timestamps.Threat Infrastructure Tracking: Enable users to trace malicious command and control (C2) servers, map botnets, analyze hostile infrastructure, and perform forensic attribution.Passive DNS & IP Reputation: Integrated access to historical passive DNS databases and IP threat scores to quickly context–resolve suspect nodes.Encrypted Traffic Profiling: Capabilities to identify and analyze anomalous traffic patterns and identify threat actors utilizing virtual private networks (VPNs) or encrypted tunneling.Secure, web–based software platform with 24/7/365 availability.API endpoints for integrating intelligence feeds directly into the unit`slocal security tools, Security Information and Event Management (SIEM) systems, or data orchestrators.Operations & Maintenance Support:Software Updates: Ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance periods at no extra cost.Technical Support: Helpdesk and administrator support for user troubleshooting, configuration assistance, and platform optimizationThis posting is a Sources Sought only for market research, no quotes will be evaluated at this time.