Carahsoft Offers Crytica OT Threat Detection Through Federal and SLED Contract Vehicles

On November 3, 2026, Crytica Security and Carahsoft Technology Corp. announced a public-sector distribution partnership that makes Crytica’s Rapid Detection, Alert and Isolation (RDAi) solution available to federal agencies and state, local, and education (SLED) organizations across the United States. Carahsoft will distribute the offering through its reseller partners and existing procurement channels, including NASA Solutions for Enterprise-Wide Procurement V (SEWP V) and NASPO ValuePoint. For buyers, the announcement establishes access through contract vehicles rather than requiring every agency to begin with a standalone solicitation. It does not disclose pricing, contract value, a solicitation deadline, or a specific award to either company.

The product is positioned for operational technology environments in which cyber incidents can affect physical infrastructure and public services. The source identifies military installations and federal facilities as well as municipal water systems, public power utilities, transit networks, and university campuses as examples of public-sector OT environments. It describes these systems as sustained targets for nation-state actors seeking persistent access to critical infrastructure. That context makes device-level detection a potentially relevant layer for agencies assessing how to protect operational assets, while leaving each organization to determine its own technical requirements, risk priorities, and acquisition approach.

Crytica says RDAi monitors the instruction sets running inside OT devices and detects unauthorized changes directly at the device level. According to the announcement, the RDAi Probe can be as small as 70KB and can detect unauthorized changes within seconds using deterministic detection, without relying on threat signatures or behavioral analysis. The company and Carahsoft present the solution as complementary to network monitoring, asset discovery, and behavioral-analysis tools—not as a replacement for existing investments. The source also says alerts flow into security platforms and workflows agencies already use, adding device-level evidence intended to help teams respond faster and make better-informed decisions.

For procurement and program teams, the immediate significance is the availability of a new product through established channels, not the announcement of a funded requirement or a competed acquisition. Agencies can assess whether the described device-level monitoring fits their OT architectures and whether access through SEWP V or NASPO ValuePoint is appropriate for their buying organization. Integrators, cybersecurity contractors, and resellers may examine potential roles in evaluation, implementation, and related services, but no specific task order, deployment scope, staffing need, or service requirement is identified. As Carahsoft Vice President of Cybersecurity Solutions Brian O’Donnell said, “By detecting unauthorized changes directly within OT devices, Crytica’s RDAi solution complements existing security investments and helps Government agencies strengthen the protection of the critical infrastructure their communities depend on.”

• Availability: Carahsoft is making Crytica’s RDAi solution available to federal and SLED buyers through its public-sector reseller network.
• Named contract vehicles: The announcement lists NASA SEWP V and NASPO ValuePoint as purchasing channels.
• Detection approach: RDAi monitors OT-device instruction sets to detect unauthorized changes directly on devices, rather than relying on network visibility alone.
• Performance detail: Crytica says its Probe can be as small as 70KB and detects unauthorized changes within seconds.
• Complementary role: The solution is described as complementing network monitoring, asset discovery, behavioral analysis, and existing security platforms and workflows.
• Potential environments: The source cites military and federal facilities, municipal water systems, public power utilities, transit networks, and university campuses.
• Threat context: The announcement describes public-sector OT as a sustained target for nation-state actors seeking persistent access to critical infrastructure.
• Procurement caveat: No pricing, contract value, solicitation deadline, funded requirement, award, or specific deployment scope is disclosed.
• Industry implication: Resellers and cybersecurity integrators can assess potential support opportunities, while agencies should validate technical fit and acquisition requirements before pursuing deployment.