G2 Ops, Inc. ()

B-423967 Feb 13, 2026 Jump To VIEW DECISION DOWNLOADS RELATED PAGES GAO CONTACTS Highlights G2 Ops, Inc., a women-owned small business of Virginia Beach, Virginia, protests the issuance of a task order to Amazon Web Services (AWS) of Seattle, Washington, under request for proposals (RFP) No. HC105025F0049, issued by the Defense Information Systems Agency (DISA) on behalf of its mission partner Naval Sea Systems Command (NAVSEA) for "lift and shift" cloud migration services under the Joint Warfighting Cloud Capability (JWCC), multiple-award, indefinite-delivery, indefinite-quantity (IDIQ) contract. The protester asserts that the sole-source award to AWS is improper because the requirement uses G2 Ops Small Business Innovation Research (SBIR) technologies, which requires the agency to instead make a follow-on SBIR phase III award to G2 Ops. We deny the protest in part and dismiss it in part. View Decision DOCUMENT FOR PUBLIC RELEASE The decision issued on the date below was subject to a GAO Protective Order. This version has been approved for public release. Decision Matter of: G2 Ops, Inc. File: B-423967 Date: February 13, 2026 Jon Levin, Esq., Womble Bond Dickinson (US) LLP, for the protester. Daniel R. Forman, Esq., and James G. Peyster, Esq., Crowell & Moring LLP, for Amazon Web Services, Inc., the intervenor. Anthony J. Balestreri, Jr., Esq., and Maurice R. Griffithe, Esq, Defense Information Systems Agency, for the agency. Janis R. Millete, Esq., and John Sorrenti, Esq., Office of the General Counsel, GAO, participated in the preparation of the decision. DIGEST 1. Protest that the agency was required to issue the protester a follow-on Small Business Innovative Research (SBIR) phase III contract on a sole-source basis is denied because such action is not required where the agency was not pursuing production of the technology developed by the SBIR awardee under its prior awards, and did not otherwise seek to further use the technology. 2. Protester is not an interested party to challenge the issuance of a sole-source task order under a multiple-award indefinite-delivery, indefinite-quantity (IDIQ) contract when the protester does not hold one of the IDIQ contracts. DECISION G2 Ops, Inc., a women-owned small business of Virginia Beach, Virginia, protests the issuance of a task order to Amazon Web Services (AWS) of Seattle, Washington, under request for proposals (RFP) No. HC105025F0049, issued by the Defense Information Systems Agency (DISA) on behalf of its mission partner Naval Sea Systems Command (NAVSEA) for “lift and shift” cloud migration services under the Joint Warfighting Cloud Capability (JWCC), multiple-award, indefinite-delivery, indefinite-quantity (IDIQ) contract. The protester asserts that the sole-source award to AWS is improper because the requirement uses G2 Ops Small Business Innovation Research (SBIR) technologies, which requires the agency to instead make a follow-on SBIR phase III award to G2 Ops. We deny the protest in part and dismiss it in part. BACKGROUND The SBIR program is designed to increase the participation of small business concerns in federally funded research or research and development (R/R&D). See SBIR Program Act of 1982, 15 U.S.C. § 638 (the “SBIR statute”). The program has three phases. Under phase I, firms competitively apply for an award to test the scientific, technical, and commercial merit and feasibility of a concept. 15 U.S.C. § 638(e)(4)(A). If this is successful, a firm may be invited to apply for a phase II award to further develop the concept. Id. § 638(e)(4)(B). Under SBIR phase III, an agency may issue a phase III SBIR award for “work that derives from, extends, or completes efforts made under prior funding agreements under the SBIR program[.]”[1] 15 U.S.C. § 638(e)(4)(C). On May 11, 2021, G2 Ops received a SBIR phase III contract to “utilize advancements in Embedded Cyber Resiliency technology” for NAVSEA. Agency Report (AR), Tab 1, G2 Ops, SBIR Phase III Award at 1;[2] Comments at 8-9. Part of this contract included general support for NAVSEA's cloud environment that G2 is still providing to the agency. AR, Tab 2, SBIR Phase III Statement of Work at 15-16; Protest at 1. This protest involves the agency's procurement of services to move from NAVSEA's existing cloud environment to the Bluewater secure cloud computing architecture (SCCA) under the JWCC contract. Contracting Officer's Statement and Memorandum of Law (COS/MOL) at 3-4. The agency explains that the purpose of the JWCC contract is to move from the “legacy contractor-operated environment . . . and into the Government-engineered Bluewater cloud ecosystem.” Id. at 6. To that end, from June 2024 to April 2025, the agency conducted market research to identify potential providers for the required “lift-and-shift” cloud migration services. AR, Tab 4, Market Research Report at 2-3.