Network-Centric Detection and Response Platform

The issuing agency is seeking a network-centric detection and response platform to consolidate its security technologies from disparate or absent systems into a single, unified cloud-native or hybrid platform. This platform must ingest and analyze data from identities, endpoints, network switches, IoT devices, firewalls, and servers to generate near real-time cybersecurity alerts with holistic context. The agency requires a solution that utilizes artificial intelligence to correlate incidents, prioritize threats, and automate standard incident response activities within a digital workflow. The scope of work covers Network Detection and Response and supporting Endpoint Detection and Response with Domain Name System threat intelligence for deployment across all agency endpoints, servers, IoT devices, and network infrastructure. The requested platform must seamlessly integrate security operations, monitoring, and alerting so that artificial intelligence can correlate anomalous events into security incidents for review and action by human administrators. The agency requires the solution to be cloud-native or hybrid, and it must be fully accessible and functional from any browser on any operating system and device. Eligibility is strictly limited to onshore Canadian organizations. The agency requires all performance of the work to be conducted offsite. The contract period will span nine years, and the agency has not disclosed a set budget, instead requesting pricing proposals from bidders. The agency has scheduled a pre-bid meeting for June 16th, 2026. Bidders must submit all questions regarding this opportunity no later than June 22nd, 2026.