DISA expands Pentagon cloud marketplace to niche providers

The Defense Information Systems Agency (DISA) is overhauling how the Pentagon buys cloud services, moving beyond its long-standing reliance on a handful of hyperscale providers. The agency’s new Unified Cloud Marketplace (UCM) will introduce two additional tiers for smaller and emerging vendors, while preserving the existing framework for major cloud providers like Amazon, Google, Microsoft, and Oracle.

The shift aims to address a persistent challenge for niche software and platform providers, which have struggled to break into the Pentagon’s cloud ecosystem despite holding government authorizations. Under the new structure, these vendors will gain earlier access to procurement opportunities, reducing the time and complexity of onboarding.

How the marketplace will work

DISA’s UCM will operate across three tiers, though it relies on two underlying acquisition contracts. The first tier, UCM Core, effectively extends the current Joint Warfighting Cloud Capability (JWCC) contract, which remains limited to the four hyperscale providers. DISA plans to issue a request for proposals for UCM Core later this year, with an award expected in fiscal 2027.

The more significant changes appear in the UCM Premier tiers. Tier two will include smaller providers that have already secured government authorizations but have historically faced barriers to entry. Tier three will go further, allowing emerging technology vendors to begin onboarding before completing the full certification process. This approach is designed to let government teams evaluate new capabilities sooner, rather than waiting years for paperwork to clear. DISA is also exploring ways to fast-track vendors that already hold FedRAMP or intelligence community authorizations, avoiding redundant certification requirements.

Demand remains strong for existing contracts

While DISA builds the new marketplace, demand for the current JWCC contract shows no signs of slowing. As of June 2026, the department has issued 205 task orders under JWCC, totaling $7.2 billion—nearly 80% of the contract’s total value. The remaining $1.8 billion is expected to be allocated over the next four years, assuming current usage rates hold.

Jeff Marshall, who directs DISA’s hosting and compute division, emphasized that the agency is looking for vendors to engage more meaningfully with its mission. In a conversation with MeriTalk, he criticized the tendency of some providers to focus on sales pitches rather than understanding the department’s operational needs. "Don’t talk to me about what your product is and tell me how great it is," he said, "especially when you don’t know what we do."

"Don’t talk to me about what your product is and tell me how great it is, especially when you don’t know what we do." — Jeff Marshall, DISA Hosting and Compute Division Director, via MeriTalk

What to watch

The expansion of the Pentagon’s cloud marketplace could create new opportunities for smaller cloud and platform providers, particularly those already serving federal agencies. However, the success of the UCM will depend on how effectively DISA can streamline the onboarding process for non-hyperscale vendors. The agency’s ability to fast-track providers with existing FedRAMP or intelligence community authorizations will be a key factor in reducing delays.

For hyperscale providers, the changes do not signal a retreat from the Pentagon market. UCM Core ensures they retain a central role, while the Premier tiers may introduce new competition for specialized workloads. Vendors across all tiers will need to adapt to DISA’s emphasis on mission alignment over traditional sales approaches.