Cyber Operations Technology Support

United States Cyber Command (USCYBERCOM) conducts full‑spectrum cyberspace operations to support Combatant Commanders and Joint Force Commanders in achieving their mission objectives in and through cyberspace. The Hard Targets effort directly enables these full‑spectrum offensive operations by developing, integrating, and sustaining advanced non‑kinetic cyber capabilities designed to hold high‑complexity, non‑traditional targets at risk. This portfolio provides USCYBERCOM with the ability to rapidly generate, adapt, and employ integrated cyber capability chains that complement and augment kinetic options. These capabilities allow the Joint Force to address emerging operational requirements, close critical gaps, and maintain persistent access against sophisticated adversary systems. The Hard Targets effort also establishes the development, testing, and production infrastructure required to operate across multiple security enclaves, ensuring secure handling of highly sensitive capabilities. By accelerating the transition of exquisite capabilities from government partners, implementing new test and evaluation processes, and employing an Intelligence, Development, and Operations (IntelDevOps) model, the Hard Targets portfolio reduces the time from intelligence insight to operational effect. This approach strengthens USCYBERCOM’s ability to deliver timely, precise, and scalable cyberspace effects in support of national security objectives.

The Data and Sensors Portfolio develops and integrates advanced capabilities that enhance U.S. awareness, decision advantage, and operational readiness in support of Department of War (DoW) contingency plan execution, with a primary focus on the U.S. Indo Pacific Command (USINDOPACOM) area of responsibility. These efforts aim to maintain and restore the comparative U.S. military advantage by improving the collection, fusion, and exploitation of data across multiple domains, enabling timely, precise, and actionable insights for cyber and multi domain operations. Investments in this portfolio reduce operational risk, strengthen deterrence, and ensure the Joint Force can effectively counter emerging and advanced threats in the Indo Pacific region.

The Cyber Weapons and Tools portfolio funds and directs the development of tailored software and hardware capabilities that enable United States Cyber Command (USCYBERCOM) personnel to gain access to, and deliver effects against, key foreign adversary cyberspace systems at enterprise scale while operating under the strategy of persistent engagement. The portfolio provides the means to: • Acquire or develop new payloads, including implants, exploits, and other effect generating components • Architect and implement Joint Common Services that automate and scale intelligence driven cyber operations • Test, adapt, and harden payloads and Joint Common Services in response to rapidly evolving cyberspace environments and adversary threat behaviors • Maintain and advance a Joint Development Environment (JDE) for cyber weapons and tools across multiple security levels and geographic locations • Provide programmatic and technical support to ensure sustained capability development and integration These activities are interdependent and require continuous integration to ensure cyber weapons, tools, and services remain synchronized, scalable, and operationally relevant. The portfolio’s investments collectively enable USCYBERCOM to deliver timely, precise, and persistent cyberspace effects in support of national objectives.

The U.S. Cyber Command (USCYBERCOM) is advancing emerging AI/ML capabilities to enhance the speed, scale, and precision of cyberspace operations. This effort includes evaluating commercial and government developed research initiatives and developing specialized AI/ML capabilities for integration into operational workflows across the Cyber Mission Force (CMF). These investments enable USCYBERCOM to accelerate decision making, improve threat detection, and increase the effectiveness of both Defensive Cyberspace Operations (DCO) and Offensive Cyberspace Operations (OCO). Adversary nations - particularly China - are investing heavily in AI, cloud computing, and advanced analytics to gain strategic advantage and hold U.S. critical infrastructure at risk. To maintain decision superiority in this environment, USCYBERCOM must field AI capabilities that allow cyber operators to process large volumes of data, identify malicious activity, and respond to threats faster than human operators alone can achieve. AI enabled tools provide the ability to find, characterize, and counter adversary activity at machine speed, ensuring the United States can maintain freedom of action in cyberspace. This funding supports the development, integration, and operationalization of AI/ML capabilities aligned with USCYBERCOM’s validated requirements and the Joint Cyber Warfighting Architecture (JCWA). These capabilities include automated threat detection, predictive analytics, mission planning augmentation, and advanced data processing tools that enhance the effectiveness of cyber operators. Continued investment is essential to maintaining USCYBERCOM’s competitive advantage in the face of rapidly evolving cyber threats and disruptive technologies.

The Cyber Operations Technology Support project provides the critical integration, research, development, and innovation activities required to advance and operationalize the Joint Cyber Warfighting Architecture (JCWA). Funding ensures that USCYBERCOM can synchronize Service led and Command led programs into a coherent, interoperable system of systems that enables the Cyber Mission Force (CMF) to conduct full spectrum cyberspace operations at speed and scale. JCWA Integration: JCWA Integration funding aligns and synchronizes four Service acquisition programs—Unified Platform (UP), Joint Command and Control (JCC2), Joint Common Access Platform (JCAP), and the Persistent Cyber Training Environment (PCTE) - with two USCYBERCOM led efforts: Joint Cyber Weapons (JCW), including the Joint Development Environment (JDE), and Sensors. These programs collectively form the operational environment for cyber forces. Integration funding enables USCYBERCOM to: • Exercise central technical authority across all JCWA components to enforce standards, interfaces, and architectural alignment. • Develop and deploy enterprise-wide services that span functional boundaries, including identity services, data transport, security services, and common development environments. • Conduct integrated test and evaluation (T&E) to validate interoperability, performance, and mission suitability across the architecture. • Accelerate the transition of science and technology (S&T) prototypes into operational use by providing integration pathways and reducing technical friction. • Maintain a continuous innovation pipeline by collaborating with industry, academia, and government partners to mature emerging technologies and transition them into JCWA programs of record. These integration activities ensure that JCWA remains a modern, scalable, and resilient platform capable of supporting the speed, accuracy, and operational tempo required for cyber operations. JCWA Research, Development, and Innovation (RDI): RDI funding accelerates the development, maturation, and transition of next generation cyber capabilities into JCWA programs of record. This includes deep collaboration with the Defense Advanced Research Projects Agency (DARPA) through the DARPA/Constellation partnership established in response to FY 2022 NDAA Section 1509.

USCYBERCOM’s Missile Defense and Defeat Environment funding provides advanced, domain agnostic non kinetic capabilities that directly support the Command’s operational directives and national level strategic guidance. These investments enable USCYBERCOM to develop, integrate, and employ cyber capabilities that enhance the Joint Force’s ability to detect, disrupt, degrade, and defeat adversary missile systems and supporting infrastructure. MDDE funding aligns with and supports the priorities outlined in the FY 2026 National Defense Strategy, the Department of War Cyber Strategy, and other validated requirements documents that identify critical capability gaps against emerging and advanced threats. These resources ensure USCYBERCOM can deliver timely, precise, and scalable non kinetic effects that complement kinetic options, expand decision space for Combatant Commanders, and strengthen the nation’s integrated deterrence posture. MDDE capabilities enhance the Joint Force’s ability to: • Provide non kinetic options for missile defense and defeat missions • Impose cost and operational friction on adversary missile enterprises • Disrupt adversary kill chains and degrade enabling infrastructure • Support Combatant Commanders with rapid, flexible, and reversible effects • Integrate cyber effects into multi domain operations at speed and scale These investments ensure USCYBERCOM remains postured to counter evolving missile threats and deliver operationally relevant capabilities that strengthen national defense and strategic deterrence.

The Data and Analytics program provides the foundational data, infrastructure, and analytic capabilities required by the Department of War Cyber Defense Command (DCDC)—formerly Joint Force Headquarters–Department of Defense Information Network (JFHQ–DODIN)—and the Cyber National Mission Force (CNMF) to achieve mission success. These capabilities enable both organizations to conduct full spectrum cyberspace operations, maintain situational awareness, and make rapid, data driven decisions in support of national defense. For DCDC, the program delivers the actionable intelligence, data integration, and situational awareness required to exercise Command and Control (C2) over Defensive Cyberspace Operations (DCO). These capabilities allow DCDC to detect, analyze, and respond to threats across the Department of War Information Environment (DoWIE), ensuring mission assurance for critical DoW systems and networks. For the CNMF, the program provides the advanced tools, services, and data environments required by its cyber operators, analysts, and researchers. These capabilities enable the CNMF to identify malicious cyber actors, analyze adversary infrastructure, develop operational insights, and execute missions that defend the nation against significant cyber threats. Together, these investments ensure that DCDC and CNMF can operate at the speed and scale required to counter rapidly evolving cyber threats. The Data and Analytics program enables faster decision making, improved operational coordination, and enhanced mission effectiveness—ensuring the United States can project power, defend critical infrastructure, and maintain freedom of action in cyberspace.