DLA Taps Corsha for $50M Deal to Harden Military Logistics with Zero Trust

WASHINGTON – April 29, 2026 – The Defense Logistics Agency (DLA), the vast combat logistics arm of the U.S. Department of War, has awarded a $50 million sole-source contract to cybersecurity firm Corsha to fundamentally overhaul the security of its most critical operational systems. The landmark deal aims to deploy an identity-driven Zero Trust framework across the sprawling network of operational technology (OT) that underpins the U.S. military’s global supply chain.

This Indefinite Delivery, Indefinite Quantity (IDIQ) contract positions Corsha’s Machine Identity Provider (mIDP) platform as a cornerstone of the DLA's strategy to secure everything from fuel distribution and advanced manufacturing lines to building management systems. The move signals a significant acceleration in the Pentagon's push to apply modern cybersecurity principles to the industrial control systems that are increasingly targeted by sophisticated adversaries.

Securing the Military's Industrial Backbone

The DLA serves as the industrial backbone of the U.S. military, managing an immense portfolio of goods and services valued at over $50 billion annually. Its operational technology is not abstract; it comprises the physical machinery, sensors, and automated systems that manage fuel depots, run manufacturing robots, and control facility environments on military bases worldwide. A disruption to these systems could have immediate and catastrophic consequences for military readiness and national security.

The contract directly addresses the urgent need to protect these systems from a growing wave of cyber threats. High-profile attacks, such as the 2021 Colonial Pipeline shutdown and the attempted poisoning of a Florida water supply, have starkly illustrated the vulnerability of critical infrastructure. Recognizing this, the Department of War has issued stringent mandates, including a 2025 directive, requiring all components to implement Zero Trust architectures, with a specific and growing emphasis on OT environments.

Implementing Zero Trust in OT is notoriously challenging. Unlike traditional IT networks, OT environments often contain decades-old legacy equipment that cannot be easily patched or replaced and prioritize constant availability and physical safety above all else. The DLA's selection of Corsha represents a strategic bet on a new approach designed to navigate these complexities.

A New Paradigm for OT Security

For years, OT security relied heavily on creating a strong perimeter—an electronic wall around the facility—and monitoring network traffic for anomalies. The Zero Trust model, by contrast, operates on the principle of "never trust, always verify." It assumes that attackers are already inside the network and that every connection request, whether from a user or a machine, must be rigorously authenticated and authorized before access is granted.

Corsha’s platform is engineered to apply this principle to the complex web of machine-to-machine communications that characterize modern industrial environments. It moves beyond simply monitoring network traffic and instead focuses on establishing and continuously validating the identity of every automated system, sensor, and piece of equipment.

"Operational technology is the backbone of defense logistics," said Anusha Iyer, Founder and CEO of Corsha, in a statement accompanying the announcement. "As the DLA advances Zero Trust for OT, securely connecting these diverse and mission-critical operational systems is foundational to not just zero trust, but also modernization. We are proud to support DLA's mission by bringing real-time, identity-based control to the systems that support U.S. forces around the world."

The Technology Behind the Trust

At the heart of the DLA's new strategy is Corsha's Machine Identity Provider (mIDP) platform. This technology is purpose-built to tackle the unique identity challenges of OT systems. Instead of relying on static, easily compromised credentials like API keys or passwords, the platform provides patented capabilities to dynamically manage machine identity.

Key functions of the platform include:

• Connection Discovery: The system automatically discovers and maps all machine-to-machine connections within the OT network, providing a clear and accurate picture of a complex environment that is often poorly documented.
• Dynamic Authentication: It continuously authenticates every machine and automated system, ensuring that a device is what it claims to be throughout its operation, not just at the initial point of connection.
• Intelligent Access Control: The platform enforces granular, policy-based rules for what each machine is allowed to do and which other systems it can communicate with. This micro-segmentation contains potential breaches by preventing attackers from moving laterally across the network.

Crucially, the solution is designed to be integrated without requiring extensive changes to the legacy systems themselves, a critical advantage in OT environments where downtime is unacceptable. This allows the DLA to retrofit modern security onto its existing infrastructure while simultaneously enabling the safe adoption of new technologies like predictive analytics and physical AI.

From Innovation to Rapid Deployment

The structure of the contract as a sole-source IDIQ is as significant as the technology itself. This procurement vehicle allows the DLA to issue task orders and deploy the solution in a matter of weeks, bypassing the traditional 12-to-24-month acquisition cycles that can stifle innovation. This agility is essential for responding to the rapidly evolving threat landscape.

The justification for this accelerated, non-competitive award stems from Corsha's proven track record within the Department of War. The company successfully transitioned its technology from a Small Business Innovation Research (SBIR) Phase I project in 2024 to a fully operational capability. This trajectory, from initial concept to mission-critical deployment, is precisely what the DoD's technology transition model aims to foster.

Furthermore, Corsha already holds an active Authority to Operate (ATO) for its platform with the U.S. Air Force, where it is used to secure industrial robotics in sustainment centers. This pre-existing validation, combined with its successful SBIR performance, established the company as a uniquely qualified partner for the DLA's urgent requirements, paving the way for the sole-source award.

This contract not only validates Corsha's identity-first approach but also serves as a powerful case study for how the military can partner with innovative companies to secure the nation's most critical systems with speed and rigor. As adversaries increasingly set their sights on the physical infrastructure that powers the modern world, the shift from passive monitoring to proactive, identity-based defense is becoming the new standard for survival.