# Persistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events)

Notice 3e19e138b4ba4e15bf2b86cd383255d4 (solicitation PCTERange-FY2026) from DEPT OF DEFENSE, W6QK ACC-APG-ORLANDO, posted 2026-06-29, responses due 2026-07-14T20:00:00.000Z. Status: open.

| Field | Value |
| --- | --- |
| Notice ID | 3e19e138b4ba4e15bf2b86cd383255d4 |
| Solicitation number | PCTERange-FY2026 |
| Type | Sources Sought |
| Agency | DEPT OF DEFENSE |
| Sub-tier | DEPT OF THE ARMY |
| Office | W6QK ACC-APG-ORLANDO |
| Posted | 2026-06-29T20:35:27.000Z |
| Response deadline (UTC) | 2026-07-14T20:00:00.000Z |
| Set-aside | No Set aside used |
| NAICS | 541519 |
| PSC | DA10 |
| Place of performance | Orlando, FL, USA |
| Award | - |

## Description

Request for Information (RFI) Title: Persistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events [Grey Space]) Issued By: Army Contracting Command Orlando in support of PEO STRI, PM CT2, PdM CRT PCTE Issue Date: 18 June 2026 Response Due Date: 14 July 2026 Introduction The Capability Program Executive Simulation Training, Test and Threat (CPE ST3), Program Manager Cyber Test and Training (PM CT2), Product Manager Cyber Resilience and Training (PdM CRT), Persistent Cyber Training Environment (PCTE) is seeking information from vendors and technology providers regarding a simulated internet capability (often called a Cyber Range or Grey Space Network). The purpose of this RFI is to explore available capabilities with a focus on realism, scale, and control. This RFI is not a solicitation for proposals but rather a means to gather information for potential future procurement. Vendors are encouraged to provide detailed responses that address the requirements outlined below. PCTE is built on a hierarchical, two?plane architecture: a Control Plane (CP) hosts hardened, accredited services (training portal, help?desk, dashboards, etc.) and provisions resources, while a logically isolated Event Plane (EP) runs virtual machines, containers, and software?defined networking to create dynamic cyber?range environments; the platform is deployed across regional compute/storage (RCS) sites and newer enterprise compute/storage (ENT) sites, leveraging VMware Cloud Foundation, NSX?T for SDN, F5 edge firewalls, and Red?Hat SSO for authentication. Objectives The primary objectives of the simulated internet capability are: To create a realistic and highly scalable cyber range environment / Grey Space Network for cybersecurity training and exercises. To generate realistic background traffic. Capture vendor specify platform's maximum throughput (Gbps) and concurrent session generation limits for background traffic. Assess vendor support for advanced protocol states, specifically: Domain Name System Security Extensions (DNSSEC) validation, Border Gateway Protocol (BGP) hijacking scenarios, Hyper Text Transfer Protocol Secure (HTTPS) inspection/decryption capabilities, and the simulation of localized, autonomous root-CA hierarchies. To integrate with existing and future PCTE on-prem and cloud security tools, network environments, and cloud infrastructure. To ensure high levels of PCTE functionality, security, automation, and reporting capabilities. Concept of Operations 1. Purpose The Simulated Internet within the Persistent Cyber Training Environment (PCTE) provides a realistic, controlled, and isolated network ecosystem that emulates the complexity and unpredictability of the real-world internet. Its primary purpose is to support persistent, scalable, and repeatable cyber training, mission rehearsal, and cyber operations experimentation for military and allied users, without risk to actual networks. 2. Objectives Realism: Accurately mimic internet services, protocols, and user behaviors to provide authentic training scenarios. Isolation: Ensure complete separation from live networks to prevent unintended impacts or data leakage. Scalability: Support a wide range of training events, from small team exercises to large-scale, multi-organization operations. Repeatability: Enable rapid reconfiguration and reset of the environment for multiple training iterations. Observability: Provide robust monitoring, logging, and after-action review capabilities. 3. Operational Overview 3.1 Environment Composition Core Internet Backbone: Simulated ISPs, backbone routers, and peering points. Public Services: Emulated DNS, web, email, social media, and cloud services. User Population: Automated user agents generating realistic traffic and behaviors. Adversary Infrastructure: Simulated threat actors, botnets, and command-and-control (C2) servers. Defensive Infrastructure: Blue team tools, sensors, and monitoring systems. 3.2 User Roles Trainees: Blue, red, and purple team members conducting operations. Instructors/Controllers: Scenario designers, exercise controllers, and observers. Support Staff: System administrators and technical support personnel. 4. Key Functions 4.1 Scenario Generation Dynamic Topology Creation: Automated deployment of network topologies and services based on exercise requirements. Service Emulation: Realistic simulation of internet services (web, DNS, email, etc.) with configurable vulnerabilities and behaviors. User Simulation: Automated generation of benign and malicious user traffic. 4.2 Exercise Execution Isolated Operations: All activities occur within the simulated environment, with no external connectivity. Attack/Defense Play: Red teams conduct offensive operations; blue teams defend; purple teams coordinate and analyze. Live Monitoring: Real-time visibility into network and host activities for both participants and observers. 4.3 Data Collection and Analysis Comprehensive Logging: Capture of all network, host, and user activity for after-action review. Performance Metrics: Measurement of trainee actions, response times, and mission outcomes. Replay and Debrief: Ability to replay scenarios for learning and assessment. 5. Security and Isolation Physical/Logical Segregation: Use of air-gapped or logically isolated infrastructure. Access Controls: Strict authentication and authorization for all users. Reset and Sanitization: Automated environment reset and data sanitization between exercises. 6. Scalability and Flexibility On-Demand Provisioning: Rapid instantiation of new environments for concurrent exercises. Modular Design: Ability to add or remove services, users, and adversary elements as needed. Integration: Support for interoperability with other training systems and federated ranges. Requested Information Vendors should provide information on the following aspects: Core Capabilities & Infrastructure Describe y

## Sources

- View on SAM.gov: https://sam.gov/opp/3e19e138b4ba4e15bf2b86cd383255d4/view
- Data as of 2026-11-13. Source: https://sam.gov/data-services/Contract%20Opportunities/datagov

## Cite this

"Persistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events), SAM.gov contract opportunity 3e19e138b4ba4e15bf2b86cd383255d4." samgovapi.io, https://samgovapi.io/opportunity/3e19e138b4ba4e15bf2b86cd383255d4, data as of 2026-11-13. Primary record: https://sam.gov/opp/3e19e138b4ba4e15bf2b86cd383255d4/view

## API and MCP

- REST: GET https://samgovapi.io/api/v1/opportunities/3e19e138b4ba4e15bf2b86cd383255d4
- MCP tool: get_opportunity

Independent. Not affiliated with, endorsed by or sponsored by GSA, SAM.gov or any U.S. government agency. Registering in SAM.gov is free at sam.gov.

Get a free API key: https://samgovapi.io/sign-up?ref=ai-claudebot