Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

DepthFirst Agentic Penetration Testing Solutions

Active

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

Customs and Border Protection's Cybersecurity Directorate is seeking DepthFirst Agentic Penetration Testing solutions to enhance the security of its web applications and application programming interfaces. The project focuses on implementing agentic AI capabilities to identify and exploit vulnerabilities and complex vulnerability chains, ensuring robust protection across the agency's digital infrastructure. This opportunity is forecasted as a 100 percent small business set aside and will be acquired through the NASA SEWP V vehicle under NAICS code 541519. The performance location for this effort is Ashburn, Virginia, with coordination managed through the Department of Homeland Security.

General Info

CBP seeks agentic AI penetration testing for web applications via NASA SEWP V.

Agency

Department of Homeland Security → Customs And Border Protection

NAICS

541519 - Other Computer Related Services

Place of Performance

Ashburn, VA, USA

Set-Aside

SBA

Documents

0

No documents available

Documents will appear here when they are available.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedAug 18

forecast

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment of Homeland Security → Customs And Border Protection

Contacts3 people available

OfficeN/A

Organization / AgencyDepartment of Homeland Security → Customs And Border Protection

Office AddressN/A

Contacts

Randall Malota

contact@example.gov

+1 (555) 000-0000

Corteney Ugenyi

contact@example.gov

+1 (555) 000-0000

David HarrodSmall Business Specialist/APFS Coordinator

contact@example.gov

+1 (555) 000-0000

Full Description

Show more

Depthfirst Agentic Penetration Testing solution provides CBP's Cybersecurity Directorate (CSD) the agentic AI capabilities to effectively identify and exploit vulnerabilities and vulnerability chains in CBP web applications and application programming interfaces (API) to ensure the security of CBPs web applications and APIs.
Acquisition Strategy: 100% total SB set aside off NASA SEWP V.

Similar Contracts

Same NAICS industry code

Cybersecurity Framework Implementation & AuditThis subcontract for Cybersecurity Framework Implementation and Audit involves providing cybersecurity risk mitigation services for prime contractors working on Rhode Island Emergency Management Agency AWN projects. The scope of work requires the implementation of security controls aligned with several industry standards, including NIST CSF 2.0, NIST 800-53, CIS Benchmarks, ISO 27001, and PCI DSS. Key deliverables include the completion of the ETSS Cybersecurity Questionnaire and the verification of SOC 2 Type 2 or FedRAMP/GovRAMP authorizations. The selected provider must deliver a comprehensive risk mitigation report and the necessary compliance certifications to the State of Rhode Island. The solicitation was posted on November 4, 2026, with a response deadline of December 2, 2026.

State of Rhode Island

POSTED

about 14 hours ago

DEADLINE

24/7 Operational Support and MonitoringThis subcontract for Cadent Gas Limited involves providing continuous 24/7/365 technical support and system monitoring for gas emergency and customer-facing services. The primary objective is to maintain system uptime of over 99 percent through the utilization of Application Performance Monitoring and Security Information and Event Management tools. The selected provider must hold ISO 27001 certification to ensure rigorous security standards. Key deliverables include constant incident response capabilities and the regular submission of SLA compliance reports to ensure all operational benchmarks are met.

Cadent Gas Limited

POSTED

about 16 hours ago

DEADLINE

Medical Kit Integration and Packaging ServicesThe Medical Kit Integration and Packaging Services subcontract involves performing kitting, assembly, and final packaging for prime contractors supporting USMC medical supply contracts. The primary objective is the delivery of completed Combat Lifesaver Kits, specifically NSN 6545-01-571-4470, which requires the aggregation of tourniquets and gauze. All work must be performed in a medical-grade kitting and packaging facility located in Bell, California. Strict adherence to technical specifications is required, including PKGING DATA-QUP:001 for kit assembly and FED-STD-313 for the packaging of hazardous materials. This Department of Defense effort is managed through the Medical Supply Chain MD Surg FSF. Interested parties should note the response deadline of November 10, 2026.

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

about 16 hours ago

DEADLINE

LED Screen Supply and Technical SupportThis subcontract for LED Screen Supply and Technical Support involves providing comprehensive visual display services for Derby City Council live event projects. The scope of work includes the supply, installation, and management of large-scale LED screens, encompassing the transport of panels, assembly of screen arrays, and the configuration of visual feeds. To ensure operational high-resolution systems, the provider will utilize specialized LED panels, processors, rigging hardware, and control software. Due to the nature of the temporary installations, the contractor is required to hold valid electrical safety certifications. This opportunity was posted on November 4, 2026, with a response deadline of November 11, 2026. The project falls under NAICS code 541519 and is designed to support prime contractors in delivering high-quality visual infrastructure for city-led events.

Derby City Council

POSTED

about 17 hours ago

DEADLINE

On-Site Installation, Testing, and Event SupportThis subcontract, managed by the Town Administrator's Office for the Town of Hingham, focuses on the on-site installation, testing, and event support for municipal projects. The selected provider will be responsible for the physical setup of voting equipment, conducting technical rehearsals four hours before sessions begin, and providing real-time technical support and system management, including handset recovery, to assist prime contractors. The primary deliverable is a fully installed and tested voting system. All work must be performed in compliance with M.G.L. c. 268A. The solicitation was posted on November 4, 2026, with a response deadline of December 3, 2026, falling under NAICS code 541519.

Town Administrator's Office

POSTED

about 17 hours ago

DEADLINE

NOI SAP Application Management Services

Solicitation # PA24020-A

The Capital Regional District (CRD) has issued a notice of intent for a direct award contract, solicitation number PA24020-A, to Deloitte Inc. for SAP Application Management Services (AMS). This three-month contract extension is valued at an estimated 75,000 CAD plus applicable taxes and is scheduled to conclude on March 31, 2027. The primary objective is to ensure continued compatibility with existing infrastructure and systems by leveraging the supplier's proven expertise in SAP S/4HANA and SuccessFactors support. The scope of work requires the supplier to provide AMS services on an as-needed basis, focusing on incident management, system enhancements, and integration services that align with the CRD's operational and strategic goals. The procurement process is being managed by Gajanan Pujar. Interested parties wishing to object to the direct award must submit detailed written documentation demonstrating their ability to meet the specified requirements to the procurement specialist by 2:00pm Pacific Time on November 16, 2026.

Capital Regional District

POSTED

about 17 hours ago

DEADLINE

Cisco DNA and Switching Essentials License ProviderThis subcontract opportunity with the Lincoln Electric System involves the supply and management of Cisco software licenses for prime contractors working on infrastructure projects. The selected provider will be responsible for delivering three-year Cisco DNA Essentials On-Prem and Cisco Switching Essentials Tier 1 licenses, while coordinating technical support through STD 8X5XNBD and SNTC-8X5XNBD contracts. To be eligible, providers must hold Authorized Cisco Licensing Partner status and provide LB 1300 Foreign Adversary Contracting Prohibition Act Certification. The contract requires the delivery of active licenses and support certifications, with a response deadline set for November 19, 2026.

Lincoln Electric System

POSTED

about 19 hours ago

DEADLINE

HIPAA/Security Compliance Validation and Penetration TestingThis subcontract opportunity with Integral Care in Texas involves performing security validations and compliance audits for prime contractors. The selected provider will be responsible for conducting penetration testing and vulnerability management, while specifically verifying the implementation of TLS 1.2+ and AES-256 encryption. Key deliverables include security assessment reports, penetration test results, and formal compliance certifications. The scope of work focuses heavily on regulatory adherence, requiring the validation of HIPAA and 42 CFR Part 2 compliance, as well as audits of Role-Based Access Control and Multi-Factor Authentication. To qualify, providers must meet SOC 2 and HITRUST standards. Responses for this engagement are due by January 8, 2027.

POSTED

about 19 hours ago

DEADLINE

Noise Monitoring Software Provision and IntegrationThe Noise Monitoring Software Provision and Integration subcontract involves the installation and licensing of an NMT-compatible software platform for prime contractors working on airport noise projects for the City of Doncaster Council. The scope of work includes configuring user access and providing the necessary software interface to enable effective noise data analysis. The primary objective is to deliver a fully installed and operational NMT software system with active user access. This procurement is categorized under NAICS code 541519, with a response deadline set for November 30, 2026.

City of Doncaster Council

POSTED

about 20 hours ago

DEADLINE

Industrial Cyber Security Audit and Testing ServicesThis subcontract for Industrial Cyber Security Audit and Testing Services involves performing technical assessments and security audits for prime contractors working on manufacturing SME projects for the Lincolnshire County Council. The scope of work focuses on conducting computer audits and security testing to identify vulnerabilities within operational technology networks and industrial control systems. The selected provider will utilize network auditing software and vulnerability scanning tools to evaluate cyber resilience readiness. Key deliverables include the provision of detailed security testing results and comprehensive audit reports. The response deadline for this opportunity is November 18, 2026.

Lincolnshire County Council

POSTED

about 20 hours ago

DEADLINE

EMMS Cyber Security SME Support Programme

Solicitation # PL26.084

The EMMS Cyber Security SME Support Programme, solicitation number PL26.084, is an industrial cyber security pilot initiative led by the Lincolnshire County Council. The program is designed to improve cyber resilience readiness for small and medium-sized manufacturing businesses across Leicestershire, Nottinghamshire, Derbyshire, Northamptonshire, and Greater Lincolnshire. The scope of work focuses on computer training, audit, and testing services, with a particular suitability for small and medium-sized enterprises as well as voluntary, community, and social enterprises. The contract is estimated to have a total value of 65,000 GBP excluding VAT, with a performance period spanning four months from December 1, 2026, to March 31, 2027, within the East Midlands region of England. Award decisions will be based on the Most Advantageous Tender. The solicitation was posted on November 4, 2026, with a submission deadline of November 18, 2026, at 9:00am. Fiona Fielding serves as the primary point of contact for this procurement.

Lincolnshire County Council

POSTED

about 20 hours ago

DEADLINE

Software Support and MaintenanceThis subcontract for Software Support and Maintenance involves providing technical support and system maintenance for prime contractors operating at the Ralph H. Johnson VA Medical Center under the Department of Veterans Affairs. The primary objective is to ensure continuous system uptime and availability through software troubleshooting and user support, specifically utilizing the proprietary administrative tools found at MyCrashCarts.com. The opportunity is categorized under NAICS code 541519 and is managed by the 247-NETWORK Contract Office 7. Interested parties must submit their responses by November 23, 2026, to provide the necessary technical proficiency required to maintain the specialized MyCrashCarts.com system and deliver ongoing technical resolutions.

247-NETWORK Contract Office 7 (36C247)

POSTED

about 21 hours ago

DEADLINE

More opportunities from Department of Homeland Security → Customs And Border Protection

Same awarding agency

Data and Meta Data ServicesCustoms and Border Protection, an agency within the Department of Homeland Security, is seeking the renewal of Data and Meta Data Services. This requirement is categorized as a forecast and will be pursued through an acquisition strategy utilizing Enterprise Small Business Blanket Purchase Agreement holders. The work is classified under NAICS code 541519 and is specifically set aside for small businesses. The performance of these services will take place in Ashburn, Virginia. Interested parties may coordinate with the primary point of contact, Wakia Meadows, or the Small Business Specialist, David Harrod, regarding this opportunity.

Other Computer Related Services

POSTED

DEADLINE

Common Application ServicesCustoms and Border Protection, an agency within the Department of Homeland Security, is forecasting a requirement for Common Application Services. The primary objective of this contract is to secure support services dedicated to the maintenance of the Common Application Framework. Performance for this effort will take place in Ashburn, Virginia, under NAICS code 541519. The acquisition strategy involves a competition among Enterprise Small Business BPA holders, and the opportunity is designated as a small business set-aside. Interested parties may coordinate with the point of contact, Wakia Meadows, or the Small Business Specialist, David Harrod, regarding this requirement.

Other Computer Related Services

POSTED

DEADLINE

Medical ServicesCustoms and Border Protection requires a flexible Medical Services Contract to provide essential healthcare for aliens in custody at Medical Priority Facilities and other government sites nationwide, with a primary focus on the Southwest Border. This initiative ensures compliance with federal executive orders regarding border security and is open for use by any federal agency partnering with CBP in immigration law enforcement operations. The scope of work encompasses frontline medical services, medical logistics, program management, quality management, and comprehensive reporting and documentation. All services must be performed in accordance with DHS and CBP medical policies. The acquisition strategy utilizes the Federal Supply Schedule for Professional and Allied Healthcare Staffing Services, specifically through Loyal Source Government Services, LLC.

Temporary Help Services

POSTED

DEADLINE

NASOC Jacksonville Design and Construction of New HangarCustoms and Border Protection is seeking the design and construction of new facilities at NASOC Jacksonville in Florida to support the Air and Marine Operations P-3 fleet. The project involves the development of additional administrative spaces, a ramp, aircraft storage, hangars, and maintenance facilities to enhance the operational capacity for counternarcotics and law enforcement missions across the Caribbean Sea and Atlantic Ocean. Under the proposed arrangement, CBP intends to own the hangar and administration buildings through established land leasing agreements. This requirement will be executed as a task order award under the existing CBP Design-Build IDIQ, utilizing NAICS code 236210. The project is currently listed as a forecast with a posted date of September 24, 2026. Coordination for this effort is being managed by the Department of Homeland Security.

Industrial Building Construction

POSTED

about 1 month ago

DEADLINE

PR 20155169 - Information Technology Lab Server and Supply Chain SecurityCustoms and Border Protection is seeking to modernize and scale the infrastructure of its Information Technology Lab to better support developers, researchers, and analysts. The lab serves as a critical replica of the production environment used for risk mitigation and testing before deployment. This expansion is specifically designed to handle an increasing demand for AI resources and to maintain operational continuity during ongoing laboratory consolidation efforts. The acquisition aims to create a more robust and scalable test environment that allows for the addition of resources without the continuous purchase of new servers, resulting in significant cost savings and faster delivery times. This opportunity is forecasted as a small business set-aside under the NASA SEWP V vehicle, with performance taking place in Ashburn, Virginia.

Other Computer Related Services

POSTED

about 1 month ago

DEADLINE

Legal Staffing and eDiscovery SupportCustoms and Border Protection is seeking immediate contractor services to provide legal staffing and eDiscovery support for the Office of Chief Counsel. The primary objective is to manage an unprecedented volume of information review and production related to the agency's litigation portfolio and operational activities. Contractors will be responsible for processing a wide array of data, including body-worn camera footage, surveillance video, mobile device data, investigative reports, and various communications. A critical component of this requirement is the identification and redaction of privileged, sensitive, or legally restricted information to ensure compliance with the Privacy Act, Freedom of Information Act, and other federal regulations. This urgent support is necessary to meet court deadlines, fulfill discovery obligations, and avoid legal sanctions. This opportunity is forecasted as a small business set-aside under NAICS code 541611, with the place of performance located in Washington, District of Columbia.

Administrative Management and General Management Consulting Services

POSTED

about 2 months ago

DEADLINE

The Preventative Maintenance and Repair Services for building equipment at CBP facilities in West Texas and New MexicoCustoms and Border Protection, under the Department of Homeland Security, is forecasting a requirement for preventative maintenance and repair services for building equipment at facilities located within the West Texas and New Mexico Corridor. The selected contractor will be responsible for providing all necessary labor, materials, equipment, and oversight to ensure the proper functioning of facility systems. This opportunity is designated as a set-aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 561210. The project involves performance across multiple locations, including Marfa, Texas, with Native Energy and Technology identified as the incumbent contractor.

Facilities Support Services

POSTED

about 2 months ago

DEADLINE

CIC 4DV Development LicensingCustoms and Border Protection is seeking 4DV Insight licenses, including ADSB Air, Maritime AIS, and Commercial Telemetry Data add-ons, along with the Windward Maritime Alerting API and related engineering support. These tools are essential for correlating data sources and visualizing geo-temporal patterns to provide situational awareness for USBP sectors. This capability is critical for identifying illicit activity and dismantling transnational criminal organizations; failure to secure these services would result in significant gaps in air and maritime domain awareness. The acquisition will be competed among small businesses via the NASA SEWP vehicle under NAICS code 541511. The performance location is designated as Washington D.C., and the requirement is currently listed as a forecast. Points of contact for this effort include John Deplitch and Small Business Specialist David Harrod.

Custom Computer Programming Services

POSTED

about 2 months ago

DEADLINE

GrayKey Mobile License UpgradeCustoms and Border Protection, under the Department of Homeland Security, is seeking to upgrade its GrayKey software licenses to support OPR Cyber Special Agents in conducting digital forensic imaging and extractions for administrative and criminal investigations. The contract specifically requires two GrayKey Mobile Premier Unlimited software licenses, which provide unlimited extractions for both iOS and Android devices to enhance the efficiency and integrity of forensic examinations. The procurement is structured for a base year followed by three one-year option periods, with a final expiration date of September 29, 2030. This opportunity will be conducted as a competitive small business set-aside through the NASA SEWP V vehicle under NAICS code 511210, with the place of performance located in Washington, District of Columbia.

Software Publishers

POSTED

about 2 months ago

DEADLINE

Cleo Robotics Confined Space Aerial DronesThis contract involves the expansion of the current fleet of Confined Space Aerial Drones provided by Cleo Robotics Labs Inc. The project is structured as an SBIR Phase III award issued by the Department of Homeland Security through Customs and Border Protection, operating under the authority of 15 U.S.C. 638(r)(4). The acquisition is designated as a small business set-aside under NAICS code 336411. Performance of the contract will take place across various locations within the District of Columbia. Key administrative points of contact for this forecast include Julianne Chavis and Small Business Specialist David Harrod.

Aircraft Manufacturing

POSTED

about 2 months ago

DEADLINE

USBP SPAD General Support Services (GSS)The United States Border Patrol Strategic Planning and Analysis Directorate seeks a contractor to provide general support services to augment administrative, operational, and logistical capabilities. Under a Firm Fixed Price contract, the provider will supply junior to mid-level personnel to assist with document management, scheduling, data reporting, inventory tracking, HR support, and SharePoint maintenance. These resources are not subject matter experts and will function as flexible assets, floating between various branches, projects, and divisions based on shifting operational priorities to allow federal staff to focus on mission-critical activities. This requirement is forecasted as an OASIS+ task order with a total set-aside for Women-Owned Small Businesses under NAICS code 541611. Performance will take place in Washington, D.C., requiring contractor personnel to work collaboratively within a law enforcement environment and adhere to all DHS and CBP procedures. The scope encompasses comprehensive office operations, executive assistance, and routine analytical tasks to enhance the overall organizational efficiency of the directorate.

Administrative Management and General Management Consulting Services

POSTED

about 2 months ago

DEADLINE

USBP Agent Support Equipment, TAK Enabled Handheld Medium Range Thermal ImagerCustoms and Border Protection is seeking to procure TAK enabled handheld medium range thermal imagers to support Border Patrol agents in domain awareness, surveillance, and detection. This initiative aims to systematically replace an aging and deteriorating inventory of handheld thermal devices that have exceeded their service life, ensuring that equipment is refreshed before maintenance costs outweigh replacement value and to minimize system downtime. This requirement is forecasted as a small business set-aside award under NAICS code 334511. The project will be managed by the Department of Homeland Security with the place of performance located in Washington, District of Columbia.

Search, Detection, Navigation, Guidance, Aeronautical, and Nautical System and Instrument Manufacturing

POSTED

about 2 months ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS