G2 Ops, Inc. (HC105025F0053)

B-424013 Feb 19, 2026 Jump To VIEW DECISION DOWNLOADS RELATED PAGES GAO CONTACTS Highlights G2 Ops, Inc., a women-owned small business of Virginia Beach, Virginia, protests the issuance of a task order to Microsoft Corporation, of Redmond, Washington, under request for proposals (RFP) No. HC105025F0053, issued by the Defense Information Systems Agency (DISA), on behalf of its mission partner Naval Sea Systems Command (NAVSEA) for "lift and shift" cloud migration services. The task order was issued under the Department of Defense, Joint Warfighting Cloud Capability (JWCC), multiple-award, indefinite-delivery, indefinite-quantity (IDIQ) contract. The protester asserts that the sole-source award to Microsoft is improper because the requirement is dependent on G2 Ops' Small Business Innovation Research (SBIR) technologies and, as a consequence, the agency should have instead made a follow-on SBIR phase III award to G2 Ops. We deny the protest. View Decision DOCUMENT FOR PUBLIC RELEASE The decision issued on the date below was subject to a GAO Protective Order. This version has been approved for public release. Decision Matter of: G2 Ops, Inc. File: B-424013 Date: February 19, 2026 W. Brad English, Esq., Maynard Nexsen PC, for the protester. Amy Laderberg O'Sullivan, Esq., Issac D. Schabes, Esq., and Emily P. Golchini, Esq., Crowell & Moring LLP, for Microsoft Corporation, the intervenor. Anthony J. Balestreri, Jr., Esq., and Maurice R. Griffithe, Esq., Defense Information Systems Agency, for the agency. Janis R. Millete, Esq., and John Sorrenti, Esq., Office of the General Counsel, GAO, participated in the preparation of the decision. DIGEST 1. Protest that the agency was required to issue the protester a follow-on Small Business Innovative Research (SBIR) phase III contract on a sole-source basis is denied because such action is not required where the agency was not pursuing production of the technology developed by the SBIR awardee under its prior awards, and did not otherwise seek to further use the technology. 2. Protest alleging that a proposed task order is outside of the scope of the underlying indefinite-delivery, indefinite-quantity (IDIQ) contract because the work relies on the protester's SBIR technology is denied where the record does not support a finding that the task order requires the use of the protester's technology. DECISION G2 Ops, Inc., a women-owned small business of Virginia Beach, Virginia, protests the issuance of a task order to Microsoft Corporation, of Redmond, Washington, under request for proposals (RFP) No. HC105025F0053, issued by the Defense Information Systems Agency (DISA), on behalf of its mission partner Naval Sea Systems Command (NAVSEA) for “lift and shift” cloud migration services. The task order was issued under the Department of Defense, Joint Warfighting Cloud Capability (JWCC), multiple-award, indefinite-delivery, indefinite-quantity (IDIQ) contract. The protester asserts that the sole-source award to Microsoft is improper because the requirement is dependent on G2 Ops' Small Business Innovation Research (SBIR) technologies and, as a consequence, the agency should have instead made a follow-on SBIR phase III award to G2 Ops. We deny the protest. BACKGROUND The SBIR program is designed to increase the participation of small business concerns in federally funded research or research and development (R/R&D). See SBIR Program Act of 1982, 15 U.S.C. § 638 (the “SBIR statute”). The program has three phases. Under phase I, firms competitively apply for an award to test the scientific, technical, and commercial merit and feasibility of a concept. 15 U.S.C. § 638(e)(4)(A). If this is successful, a firm may be invited to apply for a phase II award to further develop the concept. Id. § 638(e)(4)(B). Under phase III, an agency may issue an award for “work that derives from, extends, or completes efforts made under prior funding agreements under the SBIR program[.]”[1] 15 U.S.C. § 638(e)(4)(C). On May 11, 2021, G2 Ops received a SBIR phase III contract to provide “Embedded Cyber Resiliency” technology for NAVSEA. Agency Report (AR), Tab 1, G2 Ops, SBIR Phase III Award at 1;[2] Protest at 4. Part of this contract included general support for NAVSEA's cloud environment that G2 Ops is still providing to NAVSEA. AR, Tab 2, SBIR Phase III Statement of Work at 15-16; See Protest at 5. This protest involves the agency's procurement of services to move from NAVSEA's existing cloud environment to the Bluewater secure cloud computing architecture (SCCA) pursuant to a task order issued under the JWCC contract. Contracting Officer's Statement and Memorandum of Law (COS/MOL) at 3-4. The agency explains that the purpose of the JWCC contract is to move from the “legacy contractor-operated environment . . . and into the Government-engineered Bluewater cloud.” Id. at 6.