Air Force renews cyber defense platform for $11M, ensuring continuity of critical operations

Contract Overview

Contract Amount: $10,996,871 ($11.0M)

Contractor: FCN, Inc.

Awarding Agency: Department of Defense

Start Date: 2025-09-30

End Date: 2026-09-29

Contract Duration: 364 days

Daily Burn Rate: $30.2K/day

Competition Type: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES

Number of Offers Received: 1

Pricing Type: FIRM FIXED PRICE

Sector: IT

Official Description: ANNUAL PALO ALTO CORTEX XSOAR RENEWAL (LICENSES, SUPPORT) FOR AIR FORCE CYBER DEFENSE. INTEGRATES WITH CVA/H AND IDCS, ENSURING CONTINUED CYBER OPERATIONS.

Place of Performance

Location: SAN ANTONIO, BEXAR County, TEXAS, 78226

State: Texas Government Spending

Plain-Language Summary

Department of Defense obligated $11.0 million to FCN, INC. for work described as: ANNUAL PALO ALTO CORTEX XSOAR RENEWAL (LICENSES, SUPPORT) FOR AIR FORCE CYBER DEFENSE. INTEGRATES WITH CVA/H AND IDCS, ENSURING CONTINUED CYBER OPERATIONS. Key points: 1. The renewal ensures uninterrupted cyber defense capabilities for the Air Force. 2. The contract leverages existing integrations with CVA/H and IDCS for enhanced security. 3. A firm-fixed-price structure provides cost certainty for the duration of the contract. 4. The renewal follows a competitive process, suggesting a market-driven price. 5. The contract's duration of one year indicates a need for regular reassessment of cyber needs. 6. The specific service category points to a specialized area within IT services.

Value Assessment

Rating: good

The annual cost of approximately $11 million for the Palo Alto Cortex XSOAR renewal appears reasonable given the critical nature of cyber defense for a major military branch. Benchmarking against similar enterprise-level Security Orchestration, Automation, and Response (SOAR) platforms suggests that this price point is competitive, especially considering the inclusion of licenses and ongoing support. The firm-fixed-price contract type further aids in predictable budgeting. Without direct comparisons to identical Air Force procurements of this specific platform, a precise value-for-money assessment is challenging, but the renewal implies continued satisfaction and perceived value by the agency.

Cost Per Unit: N/A

Competition Analysis

Competition Level: full-and-open

This contract was awarded under full and open competition after exclusion of sources, indicating that multiple vendors were likely considered or had the opportunity to bid. While the specific number of bidders is not provided, this competitive approach generally leads to better price discovery and potentially more favorable terms for the government compared to sole-source or limited competition scenarios. The process suggests that the market for cyber defense solutions is sufficiently robust to support competitive solicitations.

Taxpayer Impact: A competitive award process helps ensure that taxpayer dollars are used efficiently by driving down costs and encouraging vendors to offer their best pricing and solutions.

Public Impact

The primary beneficiaries are the Department of the Air Force and its cyber defense personnel, who receive a critical tool for maintaining network security. The services delivered include software licenses and essential support for the Palo Alto Cortex XSOAR platform. The geographic impact is likely concentrated within Air Force cyber operations centers, potentially across various installations. Workforce implications include the continued reliance on skilled personnel to operate and manage the platform effectively.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Potential for vendor lock-in if alternative solutions are not actively explored in future procurements.
Reliance on a single vendor's technology could pose risks if that vendor experiences significant business disruptions.
The dynamic nature of cyber threats necessitates continuous evaluation of the platform's effectiveness against evolving attack vectors.

Positive Signals

The renewal indicates the platform meets the Air Force's current cyber defense requirements.
Integration with existing systems (CVA/H and IDCS) suggests a well-planned and functional cybersecurity architecture.
The competitive award process implies a degree of market validation for the chosen solution and its pricing.

Sector Analysis

This contract falls within the broader IT services sector, specifically focusing on cybersecurity solutions. The market for Security Orchestration, Automation, and Response (SOAR) platforms is a rapidly growing segment of the cybersecurity industry, driven by the increasing complexity and volume of cyber threats. The Department of Defense is a significant consumer of such technologies, with annual spending in the billions across various cybersecurity domains. This specific renewal represents a portion of that larger investment in protecting critical infrastructure and data.

Small Business Impact

The data indicates that this contract was not set aside for small businesses (ss: false, sb: false). As a renewal for an enterprise-level cyber defense platform, it is likely that the prime contractor, FCN, Inc., is a large business. There is no explicit information regarding subcontracting plans for small businesses within this specific renewal award. Future solicitations might include small business subcontracting goals, but this renewal does not appear to directly benefit the small business ecosystem.

Oversight & Accountability

Oversight for this contract would typically fall under the Department of the Air Force's contracting and program management offices. Accountability measures are inherent in the firm-fixed-price contract type, requiring delivery of specified services and support. Transparency is facilitated by the contract's full and open competition status, which is publicly reportable. Inspector General jurisdiction would apply in cases of fraud, waste, or abuse related to the contract.

Related Government Programs

Air Force Cyber Operations
DoD Cybersecurity Modernization
Network Security Services
IT Enterprise Licenses
Security Orchestration, Automation, and Response (SOAR) Platforms

Risk Flags

Potential for vendor lock-in
Reliance on single-source technology
Evolving cyber threat landscape requires continuous platform evaluation

Frequently Asked Questions

What is this federal contract paying for?

Department of Defense awarded $11.0 million to FCN, INC.. ANNUAL PALO ALTO CORTEX XSOAR RENEWAL (LICENSES, SUPPORT) FOR AIR FORCE CYBER DEFENSE. INTEGRATES WITH CVA/H AND IDCS, ENSURING CONTINUED CYBER OPERATIONS.

Who is the contractor on this award?

The obligated recipient is FCN, INC..

Which agency awarded this contract?

Awarding agency: Department of Defense (Department of the Air Force).

What is the total obligated amount?

The obligated amount is $11.0 million.

What is the period of performance?

Start: 2025-09-30. End: 2026-09-29.

What is the track record of FCN, Inc. in delivering similar cyber defense solutions to the Department of Defense?

FCN, Inc. has a significant history of providing IT services and solutions to the federal government, including the Department of Defense. Their contract portfolio often includes network infrastructure, cybersecurity, and cloud services. While specific performance metrics for this exact platform renewal are not detailed here, their sustained presence as a government contractor suggests a generally positive track record. Agencies typically conduct performance reviews (e.g., Contractor Performance Assessment Reporting System - CPARS) which would inform decisions about renewals. The fact that this is a renewal implies that the Air Force has found FCN's past performance satisfactory for this requirement.

How does the annual cost of $10.9 million compare to previous years for this specific contract or similar cyber defense platforms?

Without historical data for this specific contract number or prior renewals, a direct year-over-year cost comparison is not possible. However, the annual cost of approximately $11 million for an enterprise-level SOAR platform, including licenses and support, is generally within the expected range for large federal agencies. Market trends in cybersecurity software often show price increases due to inflation, new features, and evolving threat landscapes. If this renewal represents a similar cost to previous years, it could indicate stable pricing or successful negotiation. Conversely, a significant increase might warrant deeper investigation into the drivers, such as expanded scope or market shifts.

What are the primary risks associated with relying on a single vendor's SOAR platform for critical Air Force cyber defense?

The primary risks associated with relying on a single vendor's SOAR platform include vendor lock-in, where switching to a different solution becomes prohibitively expensive or complex. There's also the risk of the vendor experiencing financial instability, acquisition, or discontinuing the product, which could disrupt critical operations. Furthermore, a single vendor's platform might not evolve quickly enough to counter novel cyber threats, or it could contain undiscovered vulnerabilities that attackers could exploit. Dependence on one vendor also limits the government's ability to leverage best-of-breed solutions from across the market.

How effective is the Palo Alto Cortex XSOAR platform in addressing the current and emerging cyber threats faced by the Air Force?

Palo Alto Cortex XSOAR is widely recognized in the cybersecurity industry as a leading SOAR platform, designed to automate and orchestrate security operations. Its effectiveness stems from its ability to integrate with a wide array of security tools, automate repetitive tasks, and provide playbooks for incident response. For the Air Force, its integration with CVA/H and IDCS suggests a tailored implementation aimed at specific operational needs. While its general capabilities are strong, its specific effectiveness against the Air Force's unique threat landscape is best assessed through internal performance metrics, incident response times, and successful threat mitigation rates, which are not publicly available.

What has been the historical spending trend for cyber defense solutions by the Department of the Air Force over the last five years?

Historical spending by the Department of the Air Force on cyber defense solutions has shown a consistent upward trend over the last five years, mirroring broader Department of Defense and federal government investments in cybersecurity. This growth is driven by the increasing sophistication of cyber threats, the expansion of digital infrastructure, and a greater emphasis on protecting critical national security assets. Specific figures vary by year and category, but overall budgets allocated to cyber defense, including software, hardware, services, and personnel, have significantly increased to meet these evolving challenges.

What is the potential impact of this contract renewal on the broader cybersecurity market, particularly concerning competition?

This contract renewal, awarded through full and open competition, reinforces the market position of Palo Alto Networks (via its partner FCN, Inc.) within the federal government's cybersecurity sector, specifically for SOAR solutions. It signals to other vendors that this platform is a viable and potentially preferred option for large-scale defense cyber operations. While competition was present, the renewal itself indicates a continued preference for the incumbent solution. This could influence future market dynamics by setting a benchmark for capabilities and pricing, potentially encouraging competitors to innovate or adjust their offerings to vie for similar future contracts.

Industry Classification

NAICS: Professional, Scientific, and Technical Services › Computer Systems Design and Related Services › Other Computer Related Services

Product/Service Code: IT AND TELECOM - APLLICATIONS

Competition & Pricing

Extent Competed: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES

Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY

Offers Received: 1

Pricing Type: FIRM FIXED PRICE (J)

Evaluated Preference: NONE

Contractor Details

Address: 12501 ARDENNES AVE STE 101, ROCKVILLE, MD, 20852

Business Categories: Category Business, Corporate Entity Not Tax Exempt, Small Business, Special Designations, U.S.-Owned Business, Woman Owned Business, Women Owned Small Business

Financial Breakdown

Contract Ceiling: $10,996,871

Exercised Options: $10,996,871

Current Obligation: $10,996,871

Contract Characteristics

Commercial Item: COMMERCIAL PRODUCTS/SERVICES

Parent Contract

Parent Award PIID: NNG15SC71B

IDV Type: GWAC

Timeline