GSA Seeks Industry Input on Post-Quantum Cryptography Solutions

The General Services Administration (GSA), through its Federal Acquisition Service (FAS), has issued a request for information on commercial products and services that could support federal agencies’ migration to post-quantum cryptography (PQC). The request comes as agencies assess how to prepare cryptographic systems for the potential risks posed by future quantum computing capabilities. For industry, the RFI provides an opportunity to describe available solutions and explain how they could fit into federal environments; it is not an active competition for a contract award.

Responses are due December 7, 2026. GSA states that the RFI is for market research only: the agency will not assign work through it and has made no commitment to issue a follow-on solicitation. Companies should therefore treat participation as a chance to inform the government’s understanding of the market, not as a direct path to funded work. The distinction also matters for agencies using the responses: information gathered can support market awareness and acquisition planning, but does not establish a procurement or guarantee that any solution will be purchased.

Vendors can use their submissions to explain alignment with National Institute of Standards and Technology (NIST) standards, validation status, product maturity, and interoperability. They can also describe operational impacts, migration support, and available purchasing pathways. Responses that connect technical capabilities to agency implementation needs may help procurement and security teams compare offerings and understand the practical steps required to deploy or transition to PQC. Companies should be specific about how their products can be acquired and operationalized, while clearly distinguishing current capabilities from future plans.

The accompanying marketplace information identifies QuSecure offerings listed through Carahsoft’s GSA Schedule, providing one existing purchasing pathway that agencies may consider. That listing is a relevant market signal, not an endorsement by GSA or evidence that the products meet every agency requirement. Agencies and contractors can assess the listing alongside other solutions described in RFI responses, considering standards alignment, validation, interoperability, migration needs, and purchasing options. The notice and source information do not specify a funding amount, award, or guaranteed procurement outcome.

• Response deadline: Vendors must submit RFI responses by December 7, 2026.
• Purpose: The FAS request is market research on commercial PQC products and services for federal agency migration.
• No guaranteed work: GSA will not assign work under the RFI and has not committed to a follow-on solicitation.
• Technical topics: Address alignment with NIST standards, validation status, product maturity, and interoperability.
• Implementation detail: Explain operational impacts, migration support, and how agencies could acquire and operationalize the offering.
• Acquisition planning: Agencies can use responses to assess market maturity and potential purchasing pathways without treating the RFI as a funded opportunity.
• Marketplace signal: QuSecure offerings are identified as listed through Carahsoft’s GSA Schedule.
• Evaluation approach: Compare available offerings against agency requirements; a schedule listing alone does not establish suitability or endorsement.
• No award value reported: The source provides no contract amount, funding commitment, or award decision.