Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance and Vulnerability Testing

Active

State & Local

Response Deadline10/19/2026, 12:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for the New York Department of Transportation focuses on Cybersecurity Compliance and Vulnerability Testing. The selected provider will perform security testing and vulnerability assessments for prime contractors, ensuring applications adhere to OWASP Top-10, NIST 800-53, and NIST CSF standards. Key responsibilities include responding to DHS critical vulnerability publications and delivering comprehensive remediation patching reports, vulnerability reports, and third-party security attestations. The project is based in New York and falls under NAICS code 541519. Interested parties should note the posting date of September 15, 2026, with a response deadline of October 19, 2026.

General Info

NYDOT subcontract for cybersecurity compliance, vulnerability testing, and security assessments in New York.

Agency

New York → Department Of TransportationView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

New York, NY, USA

Set-Aside

NONE

Documents

This scope was carved out of 84126P0001.

The full solicitation package (20 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

84126P0001-Develop, Deploy, Support and Maintain Existing and Future Citywide Transit Signal Priority (TSP)

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 15

subcontract

Response DeadlineOct 19

Submission deadline

Response Deadline

10/19/2026, 12:00:00 AM UTCin about 1 month

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyNew York → Department Of Transportation

ContactsNo contacts available

OfficeN/A

Organization / Agency

New York → Department Of Transportation

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security testing and vulnerability assessments for prime contractors on NYCDOT projects. Tests applications against OWASP Top-10, NIST 800-53, and NIST CSF standards. Responds to DHS critical vulnerability publications and provides remediation patching reports. Delivers vulnerability reports and third-party security attestations.

Similar Contracts

Same NAICS industry code

Cybersecurity & Compliance AuditorThis subcontract for a Cybersecurity and Compliance Auditor involves performing security reviews and penetration testing for prime contractors on Ohio EPA projects. The scope of work includes conducting configuration reviews for operating systems, applications, and databases, executing bi-weekly log anomaly reports, and maintaining the System Security Plan. The contractor must ensure strict adherence to NIST 800-53, NIST 800-171, CJIS Security Policy, and IRS Special Publication 1075. Key deliverables include security audit reports, risk assessments, and compliance certifications. The opportunity is categorized under NAICS code 541519 and is associated with the EPA PM-ITS Info Tech Service and PM-Fiscal Administration units.

Epa932000 Pm-its Info Tech Service Lzrs, Epa950000 Pm-fiscal Administration Lzrs

POSTED

about 14 hours ago

DEADLINE

Grammarly Business Enterprise Software SupplyThis subcontract provides brand-name Grammarly Business Enterprise licenses to prime contractors supporting Indian Health Service projects. The scope includes the provision of online writing assistance software tools and the management of license seats for a base year and four subsequent option years. To be eligible, providers must hold Grammarly Authorized Reseller status and meet strict security requirements, including FedRAMP authorization and SOC 2 Type II audit results. Managed by the Department of Health and Human Services under the Division of Acquisitions Policy HQ, the contract is set aside for Indian Small Business Economic Enterprise firms under NAICS code 541519. The performance location is based in Rockville, Maryland. The primary objective is the delivery of active, provisioned software licenses to ensure IHS users have access to professional writing tools.

Division Of Acquisitions Policy Hq

POSTED

about 18 hours ago

DEADLINE

Software Support for KASEMAKE and KASECUT LicensesThis subcontract through the National Archives and Records Administration provides software support and license maintenance for prime contractors managing industrial equipment projects in College Park. The scope of work includes troubleshooting, updates, and ensuring the validity of two KASEMAKE and two KASECUT software licenses for a one-year duration. Eligible providers must demonstrate OEM authorization or provide proof of their ability to support these specific systems. The successful contractor is responsible for delivering active software support agreements and fully functional licenses under NAICS code 541519.

Nara Contracting Office

POSTED

about 18 hours ago

DEADLINE

ISBEE: Brand Name-Grammarly Business Enterprise (Base + 4)

Solicitation # 75H70426Q00025

The Indian Health Service (IHS) is conducting a sources sought notice under the authority of the Buy Indian Act, 25 U.S.C. 47, to identify qualified Indian Small Business Economic Enterprises (ISBEEs) and other Indian Economic Enterprises (IEEs) capable of providing Grammarly Business Enterprise (Part Number GRMLYENT-200), a cloud-based writing assistance software tool, for approximately 600 employees across IHS facilities. This notice is not a solicitation for proposals but a market research initiative to assess the availability and capability of small Indian-owned businesses to fulfill this requirement, with the intent to potentially structure a future acquisition using a set-aside reserved exclusively for ISBEEs. Interested parties must submit a complete response by 11:00 a.m. EST on May 11, 2026, to Javier.medina-velazquez@ihs.gov, including their company name, address, Unique Entity ID and CAGE code, point of contact, size classification under NAICS code 541519 (150-employee size standard), a capability statement, and a signed Buy Indian Act Indian Economic Enterprise Representation Form. Responses are restricted to five pages total and must not include proprietary, classified, or sensitive information, as the government reserves the right to use non-proprietary details in any future solicitation without obligation to compensate respondents. The requirement involves licensing Grammarly Business Enterprise, with baseline authorization for 600 users in the base year and anticipated increases of 80 users annually across four option years, extending the potential contract period through June 14, 2031. Performance is entirely electronic, with no physical delivery, and all services must be accessed via secure online platforms. Compliance with federal cybersecurity and privacy standards is mandatory, including adherence to FedRAMP Moderate authorization, HIPAA, the Privacy Act, FISMA, NIST SP 800-53, and SOC 2 Type II certification. Contractors must execute a Business Associate Agreement, prevent the input of protected health information, ensure data remains under IHS ownership with no secondary use, implement SCIM for identity provisioning, enable BYOK and Confidential Mode, and provide annual compliance reporting. Any data breach must be reported within 24 hours. The contracting officer is Javier Medina-Velazquez, with Kevin Fulbright serving as the technical point of contact. The government will not acknowledge receipt, guarantee an award, or pay for submissions

Division Of Acquisitions Policy Hq

POSTED

about 18 hours ago

DEADLINE

UPS POWER SUPPLY SERVICES

Solicitation # N0017826Q6856

POSTED

about 18 hours ago

DEADLINE

Maintenance and Support Agreement for NIH Hazardous Waste Management Tracking Information Software (EnviroWare)

Solicitation # 75N98026Q01215

The National Institutes of Health (NIH) is seeking a firm-fixed-price maintenance and support agreement for EnviroWare, a proprietary software application used to track and manage hazardous waste at the NIH main campus and off-site facilities. The contract is intended as a non-competitive, sole-source award to Wastelinq, Inc., the proprietary owner of the software, under statutory authority 41 U.S.C. 1901. The primary objective is to ensure the system remains in good operating condition, meets all applicable codes and developer specifications, and maintains compliance with US EPA and Maryland Department of Environment regulations. The scope of work includes technical phone support during normal business hours, the implementation of security, Oracle, and Java patches to meet NIH ITB security requirements, and the provision of custom development enhancements at fixed hourly rates. The period of performance consists of a one-year base period starting September 28, 2026, with two optional one-year extensions. Services will be performed via remote connections or on-site at the NIH Hazardous Waste Management Facility in Bethesda, Maryland. All deliverables are subject to inspection and acceptance by the NIH Project Officer.

National Institutes Of Health Olao

POSTED

about 18 hours ago

DEADLINE

Non-Core Telecommunications Operations & Maintenance

Solicitation # 693JJ126Q000005

The Department of Transportation is soliciting a single Blanket Purchase Agreement (BPA) for non-core telecommunications operations and maintenance support services. This small business set-aside contract, with an estimated total value of 150 million dollars, covers an 84-month ordering period with a potential six-month extension. The scope includes the management of cabling and connectivity infrastructure, telecommunications closets, asset inventory, and moves, adds, and changes for voice and data customer provided equipment. Support services extend to IPTV, distributive antenna systems, data center operations and infrastructure management, and wireless support across DOT Headquarters, field sites, the FAA, the US Merchant Marine Academy, and the Stennis, MS disaster recovery location. Award will be based on the lowest price technically acceptable (LPTA) basis, following a pass/fail evaluation of a detailed certification checklist requiring specific industry certifications and experience. Technical evaluation focuses on the approach to the statement of work, management strategy, and corporate experience as a prime contractor within the last three years. The contractor must provide 24/7 support for assets in the Washington DC area and adhere to ITIL integrated processes and BICSI cabling standards. Administrative requirements include the use of the DELPHI eInvoicing system and compliance with various TAR and FAR clauses regarding security, personnel qualifications, and organizational conflicts of interest.

693JJ3 Acquisition And Grants Mgt

POSTED

about 18 hours ago

DEADLINE

Protective Distribution System (PDS) Preventive Maintenance and Support Services

Solicitation # W912PX26PA004

The Regional Contracting Office intends to award a sole source purchase order to CyberSecure IPS, LLC for the maintenance and support of the CyberSecure Alarmed Carrier Protective Distribution System (PDS) at the Joint Interagency Task Force South compound in Key West, Florida. This procurement is conducted under Title 41 U.S.C. 1901(e)(2) and FAR 12.102(a) because the proprietary nature of the system's firmware and software makes the Original Equipment Manufacturer the only viable source. The services are critical for maintaining a legal mandate for continuous monitoring of classified fiber-optic network runs and ensuring the system retains its active Authority to Operate. The scope of work includes the annual renewal of proprietary IMS Gold software licenses, 24/7 off-site technical support via telephone and ticketing, and one annual on-site visit for hardware calibration, performance analysis, and administrator training. Because the system operates on an air-gapped network, all technical coordination must be handled off-network. While this is a sole-source notice, interested parties may submit capability statements to Contracting Officer Lian Pinzon, provided they can demonstrate legal access to the OEM's proprietary source code and software patches.

0410 Aq Hq Contract

POSTED

about 18 hours ago

DEADLINE

in about 6 hours

SuperMicro manufactured servers hardware

Solicitation # N0042126Q1375

Solicitation N00421-26-Q-1375 is a firm fixed-price procurement issued by the Naval Air Warfare Center Air Division for the purchase of 12 SuperMicro X13 CloudDC 1U servers to support the PMA-290 program. This opportunity is a total set-aside for small businesses under FAR Part 52.219-6. The required hardware must be new, brand-name SuperMicro equipment with no substitutions allowed, featuring specific components including 4514Y CPUs, 32GB DDR5 memory, Micron 7450 PRO NVMe storage, and FIPS-supported TPM 2.0 modules. Vendors must provide a minimum one-year warranty with advance replacement for defective parts and submit signed documentation verifying they are an authorized distributor. Quotes must be submitted via email to Roshaia Thomas and Douglas Owen by September 18, 2026, at 4:00 pm Eastern Standard Time. Award will be granted to the vendor offering the lowest aggregate firm fixed-price quotation that meets all technical requirements. Offerors must be registered in the System for Award Management and include their CAGE code, Tax ID, and estimated delivery date in their response. Delivery is required within four weeks from the date of award to the Commander Naval Air Warfare Center Air Division in Patuxent River, Maryland. All electronic equipment packaging must be marked with a DO NOT SCAN sticker, and invoicing must be processed through the Wide Area Workflow system.

Naval Air Warfare Center Air Division

POSTED

about 18 hours ago

DEADLINE

DA10--NEW TO -Enterprise QA Software System & Repository (VA-26-00052553)

Solicitation # 36C10B26Q0804

The Department of Veterans Affairs, through the Technology Acquisition Center NJ, is soliciting proposals for an Enterprise QA Software System and Repository for radiotherapy quality assurance. This combined contract opportunity, identified by solicitation number 36C10B26Q0804, is designated as a total small business set-aside under NAICS code 541519. Interested parties must submit their responses by the deadline of September 16, 2026, at 2:00 PM. The primary point of contact for this requirement is Candice Mazzetta, and the contracting office is located in Eatontown, New Jersey.

Technology Acquisition Center Nj (36C10B)

POSTED

about 18 hours ago

DEADLINE

B--SHAKEALERT PRODUCTION CODE REVIEW

Solicitation # 140G0326Q0223

The Department of the Interior, through the USGS Earthquake Science Center, is seeking a qualified firm to conduct an independent code review of the ShakeAlert Earthquake Early Warning Production System. This safety-critical, real-time system requires an expert assessment to identify latent defects, reduce complexity, and establish sustainable quality assurance practices. The scope of work focuses on source code quality, software engineering practices, and the evaluation of development and deployment pipelines, specifically including CI/CD and GitLab workflows. The review will not evaluate the scientific methods embodied in the system but will instead focus on quantitative code metrics and qualitative reviews for correctness and reliability. The period of performance is 12 months from the date of award, and all work may be performed remotely. The contractor must adhere to several industry and government standards, including MISRA C/C++ guidelines, CERT C/C++ Secure Coding Standards, SEI CERT guidelines for concurrency and real-time considerations, and federal government IT security and software assurance guidance. Deliverables must be provided in both PDF and editable Word formats. Due to the sensitive nature of the system, the selected contractor will be required to execute a non-disclosure agreement to protect non-public code, configuration, and documentation.

Office Of Acquisiton Grants

POSTED

about 18 hours ago

DEADLINE

in about 1 month

Notice of Contract Action/Public Notice - Sole Sou

Solicitation # 68HE0126Q0016

POSTED

DEADLINE

More opportunities from New York → Department Of Transportation

Same awarding agency

TSP Data Warehouse and SQL Database ConfigurationThis subcontract for the New York Department of Transportation focuses on the configuration and optimization of the TSP Data Warehouse and Trigger Point Interface for prime contractors. The scope of work includes developing SQL Database schemas, managing data archives, and implementing the transmission of route data to SFTP servers using CSV files. A primary objective is the creation of automated operational reports to eliminate the need for manual analysis. The project will culminate in the delivery of a fully configured SQL Database and an optimized Data Warehouse. This opportunity is categorized under NAICS code 541511 and is based in New York. Interested parties must respond by October 19, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

in about 1 month

TSP System Operations and Maintenance (O&M)The TSP System Operations and Maintenance subcontract supports prime contractors on New York City Department of Transportation projects by providing ongoing monitoring and troubleshooting of the Transit Signal Priority software and hardware ecosystem. The scope of work includes managing Trigger Point servers, resolving Traffic Control System issues, and verifying Phase Split Logs using specialized tools such as TransSuite, Unified Controller Manager, and ASTC firmware to ensure a fully operational TSP system and the resolution of technical tickets. This engagement is categorized under NAICS code 541513 and is performed within New York City. The solicitation was posted on September 15, 2026, with a response deadline of October 19, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

in about 1 month

84126P0001-Develop, Deploy, Support and Maintain Existing and Future Citywide Transit Signal Priority (TSP)

Solicitation # 84126P0001

The New York City Department of Transportation is seeking a qualified consultant to develop, deploy, support, and maintain existing and future Transit Signal Priority (TSP) corridors across the city's five boroughs. The project covers approximately 200 miles and 3,500 signalized intersections, utilizing a centralized system that integrates the Traffic Safety Network, centralized Traffic Control Systems, and on-board bus equipment. The anticipated contract term is 1,460 consecutive calendar days, with an estimated value exceeding 1 million dollars. The scope includes supporting current corridors, deploying new ones, and transitioning to adaptive TSP operations, with specific deliverables such as monitoring the Trigger Point server at the Traffic Management Center. Selection is based on Qualifications Based Selection following Brooks Law, where the contract is awarded to the highest-scoring technical proposer from a shortlist of those scoring 70 percent or higher, subject to the negotiation of a fair and reasonable price. Key personnel requirements include a Project Manager with at least 8 years of traffic design experience and a New York State Professional Engineer license, and a Project Engineer with at least 4 years of experience. The contract is subject to various compliance mandates, including NYC Cyber Command security standards, the Iran Divestment Act, and Mayoral Executive Order 39 regarding fleet safety. Payment is based on loaded hourly rates and processed via electronic funds transfer. All proposals must be submitted through the PASSPort portal by October 19, 2026.

Engineering Services

POSTED

DEADLINE

in about 1 month

Specialized Software Development (ITS)This subcontract opportunity, titled Specialized Software Development (ITS), focuses on the development and customization of software systems for Intelligent Transportation Systems used in Department of Transportation Roadway Repair and Maintenance projects. The selected provider will be responsible for software systems development, customization, and the delivery of technical training and comprehensive manuals. All work must strictly adhere to the National ITS Architecture Version 6.0 and the New York Sub-Regional ITS Architecture. The project is based in New York and falls under NAICS code 541511. The response deadline for this opportunity is October 9, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Materials Engineering & TestingThis subcontract for the New York Department of Transportation focuses on materials engineering and testing for roadway repair and maintenance projects. The selected provider will perform comprehensive testing and analysis of asphalt and roadway materials for prime contractors, utilizing specialized pavement testing equipment and materials labs to conduct evaluations and inspections. All work must strictly adhere to established materials engineering standards to ensure the quality and safety of the infrastructure. The contractor is responsible for delivering detailed materials test reports and pavement evaluation analyses. This opportunity is categorized under NAICS code 541380 and is based in New York. The solicitation was posted on September 9, 2026, with a response deadline of October 9, 2026.

Testing Laboratories and Services

POSTED

DEADLINE

Environmental Engineering & PermittingThis subcontract for Environmental Engineering and Permitting supports New York Department of Transportation Roadway Repair and Maintenance projects. The selected provider will perform environmental assessments, conduct engineering and compliance reviews, and secure necessary permits for prime contractors. A critical requirement of the scope is ensuring full compliance with the National Environmental Policy Act and the State Environmental Quality Review Act, culminating in the delivery of approved permits and environmental impact reports. The opportunity is categorized under NAICS code 541620 and is based in New York. Interested parties must submit their responses by October 9, 2026, following the posting date of September 9, 2026.

Environmental Consulting Services

POSTED

DEADLINE

Drainage & Hydrology EngineeringThis subcontract for Drainage and Hydrology Engineering supports Department of Transportation Roadway Repair and Maintenance projects in New York. The selected provider will partner with prime contractors to perform drainage mapping, conduct detailed drainage studies, and develop flooding alleviation solutions. These tasks require the use of hydraulic modeling software to produce essential deliverables, including hydrology reports, flood mitigation designs, and comprehensive drainage maps. A Professional Engineer license is mandatory for this engagement. Interested parties must submit their responses by October 9, 2026, under NAICS code 541330. The project focuses on enhancing infrastructure resilience through technical engineering expertise to mitigate flooding and optimize roadway drainage systems.

Engineering Services

POSTED

DEADLINE

Geotechnical Engineering & Subsurface InvestigationThis subcontract for the New York Department of Transportation focuses on providing geotechnical engineering and subsurface investigation services for roadway repair and maintenance projects. The selected provider will support prime contractors by conducting pavement core testing and subsurface investigations using soil sampling tools and core drilling rigs. Key deliverables include the production of detailed geotechnical reports and subsurface investigation logs. A Professional Engineer license is required to perform this work under NAICS code 541330. The project is based in New York, with a response deadline of October 9, 2026.

Engineering Services

POSTED

DEADLINE

Land Surveying & MappingThis subcontract for Land Surveying and Mapping supports Department of Transportation Roadway Repair and Maintenance projects in New York. The selected provider will perform topographic surveys and field data collection using GPS and Total Stations to produce detailed survey maps and digital data for prime contractors. A Professional Land Surveyor license is required to execute this contract under NAICS code 541370. The solicitation was posted on September 9, 2026, with a response deadline of October 9, 2026.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

84125P0014-ESA, Roadway Eng, Data Coll, Design, Inspect & Related Srvs

Solicitation # 84125P0014

The New York Department of Transportation's Roadway Repair and Maintenance division is seeking qualified vendors for contract 84125P0014 to provide roadway engineering, data collection, design, inspection, and related services. The scope of work includes supporting daily workflows, developing pavement and drainage improvement projects, conducting studies for limited access arterial system capital projects, evaluating materials and equipment, and ensuring environmental and legal compliance for DOT facilities. Interested proposers must submit their responses via the PASSPort online procurement portal by the deadline of October 9, 2026. A pre-proposal conference is scheduled for September 17, 2026, via Microsoft Teams. While the procurement is subject to New York State's Disadvantaged Business Enterprise participation goals as required by the FHWA, no specific DBE goal has been set for this project.

Engineering Services

POSTED

DEADLINE

Specialized Steel Coating and Galvanizing InspectionThis subcontract for the New York Department of Transportation involves providing specialized technical inspections of coating and galvanizing processes for reinforcing steel on bridge projects. The selected provider will be responsible for inspecting surface preparation, verifying the thickness and uniformity of epoxy coatings or galvanizing, and performing adhesion and integrity tests using DFT gauges and adhesion testers. All work must adhere to ASTM standards, and the provider is required to hold NACE or SSPC certifications to deliver formal coating inspection reports and certifications of compliance. The opportunity is categorized under NAICS code 541380 and is based in New York. Interested parties must submit their responses by October 1, 2026, following the posting date of August 31, 2026.

Testing Laboratories and Services

POSTED

DEADLINE

Precast Concrete Quality Assurance (QA) Inspection ServicesThis subcontract for Precast Concrete Quality Assurance Inspection Services supports New York City Department of Transportation bridge projects. The selected provider will perform in-process fabrication inspections of precast and prestressed concrete members, ensuring that prestressing operations and casting processes strictly adhere to approved shop drawings. Key responsibilities include conducting quality audits of internal fabrication shop processes using precision measurement tools and delivering critical documentation such as inspection reports, non-conformance reports, and fabrication approval certifications. Qualified candidates must possess PCI certification and demonstrate a thorough understanding of New York City bridge construction standards. The contract falls under NAICS code 541370 and is focused on performance within New York City. The solicitation period concludes with a response deadline of October 1, 2026.

Surveying and Mapping (except Geophysical) Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS