DOT awards $6M for cybersecurity tools, including Palo Alto products, to FCN, Inc

Contract Overview

Contract Amount: $6,052,798 ($6.1M)

Contractor: FCN, Inc.

Awarding Agency: Department of Transportation

Start Date: 2022-09-29

End Date: 2024-03-29

Contract Duration: 547 days

Daily Burn Rate: $11.1K/day

Competition Type: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES

Number of Offers Received: 2

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: THE DEPARTMENT OF TRANSPORTATION (DOT), OFFICE OF THE SECRETARY, OFFICE OF THE CHIEF INFORMATION OFFICER (O-CIO) REQUIRES THE PURCHASE OF PALO ALTO CORTEX XDR, XSOAR AND XPANSE PRODUCTS AND SERVICES.

Place of Performance

Location: WASHINGTON, DISTRICT OF COLUMBIA County, DISTRICT OF COLUMBIA, 20590

State: District of Columbia Government Spending

Plain-Language Summary

Department of Transportation obligated $6.1 million to FCN, INC. for work described as: THE DEPARTMENT OF TRANSPORTATION (DOT), OFFICE OF THE SECRETARY, OFFICE OF THE CHIEF INFORMATION OFFICER (O-CIO) REQUIRES THE PURCHASE OF PALO ALTO CORTEX XDR, XSOAR AND XPANSE PRODUCTS AND SERVICES. Key points: 1. The contract focuses on essential cybersecurity solutions to protect critical infrastructure. 2. Competition was open, suggesting a potentially competitive pricing environment. 3. The duration of the contract (547 days) indicates a medium-term need for these services. 4. The award is a delivery order under a larger contract vehicle. 5. The specific products (Cortex XDR, XSOAR, Xpanse) are advanced cybersecurity tools. 6. The contract value is significant, reflecting the importance of robust cybersecurity.

Value Assessment

Rating: good

The total award amount of $6,052,798.14 for cybersecurity products and services appears reasonable given the specialized nature of Palo Alto Networks' Cortex XDR, XSOAR, and Xpanse solutions. Benchmarking against similar advanced cybersecurity deployments is challenging due to proprietary pricing and the specific configurations required. However, the firm-fixed-price contract type suggests that the government has a clear understanding of the scope and associated costs, which generally promotes cost control. The inclusion of both software and services indicates a comprehensive approach to cybersecurity needs.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

This contract was awarded under full and open competition after exclusion of sources, indicating that multiple vendors were likely considered or had the opportunity to bid. While the specific number of bidders is not provided, the 'full and open' designation suggests a robust competitive process. This approach is generally favored as it allows for the widest possible participation and can lead to better pricing and innovative solutions by leveraging the market's full capabilities.

Taxpayer Impact: A competitive bidding process helps ensure that taxpayer dollars are used efficiently by driving down prices and encouraging vendors to offer their best value propositions.

Public Impact

The Department of Transportation's Office of the Chief Information Officer (O-CIO) is the primary beneficiary, enhancing its cybersecurity posture. The services delivered will bolster the protection of sensitive government data and critical transportation infrastructure. The contract's impact is national, as it supports the cybersecurity of a federal agency responsible for nationwide transportation systems. The acquisition of advanced cybersecurity tools may necessitate specialized training for IT personnel within DOT.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Potential for vendor lock-in with specialized cybersecurity platforms.
Reliance on a single vendor's ecosystem for critical security functions.
The complexity of integrating new XSOAR and Xpanse tools may pose implementation challenges.

Positive Signals

Acquisition of leading-edge cybersecurity technology (Cortex XDR, XSOAR, Xpanse) to address evolving threats.
The use of a firm-fixed-price contract provides cost certainty for the government.
Awarded under full and open competition, suggesting a competitive market for these solutions.

Sector Analysis

The cybersecurity market is a rapidly growing sector within the broader IT industry, driven by increasing digital threats and the need to protect sensitive data and critical infrastructure. Palo Alto Networks is a major player in this space, offering advanced solutions for threat detection, response, and attack surface management. This contract fits within the government's ongoing efforts to modernize its IT infrastructure and enhance its cyber defenses, aligning with broader trends in federal IT spending towards cloud security and advanced threat intelligence.

Small Business Impact

The contract was awarded to FCN, Inc., and the data does not indicate any specific small business set-aside provisions or subcontracting requirements. As a delivery order under a larger contract vehicle, the small business participation may have been addressed at the prime contract level. Further analysis would be needed to determine if FCN, Inc. has a robust small business subcontracting plan in place or if this specific order impacts the small business ecosystem.

Oversight & Accountability

The contract is subject to standard federal procurement oversight. As a delivery order issued by the Department of Transportation, oversight would primarily fall under the agency's internal procurement review processes and potentially the DOT's Office of Inspector General. Transparency is facilitated by the public nature of contract awards, though detailed performance metrics and specific oversight activities are not publicly disclosed in this award notice.

Related Government Programs

Cybersecurity Services
IT Products and Services
Network Security
Threat Detection and Response
Software Licenses and Support

Risk Flags

Potential for vendor lock-in
Complexity of advanced security tool implementation
Need for specialized cybersecurity expertise

Frequently Asked Questions

What is this federal contract paying for?

Department of Transportation awarded $6.1 million to FCN, INC.. THE DEPARTMENT OF TRANSPORTATION (DOT), OFFICE OF THE SECRETARY, OFFICE OF THE CHIEF INFORMATION OFFICER (O-CIO) REQUIRES THE PURCHASE OF PALO ALTO CORTEX XDR, XSOAR AND XPANSE PRODUCTS AND SERVICES.

Who is the contractor on this award?

The obligated recipient is FCN, INC..

Which agency awarded this contract?

Awarding agency: Department of Transportation (Federal Highway Administration).

What is the total obligated amount?

The obligated amount is $6.1 million.

What is the period of performance?

Start: 2022-09-29. End: 2024-03-29.

What is the track record of FCN, Inc. in delivering similar cybersecurity solutions to federal agencies?

FCN, Inc. has a history of providing IT solutions and services to various federal agencies, including cybersecurity-related offerings. While specific details on their track record with Palo Alto Networks' Cortex XDR, XSOAR, and Xpanse products for the Department of Transportation are not detailed in this award notice, their past performance in similar contract vehicles and for other agencies can be assessed through contract databases and agency performance reports. Their experience often includes network infrastructure, IT modernization, and security solutions. A deeper dive into their past performance ratings and any past issues or successes related to cybersecurity implementations would provide a more comprehensive view of their capabilities for this specific contract.

How does the pricing of Palo Alto Networks' Cortex XDR, XSOAR, and Xpanse compare to similar solutions from competitors?

Directly comparing the pricing of Palo Alto Networks' advanced cybersecurity suite (Cortex XDR, XSOAR, Xpanse) to competitors is complex due to proprietary pricing structures, volume discounts, and the specific service components included. Palo Alto Networks is generally positioned as a premium provider in the cybersecurity market, known for its advanced capabilities. Competitors like CrowdStrike, SentinelOne (for XDR), Splunk, IBM (for SOAR), and Tenable (for attack surface management) offer comparable functionalities, but their pricing models and feature sets vary. The 'full and open competition' aspect of this award suggests that DOT sought competitive bids, implying that FCN, Inc.'s pricing, inclusive of Palo Alto's offerings, was deemed competitive at the time of award. However, without the specific bid details, a precise price-to-performance comparison is not feasible.

What are the key risks associated with implementing and managing Palo Alto Networks' advanced cybersecurity suite?

Key risks associated with implementing and managing Palo Alto Networks' advanced cybersecurity suite include the complexity of integration with existing IT infrastructure, the need for specialized expertise to configure and operate the tools effectively, and the potential for vendor lock-in. The Cortex XDR, XSOAR, and Xpanse platforms are powerful but require skilled personnel to maximize their benefits and avoid misconfigurations that could create security gaps. There's also a risk of alert fatigue if not properly tuned, and the ongoing cost of licenses and support needs to be managed. Furthermore, the rapid evolution of cyber threats necessitates continuous updates and adaptation of these tools, posing a risk if the agency or its contractor cannot keep pace.

How effective are Palo Alto Networks' Cortex XDR, XSOAR, and Xpanse in enhancing federal agency cybersecurity postures?

Palo Alto Networks' Cortex XDR, XSOAR, and Xpanse are considered highly effective tools for enhancing federal agency cybersecurity postures when implemented and managed correctly. Cortex XDR provides integrated threat detection and response across endpoints, networks, and cloud environments, offering better visibility and faster incident containment. XSOAR (Security Orchestration, Automation, and Response) automates repetitive security tasks and workflows, improving efficiency and reducing response times. Xpanse focuses on attack surface management, identifying and securing an organization's external-facing digital assets. Federal agencies often adopt these solutions to address sophisticated threats, comply with mandates like the Cybersecurity Executive Order, and improve their overall security operations center (SOC) capabilities. Their effectiveness is often validated through independent security testing and adoption by numerous government entities.

What has been the historical spending by the Department of Transportation on cybersecurity solutions similar to this award?

The Department of Transportation (DOT) has consistently allocated significant resources towards cybersecurity solutions, reflecting the critical nature of its infrastructure and data. Historical spending data would likely show a trend of increasing investment in advanced security technologies, including endpoint detection and response (EDR), security information and event management (SIEM), security orchestration, automation, and response (SOAR), and threat intelligence platforms. This $6.05 million award for Palo Alto Networks products and services is indicative of the scale of investment required for comprehensive cybersecurity. Analyzing past DOT contracts for cybersecurity software, hardware, and related services would reveal patterns in vendor choices, technology adoption, and overall budget allocation for cyber defense over the years.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Computer Systems Design and Related Services › Other Computer Related Services

Product/Service Code: IT AND TELECOM - INFORMATION TECHNOLOGY AND TELECOMMUNICATIONS › IT AND TELECOM - SECURITY AND COMPLIANCE

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Offers Received: 2

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 2600 TOWER OAKS BLVD STE 575, ROCKVILLE, MD, 20852

Business Categories: Category Business, Corporate Entity Not Tax Exempt, Small Business, Special Designations, U.S.-Owned Business, Woman Owned Business, Women Owned Small Business

Financial Breakdown

Contract Ceiling: $6,052,798

Exercised Options: $6,052,798

Current Obligation: $6,052,798

Actual Outlays: $6,052,798

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES

Parent Contract

Parent Award PIID: NNG15SC71B

IDV Type: GWAC

Timeline