State Department Awards Telos 12-Month Xacta Cybersecurity Contract

On November 3, 2026, the U.S. Department of State awarded Telos Corporation a 12-month contract covering customer-hosted, customer-managed Xacta 360 subscriptions and related cybersecurity services. The work supports security authorization, control assessments, compliance documentation, and continuous monitoring. The disclosed information does not include an award value or contract number, so the financial scale and specific procurement vehicle cannot be assessed from this announcement alone.

The deployment model is a notable feature for GovCon firms. Customer-hosted, customer-managed software is designed to operate in an environment controlled by the customer rather than relying solely on a vendor-hosted service. For agencies and contractors handling sensitive systems or documentation, that distinction can shape requirements for infrastructure, access, operations, integration, and responsibility for ongoing administration. The award therefore offers a market signal for providers whose products and services can support agency-controlled environments.

The scope brings together several related cybersecurity and compliance functions: authorization support, control assessment, documentation, and continuous monitoring. These activities are relevant to the recurring work of establishing and maintaining security approvals and demonstrating that controls are implemented and monitored. For businesses in cyber governance, risk, and compliance, the award indicates that the State Department is procuring an integrated capability set rather than a single isolated tool, although the announcement does not specify technical requirements, systems covered, or service-level expectations.

This is an award to Telos, not an open solicitation or a notice that other companies can bid on the same requirement. Competitors and potential partners should treat it as an indicator of agency demand, not as an immediate sales opportunity. Companies can review their own authorization, assessment, documentation, and monitoring capabilities against the described scope; identify whether their deployment model can meet customer-hosted and customer-managed needs; and consider teaming where complementary tools or services could address similar future requirements. Further details about the contract’s value, terms, and procurement history would be needed to draw conclusions about its scale or follow-on opportunities.

• Award date: November 3, 2026.
• Customer: U.S. Department of State.
• Awardee: Telos Corporation.
• Period: 12 months.
• Product and model: Customer-hosted, customer-managed Xacta 360 subscriptions.
• Services: Support for security authorization, control assessments, compliance documentation, and continuous monitoring.
• Undisclosed information: The award value and contract number were not provided.
• Market implication: Providers of cyber governance, risk, and compliance solutions may assess their ability to operate in agency-controlled environments.
• Opportunity status: This is an awarded contract, not an announced open solicitation; firms should use it for market awareness and capability or teaming assessments.