Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Cybersecurity Assessment and Penetration Testing for Health IT Systems

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract is for cybersecurity assessment and penetration testing services targeting digital health platforms managed by the Defense Health Agency, with performance located in Falls Church, Virginia, 22042. The work involves conducting comprehensive penetration tests, vulnerability assessments, and risk mitigation activities to secure sensitive health IT systems, ensuring compliance with federal cybersecurity standards and safeguarding patient data. As a subcontract under NAICS code 541330, the provider will support the Department of Defense’s mission to maintain the integrity and resilience of DHA’s digital infrastructure against evolving cyber threats. The solicitation was posted on August 7, 2026, and the work is expected to be performed at the designated place of performance without specified set-aside provisions.

General Info

Cybersecurity assessment and penetration testing for Defense Health Agency digital health platforms in Falls Church, Virginia.

Agency

Department Of Defense → Defense Health Agency (dha)View Agency

NAICS

541330 - Engineering ServicesView NAICS

Place of Performance

Falls Church, VA, 22042, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Defense Health Agency (dha)
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Defense → Defense Health Agency (dha)
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Conduct penetration testing, vulnerability assessments, and risk mitigation for DHA digital health platforms.

Similar Contracts

Same NAICS industry code

NAICS: 541330
New
SEEKING QUALIFIED SUBCONSULTANTS IN RIVERSIDE COUNTY/SOCAL TO SUPPORT WELL REPLACEMENT PROJECT WITH WATER DISTRICT
Solicitation # seeking-qualified-subconsultants-riverside-countysocal-support-well-replacement-project-water
GHD Inc. is soliciting qualified subcontractors to support the Corydon Well Replacement Design Project for Elsinore Valley Municipal Water District in Riverside County, California, with a focus on engaging Disadvantaged Business Enterprises, Small Business Enterprises, Women-Owned Business Enterprises, Minority-Owned Business Enterprises, and other eligible firms under SBA set-aside programs. The scope of work encompasses a broad range of professional services including engineering, environmental consulting, surveying, geotechnical analysis, permitting, public outreach, and utility location, aligned with NAICS codes such as 541330 and others related to architectural and engineering services, construction, and regulatory support. Interested firms must submit a qualifications package by August 7, 2026, and request solicitation documents by 5 p.m. PST on August 14, 2026, to receive full project details, with the formal response deadline for proposals set for September 15, 2026. All interactions and submissions should be directed to Charlie Brown at charles.brown@ghd.com, and performance is expected to occur within the service area of the Elsinore Valley Municipal Water District in Southern California.
GHD Inc.

POSTED

about 9 hours ago

DEADLINE

in about 1 month
View Details
NAICS: 541330
New
Corydon Well Replacement (C2305)
Solicitation # C2305
Ardurra Group, Inc. is soliciting proposals from Disadvantaged Business Enterprise (DBE) firms to provide comprehensive design, bidding support, and engineering services during construction for the Corydon Well Replacement Project in California, under solicitation number corydon-well-replacement-c2305-1. The project entails designing a new municipal groundwater production well to replace and abandon the existing Corydon well, with work divided into two phases: Phase 1 includes technical specifications, civil site design, line-bid items for drilling and abandonment, bidding assistance, and full-time on-site construction management oversight in compliance with Riverside County and California State Water Resources Control Board requirements; Phase 2 involves detailed architectural, civil, mechanical, structural, electrical, and instrumentation and controls design drawings along with a line-item bid schedule for equipping, testing, and commissioning. The new well must meet AWWA standards, utilize a 24-inch diameter stainless steel Ful-Flo louvered screen, match existing vertical turbine equipment, tie into the Corydon Blend station and Malaga blending location, and comply with SWRCB-DDW, DWR, and EVMWD requirements. Key deliverables include a Preliminary Design Report at up to 30% design completion, review of approximately 200 submittals, assistance with a Domestic Water Supply Permit Amendment, and development of Record Drawings reflecting field changes alongside start-up and operator training support. The contract is governed by the Federal Acquisition Regulation with incorporated clauses including 2 CFR Subtitle A, Part 200, 2 CFR 1400 and 1401, DOI Standard Award Terms, and 48 CFR 52.203-17 for subawards over the simplified acquisition threshold. Respondents must complete mandatory certifications in Attachment “2,” including American Iron and Steel Certification, Debarment and Suspension Certification, SAM Information, Executive Order N-6-22 Certification, Conflict of Interest Disclaimer, Insurance Acknowledgment, Public Works Contractor Registration, and DBE Subconsultant Information. The RFP requires strict adherence to Build America Buy America Act compliance, including domestic-content documentation and waiver procedures for non-compliant materials, and prohibits procurement of equipment from Huawei or ZTE. The award will be based on demonstrated competence and professional qualifications, with evaluation factors weighted as follows: Relevant Qualifications/Experience (25%), Understanding of Project and Project Approach (25%), Scope of Work and Schedule (20%),
Ardurra Group, Inc.

POSTED

about 9 hours ago

DEADLINE

in 24 days
View Details
NAICS: 541330
New
Corydon Well Replacement Project – Professional Design, Bidding Support and Engineering Services During Construction
Solicitation # WO# C2305
The Corydon Well Replacement Project entails the design of a new municipal groundwater production well to replace and formally abandon the existing Corydon Well on Elsinore Valley Municipal Water District (EVMWD) property, with all work conducted in compliance with California State Water Resources Control Board and Riverside County regulations. The project is divided into two phases: Phase 1 focuses on hydrogeological evaluation, aquifer analysis, well design matching the existing casing depth and sanitary seal standards per AWWA guidelines, civil and site engineering for wellhead facilities, bidding assistance, and full-time on-site construction management and hydrogeological oversight during drilling. Phase 2 involves engineering design for well equipping—including architectural, structural, mechanical, electrical, instrumentation, and controls systems—alongside support during bidding and ongoing engineering oversight during construction. Technical specifications require a 24-inch diameter stainless steel Ful-Flo louvered screen compatible with local geology, and all materials must comply with the Build America, Buy America Act and domestic content requirements under 2 CFR Part 184, with documented efforts to source U.S.-produced iron, steel, and manufactured products. The project spans from initiation in November 2026 through completion in May 2028, with a contract value not exceeding $1,000,000, partially funded by a $400,000 Bureau of Reclamation grant requiring adherence to federal administrative, audit, and procurement rules under 2 CFR Part 200. Proposals must include detailed qualifications, resumes of key personnel, relevant municipal water and groundwater project experience, current California professional licensure, DBE subconsultant participation details, and a comprehensive cost proposal broken down by task with hourly rates and incidental costs. Submissions must be made through EVMWD’s PlanetBids portal by the September 1, 2026 deadline and include mandatory certifications for debarment and suspension, lobbying compliance, American Iron and Steel compliance, executive order N-6-22 sanctions screening, insurance acknowledgment, and non-collusion declarations. Evaluation prioritizes demonstrated technical competence and experience (25%), followed by understanding of project objectives (25%), schedule and risk management (20%), innovation (10%), cost value (10%), and overall proposal quality (10%), with the award based on qualifications rather than lowest cost. The consultant must provide monthly progress reports, detailed invoices, and maintain full records for four years post-final payment subject to audit. All
GEI Consultants, Inc.

POSTED

about 9 hours ago

DEADLINE

in 24 days
View Details
NAICS: 541330
New
SLED
A/E RFQ - Ballistic Aero-Optics and Materials Range Phase 2 - Bryan, Texas
Solicitation # TAMUS-RFQ-01-3489
The Texas A&M University System, through its Office of Facilities Planning & Construction, is seeking qualified Architect/Engineer firms to support the Ballistic Aero-Optics and Materials Range Phase 2 project at the RELLIS Campus in Bryan, Texas. This initiative expands upon a facility completed in 2024 to significantly enhance capabilities in aero-optics and hypersonic testing, including extending aero-optics performance beyond 1,000 meters and hypersonic testing beyond 500 meters, while doubling the recovery tube length from 305 meters to approximately 610 meters. The project calls for the design and construction of critical infrastructure components including a new Tail Building at the south end of the range to house the relocated Laser Firing Tank and final sections of the recovery tube, as well as at least two additional test buildings aligned with project test sections. Standardized 14.6-meter range tube sections will be used throughout the expansion. The total planning budget for the project is $70,605,000, with $17,129,803 allocated specifically for the construction contract, while the remainder covers fees, furnishings, contingencies, and related expenses. Selection will proceed through a qualifications-based process where firms submit statements of qualifications via the e-Builder portal by 2:00 p.m. Central Time on September 1, 2026. The top-ranked respondents may be invited to present their qualifications in an interview, but no pricing or cost information is solicited at this stage. All firms must complete the State of Texas Subcontracting Plan form, for which guidance and a tutorial are provided by the system’s Office of Procurement & Business Services. Inquiries must be directed to Jeff Herring at the Texas A&M University System Office of Facilities Planning & Construction, with contact information provided for phone and email. The solicitation is issued under NAICS code 541330 and administered by a state educational agency with no set-aside provisions identified.
Texas A&M University System

POSTED

about 13 hours ago

DEADLINE

in 24 days
View Details
NAICS: 541330
New
International
Transportation and Economic Corridors - Request for Proposal - CON0025815-OVERLAYS of HWY 49:06 and HWY 49:08
Solicitation # AB-2026-05586
Alberta Transportation and Economic Corridors is soliciting proposals from three pre-qualified firms—Associated Engineering Alberta Ltd., Progressive Engineering and Consulting Ltd. (dba CAP Engineering), and ISL Engineering and Land Services Ltd.—for comprehensive engineering services on two sections of Highway 49: Overlay limits 34.946 to 52.425 (WAC0077705) and 0.000 to 2.486 (WAC0077705). The scope includes preliminary engineering, detailed design, contract tendering, contract administration, construction supervision, post-construction review, and warranty inspections. Proposals must be submitted in two separate PDF files under 10 MB each: one detailing technical qualifications and the other containing the proposal fee. This is a Request for Proposal, not an Invitation to Tender, and only submissions from the listed firms will be considered. Alberta Transportation and Economic Corridors reserves the right to request clarifications, accept or reject proposals without negotiation, or negotiate changes with the selected firm. There is no reimbursement for proposal preparation costs. Selection will be based on overall value, not simply the lowest price. The deadline for submissions is September 2, 2026, at 5:30 AM MT, and inquiries should be directed to Rence Balaccua, Project Procurement Officer.
Transportation and Economic Corridors

POSTED

about 16 hours ago

DEADLINE

in 25 days
View Details

More opportunities from Department Of Defense → Defense Health Agency (dha)

Same awarding agency

NAICS: 541690
New
Federal
Health Data Analytics and Predictive ModelingThe contract titled Health Data Analytics and Predictive Modeling is a subcontract under the Defense Health Agency, part of the Department of Defense, aimed at developing predictive models to forecast patient readmissions, disease outbreaks, and healthcare resource utilization. The work will be performed using de-identified health data provided by DHA, ensuring compliance with privacy and security protocols, and the primary place of performance is located in Falls Church, Virginia, with a ZIP code of 22042. The project falls under NAICS code 541690, categorizing it as other scientific and technical consulting services, indicating a focus on analytical and modeling expertise rather than direct healthcare delivery. The solicitation was posted on August 7, 2026, and while no specific solicitation number is provided, the opportunity is publicly accessible through the SAM.gov platform. The subcontractor is expected to leverage advanced data science techniques to transform complex health datasets into actionable insights, supporting improved clinical decision-making and operational efficiency within the military health system. Participation requires robust data governance practices and the ability to handle sensitive health information in an anonymized form, without direct access to personally identifiable information. The contract emphasizes innovation in predictive analytics to proactively address healthcare challenges across DHA’s nationwide network of facilities.
Other Scientific and Technical Consulting Services

POSTED

1 day ago

DEADLINE

N/A
View Details
NAICS: 518210
New
Federal
Mobile Health (mHealth) Application for Behavioral Health MonitoringThe contract entails the design and deployment of a secure mobile application tailored for monitoring behavioral health among active-duty military personnel, with core functionalities including mood tracking and seamless telehealth connectivity to support mental health interventions. The application must adhere to stringent security standards to ensure the confidentiality and integrity of sensitive health data, aligning with Department of Defense requirements for protecting personal and medical information in a military operational context. The solution is expected to be scalable, resilient, and interoperable with existing military healthcare systems to facilitate real-time data sharing and clinical decision-making. This subcontract, categorized under NAICS code 518210 for Data Processing and Related Services, is managed by the Defense Health Agency under the Department of Defense, with performance centered in Falls Church, Virginia, at zip code 22042. The project is positioned to enhance behavioral health support for service members through technology-driven, on-demand care, emphasizing accessibility and user-friendly design without compromising security or compliance. The contract’s release date was August 7, 2026, and it is actively linked through the SAM.gov portal for potential bidders or subcontractors with expertise in secure mobile health solutions for government use.
Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

1 day ago

DEADLINE

N/A
View Details
NAICS: 511210
New
Federal
AI-Powered Clinical Decision Support System (CDSS) DevelopmentThe contract entails the development and integration of an AI-driven clinical decision support system tailored for military healthcare providers, leveraging electronic health record data and evidence-based clinical guidelines to enhance diagnostic accuracy and treatment recommendations. The solution must be designed to operate seamlessly within existing military healthcare infrastructure, ensuring real-time, actionable insights that improve patient outcomes while adhering to stringent security and compliance standards for defense-related data. The system will be built to scale across military medical facilities and must accommodate the unique operational and clinical contexts of service members and dependents. The work is structured as a subcontract under the Defense Health Agency, with performance located in Falls Church, Virginia, and categorized under NAICS code 511210 for software publishing. The project is not subject to a specific set-aside classification, and while details regarding the prime contractor or point of contact are not provided, the timeline indicates the opportunity was posted in August 2026. The contractor is expected to deliver a robust, secure, and continuously maintainable platform that integrates with legacy EHR systems and supports the Department of Defense’s mission to modernize military healthcare delivery through advanced artificial intelligence.
Software Publishers

POSTED

1 day ago

DEADLINE

N/A
View Details
NAICS: 541715
New
Federal
DHA Enterprise-Wide Commercial Solutions Opening (CSO)
Solicitation # HT003826SC005
The Defense Health Agency (DHA) has opened a long-term Commercial Solutions Opening (CSO) under solicitation number HT003826SC005, active from August 7, 2026, through August 6, 2027, to acquire commercial products, services, and non-developmental items that enhance military health readiness and system interoperability. This CSO leverages statutory authorities under 10 U.S.C. § 3458, as amended by the FY 2026 NDAA, and Other Transaction Authority (OTA) authorities under 10 U.S.C. §§ 4021–4023, enabling the government to award both FAR-based firm-fixed-price contracts—with or without performance incentives—and prototype or research agreements, allowing for agile procurement of commercially available technologies that can be minimally modified to meet DHA’s needs. Proposals must align with commercially available solutions and will be solicited through evolving Areas of Interest (AoIs), which will each define specific problem statements, evaluation criteria, submission requirements, and anticipated award timelines, with the government retaining the flexibility to issue, extend, or revise AoIs throughout the CSO period. The evaluation process is structured in three phases: an initial pitch or white paper assessment focusing on strategic alignment and basic feasibility on a Go/No-Go basis; an optional oral presentation or demonstration evaluating technical viability and compatibility with the Military Health System; and a final full commercial proposal phase assessing technical merit, cost-effectiveness, past performance, and statutory eligibility. Evaluation is conducted on a trade-off basis, not as lowest price technically acceptable, with no formal numerical weights assigned. Awards may lead directly to production contracts under 10 U.S.C. § 4022(f), allowing sole-source follow-on procurement for successful prototype participants. Submission requirements vary by AoI, with no universal page limits or file format standards specified, but all submissions are non-returnable and non-reimbursable, and offerors are required to grant the government permission to use non-government advisors under an OCI screening protocol. All activity is centered on Falls Church, Virginia, with no predefined payment or invoicing systems specified, and while regulatory adherence to FAR Part 12 and DFARS Subpart 212.70 is implied, no specific packaging, marking, inspection criteria, or security clearance requirements are outlined in the base document. Offerors must maintain current SAM.gov registration and are expected to comply with implied representations
Research and Development in the Physical, Engineering, and Life Sciences (except Nanotechnology and Biotechnology)

POSTED

1 day ago

DEADLINE

in 12 months
View Details
NAICS: 541690
Federal
Data Integration and Interoperability ServicesThe contract seeks to establish robust data integration and interoperability services across the Military Health System by leveraging industry-standard healthcare data formats including FHIR R4 and HL7 v2.5.1 alongside standardized terminologies such as SNOMED CT, ICD-10, and LOINC to ensure consistent and accurate data exchange. The use of Unity Catalog is mandated to provide centralized governance, data lineage, and compliance oversight, enabling trusted, auditable access to health information across disparate systems. This effort is critical to unifying clinical, administrative, and operational data streams within the Department of Defense’s health infrastructure. The work is classified under NAICS code 541690 for other scientific and technical consulting services and is structured as a subcontract under the Defense Health Agency, part of the Department of Defense. Performance is expected to occur in Grassy Creek, with no specific set-aside or location-based restrictions noted. The contract was posted on July 20, 2026, and is open for engagement under the federal procurement system, with no designated point of contact provided. Success requires deep expertise in healthcare data standards, real-time interoperability solutions, and enterprise-level data governance to meet the complex and security-sensitive requirements of military health operations.
Other Scientific and Technical Consulting Services

POSTED

19 days ago

DEADLINE

N/A
View Details
NAICS: 511210
Federal
Individual Medical Readiness (IMR) and Profiling System DevelopmentThe contract requires the design and implementation of a comprehensive system to manage Individual Medical Readiness and medical profiling for military service members, with a focus on real-time tracking, automated alerts, and decision support capabilities. The system must enable continuous monitoring of medical statuses, ensure compliance with readiness standards, and provide actionable insights to support mission readiness and personnel health management across the Department of Defense. It will integrate data streams from multiple sources to deliver accurate, up-to-date medical profiles and trigger proactive interventions when deficiencies or expirations are detected. The effort is structured as a subcontract under the Defense Health Agency, part of the Department of Defense, and falls under the NAICS code 511210, indicating it involves software publishing and related services. The work is to be performed at Grassy Creek, though specific location details are not provided. The contract was posted on July 20, 2026, and is open for bidding under a general subcontract designation without an identified set-aside classification. The system must be scalable, secure, and capable of supporting command-level decision-making through intuitive dashboards and automated workflows, ensuring service members remain medically prepared for deployment and operational duties.
Software Publishers

POSTED

19 days ago

DEADLINE

N/A
View Details
NAICS: 541511
Federal
Profiling Action And Readiness Tracking Unified System (PARATUS) CSO
Solicitation # HT003826SC004
The Defense Health Agency Contracting Activity, on behalf of the Program Executive Office for Defense Healthcare Management Systems, is issuing a Commercial Solutions Opening to acquire innovative commercial technologies that modernize military medical readiness processes under the PARATUS initiative. This effort aims to replace six legacy service-specific systems with a unified, governed data platform structured around three phases: Physical Health Assessment, Profiling and Individual Medical Readiness, and Waivers. The primary focus is on delivering agentic artificial intelligence and machine learning-based solutions that automate manual, document-driven medical procedures, enable risk-prioritized triage, provide real-time visualization dashboards, and support mobile access for geographically dispersed service members—all within a Department of War Impact Level 5 environment, with secure cross-domain data connectivity to Impact Level 6. Solutions must integrate with existing Military Health System data sources using standardized data contracts including FHIR R4, HL7 v2.5.1, SNOMED CT, ICD-10, and LOINC, and operate on a shared architecture with Unity Catalog governance. The solicitation invites submissions across multiple Areas of Interest, with AOI 1 currently open for Physical Health Assessment Modernization, while AOIs 2 and 3 are anticipated for future releases. Submissions are evaluated through a rapid, multi-phase competitive process under the authority of 10 U.S.C. 4022 and 3458, leveraging streamlined commercial acquisition procedures without traditional contracting constraints. There are no restrictions on eligibility, and multiple awards or no awards may result. Proprietary information may be submitted but must be clearly marked to ensure protection from unauthorized disclosure, though the government reserves the right to engage contract advisors from Boston Consulting Group, Andrew Morgan Consulting, and Deloitte to support review. Respondents must grant the government authority to share their submissions with these third parties unless prior objections are raised with the designated point of contact. The solicitation number is HT003826SC004, posted July 20, 2026, placing performance primarily in Grassy Creek, Virginia, with primary point of contact Elizabeth M. Ruckwardt.
Custom Computer Programming Services

POSTED

19 days ago

DEADLINE

N/A
View Details