Skip to content
Fiscal Receipts

Cyberspace Operations

CYBERCOMProcurementFully ReconciledCY01
What it is
Cyberspace Operations — a procurement program run by CYBERCOM.
What changed
No FY25→26 comparison — trajectory data incomplete for this line.
Who gets it
No award linkage at high confidence.

Budget Figures

FY24 Actuals
$94.0M
FY25 Total
FY26 Request
$73.4M
FY25→26 Change
Budget Trajectory
FY24: $94.0MFY26: $73.4MFY24FY26
FY24
$94.0M
FY26
$73.4M

FY2026 award data is a partial year — USASpending awards are reported on a rolling basis and the fiscal year does not close until September 30. why →

No research dossier for this program — dossiers cover 50 of 326 programs, ranked by FY2026 requested dollars. why →

Budget Line Items(workbook-cited)

Exhibit P-1

AccountOrgTypeAmount
Procurement, Defense-WideCYBERFY24 Actuals$94.0M
Procurement, Defense-WideCYBERFY25 Enacted$109.7M
Procurement, Defense-WideCYBERFY26 Disc. Request$73.4M
Procurement, Defense-WideCYBERFY26 Total$73.4M

Budget Details(R-2/P-40 facts)

ProjectFY24 ActualsFY25 TotalFY26 BaseFY26 Request
Program Element$94.0M$109.7M$73.4M$73.4M

Program Narratives

DescriptionCyberspace Operations

Cyberspace Operations procures the hardware, software, and licenses required by U.S. Cyber Command (USCYBERCOM),subordinate headquarters, and the Cyber Mission Force (CMF) to prepare for and conduct its mission objectives through four focus areas: (1) defending the DoD Information Network (DoDIN); (2) providing support to combatant commands to execute missions around the world; (3) strengthening the nation's ability to withstand and respond to malicious cyberspace activity (MCA); and (4) increasing DoD Cyber effectiveness through combined efforts with allies and partners. USCYBERCOM defends U.S. interests while delivering warfighting advantage to the Department of Defense (DoD), operating in a global domain. USCYBERCOM defends the DoD Information Network (DoDIN) and develops options for the full spectrum of cyberspace operations to assist Combatant Commanders and the Joint Force in achieving objectives. USCYBERCOM counters cyber threat actors and affiliates who seek to harm the U.S, its interests, and its allies. The command defends the nation against dangerous cyber threat actors serving foreign military and intelligence organizations and terrorists. USCYBERCOM provides options to counter malign actors who exploit cyberspace to support intelligence operations, steal intellectual property, promote violent extremism, impair democratic processes, coerce perceived rivals, and fund transnational illegal activities.

JustificationCyberspace Operations

CYBER THREAT EMULATION SYSTEM AND TOOLS ($0.817): Provides hardware for operations centers and network vulnerability inspections, which enables unity between USCYBERCOM, its subordinate headquarters, and other DoD Components and ensures the DoDIN is available and secure for Joint Missions, including effects delivered in and through cyberspace. Supports procurement of tech refresh upgrades for Cyber Threat Emulation System and tools that support DoDIN inspections across 45 areas of operation and across Joint Worldwide Intelligence Communications System (JWICS), Non-classified Internet Protocol Router Network (NIPR), and Secret Internet Protocol Router Network (SIPR) systems for 24/7 DoDIN Operations and Defensive Cyber Operations-Internal Defensive Measures (DCO-IDM). Joint Defense Operations Center (JDOC) functions enable real-time situation monitoring of ongoing operations across DoDIN Joint Operations Area (JOA) and a unity of command between USCYBERCOM, subordinate headquarters and mission partners. Increase of $0.058M from FY 2025 to FY 2026 is attributed to tech refresh upgrades. DATA AND SENSORS ($62.547M): Includes Hunt Forward Operations (HFO), Enhanced Sensing and Mitigation, Deployable Mission Support Systems (DMSS) kits, Joint Cyber Hunt Kits (JCHK), plus investment in other sensors used to support the CMF. Mission activities are located around the world at DoDIN and foreign partner network placements. • Provides the Cyber Protection Teams (CPT) with a deployable set of hunt and mitigation tools combined with robust compute and store capability, allowing teams to push forward rapidly and engage threats in forward deployed networks with compute capacity, storage, and tools to complete the cyber defense mission. • Procures software, licensing upgrades, and technical support for hardware/software analytical capability enhancements. • Provides analytical support of host-based mission changes, warnings and mitigations of incidents of malicious activity. • Enables cyberspace defense capability that protects the DoD network enclaves, to include compute systems, software applications and sensitive operational information against unauthorized intrusion, corruption, and/or destruction. In accordance with Section 1815 of the FY 2008 National Defense Authorization Act (P.L. 110-181), this item is necessary for use by the Armed Forces for homeland defense missions, domestic emergency responses, and providing military support to civil authorities. • Initial JCHK prototype effort will be complete in June 2025 with a review of the capability complete by Aug 2025. The production award is scheduled for FY 2026. • Provides Defense Counter Measures (DCM) to secure activity, monitor and defend the DoDIN, and to respond to and reduce MCA's ability to exploit boundary/internet access points (IAP) and cross domain measures to thwart MCA with enhanced sensing. DCM funds procure technology solutions that reduce MCA's ability to exploit boundary/internet access points (IAP) and enable cross domain solution protection. Resources support proactive defense and dynamic defensive measures to thwart MCA with enhanced sensing, collection, aggregation, analysis, and visualization of activity across the DoDIN. • The decrease of -$7.246M from FY 2025 to FY 2026 reduces contracts for Advisory and Assistance Services to promote efficiencies and advance the policies of the Administration in alignment with Executive Order 14222, "Implementing the President's Department of Government Efficiency Cost Efficiency Initiative". ROBUST INFRASTRUCTURE AND ACCESS ($10.000M): Includes the Joint Common Access Platform (JCAP) that supports the Joint Force and Joint Mission Operation Centers (JMOC) and provides a protected, managed, orchestrated environment and common firing platform to coordinate and execute against approved targets. This platform allows CNMFs' to execute operations while preventing detection and managing attribution. • Procures hardware/software support equipment, recurring software licenses, hardware spares, and Cloud services that provide compute, storage, and network resources at classified locations to enable continuity of operations. Additionally, Tier 3 post deployment engineering services support the base architecture and future capability enhancements that progressively integrate complex subsystem(s) for new workflows tied to the Joint Cyber Warfighting Architecture (JCWA). • Enables tech refresh, licenses for production system at deployed sites for the core unclassified systems and storage, compute, and networking resources from a DoD-approved cloud service provider (CSP). • Provides hardware enhancements and updates to the Wide Area Network. • Enables Tier 3 field service representative support at classified locations, Tier 1 24/7 Help Desk capabilities and Tier 2 remote technical support from cross functional teams for resolution of post-deployment technical issues. • Provides technical, logistical, and product support management services that track equipment procurement, warehousing, installation, and provisioning at all JMOCs. Support includes Project Officer oversight of Cross Functional Teams (CFT) for customization, modification, quality testing, and performance of deployed subsystems and services at JMOCs. • The decrease of -$27.693M from FY 2025 to FY 2026 is due to realignment of funding to support current administration priorities -$9.185M and a reduction of software licenses no longer required for the JCAP program and optimized efficiencies found in the new contract -$18.508M, which consolidates and reassigns roles within the program, providing a significant reduction in labor costs. Operational costs were substantially reduced by moving away from the on-premise hardware and adopting cloud solutions. Finally, the program now strategically utilizes Compute Hardware, Enterprise Software and Solutions (CHESS) contracts which yielded significant cost savings and enhanced inventory management in software assets. CYBER WEAPONS AND TOOLS ($0.0M): Decrease of -$1.442M from FY 2025 to FY 2026 is due to the elimination of procurement requirements in FY2026 and out.

No follow-the-dollar view — this program's awards haven't been crosswalked at high confidence (flows cover 17 of 326 programs). why →

Primary Sources