Notice of Intent to Sole Source - Insider Threat Monitoring Tool

The Marine Corps Installations Command (MCICOM) Headquarters (HQ) Contracting Office, located in Arlington, VA, intends to negotiate and award a sole-source contract to Everfox, LLC for the expansion, maintenance, and enhancement of the Insider Threat Monitoring Tool for the Marine Corps Insider Threat Program.

Description of Action: 

The Government intends to award a hybrid firm-fixed/cost priced sole-source contract for the continuation of work previously completed under Task Order M95494-21-F-0010. This action includes the expansion, maintenance, and enhancement of the current proprietary User Activity Monitoring (UAM) platform, which consists of three modules: UAM, a Behavior Analytics Platform, and a Case Management System. This action is required to maintain the existing system, achieve full operational capability, and expand the service across the Marine Corps Enterprise Network in support of Federal and Department of War Insider Threat policy mandates. The anticipated Period of Performance is 30 Sept 2026 to 29 Sept 2032. 

Statutory Authority: 

This action will be executed on a basis of other than full and open competition pursuant to 10 U.S.C. § 3204(a)(1), as implemented by FAR 6.103-1: Only one responsible source and no other supplies or services will satisfy agency requirements. 

Justification Rationale: 

The Everfox, LLC Monitoring Tool is already fielded on the Non-Classified Internet Protocol Router Network (NIPRNet) by the Marine Corps. Selecting an alternative original equipment manufacturer would require a "rip-and-replace" approach. This introduces the risk of duplicating substantial contract costs, as the Government would be abandoning sunk costs in the existing deployment and paying new licensing, deployment, and accreditation costs for an unproven platform. Two of the three system modules have already secured the necessary Authorizations to Operate (ATOs), which are inextricably linked to Everfox’s proprietary architecture. Transitioning to an alternate vendor would nullify these ATOs and mandate a complete restart of the Risk Management Framework authorization process, introducing an unacceptable operational delay estimated at five to seven years. Such a delay would create a critical security vulnerability in the Marine Corps' security posture. Everfox is the sole vendor capable of delivering the required proprietary software while avoiding duplicated costs, compliance risks, and ensuring direct privity of contract with the OEM.  

Instructions to Interested Parties: 

This Notice of Intent is not a request for competitive proposals. As part of market research, a Sources Sought Notice (M95494-26-R-0019) was previously issued from 19 May to 29 May 2026. While the Government is proceeding with a sole-source award, any responsible source that believes it can meet the requirements may submit a capability statement, which shall be considered by the agency.  

Capability statements must clearly demonstrate, through verifiable technical specifications and past performance, the ability to provide an integrated solution that can sustain, expand, and enhance the existing proprietary Everfox platform without requiring a "rip-and-replace," does not nullify existing ATOs, and is fully compliant with the technical requirements mandated by CNSSD 504. 

A determination by the Government not to compete this proposed action based on responses to this notice is solely within the discretion of the Government. Responses must be submitted via email to Contracting Officer Ryan Brown (email: ryan.m.brown.civ@usmc.mil) and Contracting Specialist Makyla Clark (email: makyla.j.clark.civ@usmc.mil) no later than 4:00 PM EDT, on 26 August 2026. Phone calls will not be accepted.