Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 16 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Software Cybersecurity & STIG Compliance Services

Active

Federal

Response Deadline10/02/2027, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract, titled Software Cybersecurity and STIG Compliance Services, is a total small business set-aside under NAICS 541519 for the Department of Defense, specifically supporting the FA2330 Arspc Mgnt Systms Aflcmc/hba. The contractor is responsible for providing cybersecurity auditing and compliance services for prime contractors on U.S. Air Force software projects. Key deliverables include the generation of Software Bill of Materials, the execution of SAST and DAST scanning, and the verification of DISA Application Security Technical Implementation Guides compliance. The technical scope requires the use of FIPS 140-2/3 validated cryptographic modules aligned with the Risk Management Framework to ensure secure operations. The final output consists of a comprehensive Cybersecurity Package containing the SBOM and completed STIG checklists. The opportunity was posted on September 2, 2026, with a response deadline of October 2, 2027.

General Info

DoD subcontract for software cybersecurity auditing, STIG compliance, and SBOM generation services.

Agency

Department Of Defense → FA2330 Arspc Mgnt Systms Aflcmc/hbaView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

MA

Set-Aside

SBA

Documents

This scope was carved out of FA2330A1.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Meteorological and Weather Forecasting Software

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedSep 2

subcontract

Response DeadlineOct 2

Submission deadline

Response Deadline

10/02/2027, 09:00:00 PM UTCin about 1 year

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → FA2330 Arspc Mgnt Systms Aflcmc/hba

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → FA2330 Arspc Mgnt Systms Aflcmc/hba

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs cybersecurity auditing and compliance for prime contractors on U.S. Air Force software projects. Generates Software Bill of Materials (SBOM), performs SAST and DAST scanning, and verifies DISA Application Security Technical Implementation Guides (STIGs) compliance. Utilizes FIPS 140-2/3 validated cryptographic modules aligned with the Risk Management Framework (RMF). Delivers a Cybersecurity Package including SBOM and STIG checklists.

Similar Contracts

Same NAICS industry code

Sources Sought: Social Media Monitoring

Solicitation # PCA-NICHD-09419_Sources

The Division of Population Health Research within the National Institutes of Health is issuing a Sources Sought notice to identify qualified vendors capable of providing automated, large-scale social media data collection and management services. The objective is to acquire public data from platforms such as Instagram, Facebook, and X to support research on food, nutrition, eating behaviors, and public sentiment. The required solution must be scalable, allowing for the extraction of millions of text, image, and video records to support advanced AI, machine learning, and Large Language Model workflows. Key technical requirements include automated scheduling for longitudinal monitoring, structured data exports in formats like JSON or CSV, and robust data quality controls such as deduplication and validation. Interested parties must provide their organization's UEI, business size, a detailed capabilities statement, and a rough order of magnitude for 12 months of services. This notice is intended for market research to determine the method of acquisition and does not constitute a formal solicitation or a commitment to award a contract.

National Institutes Of Health Olao

POSTED

about 17 hours ago

DEADLINE

VANCHCS Customizable Communication Platform Digital Signage

Solicitation # 36C26126Q1125

The Department of Veterans Affairs Network Contracting Office 21 is soliciting quotations for a customizable communication platform, specifically PatientPoint or an equivalent digital signage solution, for the VA Northern California Healthcare System. This opportunity, identified by solicitation number 36C26126Q1125, is designated as a set-aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 541519. The project will be performed in Mather, California. Following the initial solicitation, amendment 0001 extended the quotation submission deadline to September 4, 2026, at 11:00 AM PDT to provide sufficient time for the agency to post answers to vendor inquiries. Amendment 0002 was subsequently issued to provide those specific answers to potential bidders. All responses must be submitted electronically to Contract Specialist Victoria Torres.

261-NETWORK Contract Office 21 (36C261)

POSTED

about 17 hours ago

DEADLINE

in about 13 hours

Palo Alto Unit 42 Public Sector Expertise on Demand Subscription

Solicitation # 2031JW26Q00082

The contract involves delivering investigative support and analysis to strengthen indicators of compromise and improve threat actor attribution by utilizing commercial, open-source, and proprietary data sources. The work focuses on identifying actors behind cyber compromises through the examination of emerging threats and vulnerabilities, with the goal of generating actionable intelligence to help the Office of the Comptroller of the Currency anticipate and neutralize associated risks. Additionally, the effort includes deep research into methods that embed threat intelligence directly into existing systems to enable proactive defense capabilities and enhance overall cybersecurity posture. This effort is structured under the Palo Alto Unit 42 Public Sector Expertise on Demand Subscription, solicited under number 2031JW26Q00082 with a response deadline of August 21, 2026. The contract, classified under NAICS code 541519, is issued by the Office of Management / CFO within the Department of the Treasury and will be performed in Washington, D.C. with no set-aside provisions. All inquiries should be directed to Marlon Holland at the provided contact information, with the opportunity to participate through the SAM.gov portal linked in the solicitation.

Office Of Management / Cfo

POSTED

about 17 hours ago

DEADLINE

Notice of Intent for NIH/NCATS (RDCRN) Pantheon Licenses and Support Renewal

Solicitation # PCA-NCATS-08266

The National Center for Advancing Translational Sciences (NCATS) intends to award a sole source, firm fixed price contract to Carahsoft Technology Corp for the renewal of Pantheon Platform Licenses and Support. This procurement is necessary to maintain the hosting, maintenance, and technical support for the Rare Diseases Clinical Research Network (RDCRN) consortia websites and the primary network site. Because the existing production environment is natively integrated into Pantheon's proprietary infrastructure, the government has determined that this specific brand is the only source capable of meeting its needs without risking operational downtime or data integrity. The contract covers a twelve month period of performance ending July 14, 2027, falling under NAICS code 541519. This action is a notice of intent and not a request for competitive quotes. The renewal ensures the continuity of critical scientific and informatics workflows by utilizing proprietary features such as Multidev environments and Autopilot automated updates, which are essential for the ongoing research support provided by NCATS.

Office Of The Assistant Secretary For Administration (asa)

POSTED

about 17 hours ago

DEADLINE

POL Security Cameras

Solicitation # Sources_Sought_Cameras

The Department of Defense, through the 18 Cons Pk agency, has issued a sources sought announcement to identify qualified firms capable of providing POL security cameras and related infrastructure. The requirement specifically focuses on Avigilon hardware, including high-resolution multi-head H5A multisensor cameras, H5A or H4-series high-resolution PTZ cameras with IR, 16TB FIPS compliant AI servers, and RM-series NVR workstations with monitors. The scope of work also encompasses all necessary hardware, cabling, labor, and installation services. This opportunity is categorized under NAICS code 541519 and will be performed in Kadena, Okinawa. Interested parties must respond by September 11, 2026. Primary coordination for this effort is managed by Nozomu Uchimura and Camden Chan.

FA5270 18 Cons Pk

POSTED

about 17 hours ago

DEADLINE

Reality Defender Platform

Solicitation # 192126VHQ4CCC0119

The Department of Homeland Security, through the Homeland Security Investigations Office of Acquisition, intends to award a single-source contract to Reality Defender for their synthetic-media detection platform. This action is being pursued under the authority of the Revolutionary FAR Overhaul, as the Contracting Officer has determined that Reality Defender is the only responsible source capable of satisfying the agency's specific requirements. While this notice is for informational purposes and is not a formal Request for Quote, interested parties may respond by providing a brief description of their experience with similar platforms. The government maintains the discretion to evaluate these responses and decide whether to compete the contract. The response deadline is September 10, 2026, and the performance location is designated as Virginia.

Investigations And Operations Support Dallas

POSTED

about 17 hours ago

DEADLINE

Material Flow System (MFS) Pilot

Solicitation # SP4701-26-Q-0206

The Defense Logistics Agency (DLA) Information Operations J62 IT Hardware Division is soliciting quotes for the Material Flow System (MFS) Pilot to be deployed at Red River in Texarkana, Texas. This is a sole-source, brand-name requirement for commercial items, specifically requesting Schweitzer Engineering Laboratories (SEL) network switches, Rockwell Automation/Allen-Bradley control platforms, and Datalogic industrial scanners. The procurement is conducted under solicitation SP4701-26-Q-0206 with a focus on maintaining the existing Authorization to Operate (ATO) and mitigating cybersecurity risks, specifically prohibiting hardware manufactured in the People's Republic of China. The contract is a firm-fixed-price award based on the lowest price technically acceptable (LPTA) criteria. Deliverables must be provided within 30 days after receipt of order to support a planned go-live date of October 5, 2026. Offerors must demonstrate the ability to meet all mandates in the Bill of Materials and Statement of Work, with submissions due by September 7, 2026. Key compliance requirements include NIST SP 800-171 for protecting controlled unclassified information, Section 508 standards for information and communication technology, and the use of the Wide Area WorkFlow (WAWF) system for electronic invoicing and payment.

Dcso Philadelphia

POSTED

about 17 hours ago

DEADLINE

Articulate 360 Software License Supply

Naval Surface Warfare Center

POSTED

DEADLINE

HHS/CDC Security and Section 508 Compliance SupportThis subcontract opportunity with the CDC Office of Acquisition Services focuses on providing technical documentation and auditing support for prime contractors on CDC/NIOSH projects. The primary objective is to ensure strict adherence to federal security and accessibility mandates through the development of IT Security Plans and the validation of the HHS Section 508 Accessibility Conformance Checklist and VPAT. Key deliverables include compliance reports, Accessibility Conformance Reports, and comprehensive IT Security Plans. The project requires specialized expertise in HHS/CDC security requirements and ICT accessibility standards, including the use of screen readers for inspection testing. This is a total small business set-aside under NAICS code 541519, with the place of performance located in Atlanta, Georgia. Interested parties must respond by September 14, 2026.

CDC Office Of Acquisition Services

POSTED

DEADLINE

Audiovisual (AV) System Integration & Installation

247-NETWORK Contract Office 7 (36C247)

POSTED

DEADLINE

Biometric Sensor Installation and Setup

W6QM Micc-Ft Riley

POSTED

DEADLINE

Interface Software Technical Support & Maintenance

249-NETWORK Contract Office 9 (36C249)

POSTED

DEADLINE

More opportunities from Department Of Defense → FA2330 Arspc Mgnt Systms Aflcmc/hba

Same awarding agency

Sources Sought/RFI - AFLCMC/ESAN FMS Brazil Radar Modernization

Solicitation # A068794

The Aerospace Management Foreign Military Sales Branch is conducting a voluntary Sources Sought and Request for Information to identify production-ready, commercial radar solutions for the Brazilian Air Force. The primary goal is to replace existing L3Harris GCA-2000 and PAR-2000 systems with modernized Ground Control Approach and Precision Approach Radar capabilities. The government is seeking highly mobile systems capable of being transported via KC-390 aircraft, with specific performance requirements for surveillance range, altitude coverage, and precision landing accuracy. Interested parties must provide detailed information regarding their company status, technical capabilities, past performance with navigational aids, and estimated costs and delivery schedules. Responses are due by October 8, 2026, and should include evidence of the system's ability to meet FAA/ICAO certification standards. This notice is for market research and planning purposes only and does not constitute a formal request for proposal or a commitment to award a contract.

Search, Detection, Navigation, Guidance, Aeronautical, and Nautical System and Instrument Manufacturing

POSTED

about 17 hours ago

DEADLINE

in about 1 month

IDS5 Software Licensing

Solicitation # FA233026QB001

Solicitation number FA233026QB001 is a Request for Quotation issued by the Department of Defense under the FA2330 Arspc Mgnt Systms Aflcmc/hba office. The contract focuses on the procurement of Integrated Information Display and Dissemination System Model Five software licenses along with associated maintenance and support services to support the Fixed Based Weather Systems program. This acquisition is categorized under NAICS code 513210 and is not set aside for small business concerns. The performance for this contract will take place in Rancho Cordova, California. Interested parties must submit their offers by the response deadline of September 9, 2026. This announcement serves as the sole solicitation for the commercial products and services required, and no separate written solicitation will be issued.

Software Publishers

POSTED

about 17 hours ago

DEADLINE

Software Technical Writing & DocumentationThis subcontract, titled Software Technical Writing and Documentation, is issued by the Department of Defense under the FA2330 Arspc Mgnt Systms Aflcmc/hba agency. The project focuses on the authoring and production of technical manuals for prime contractors working on U.S. Air Force meteorological software. The selected provider will be responsible for developing a complete suite of documentation, including technical installation manuals, system maintainer administration guides, and end-user manuals for weather forecasting personnel, all adhering to standard DoD technical documentation formats. The opportunity is designated as a total Small Business Set Aside under NAICS code 541611. It was posted on September 2, 2026, with a response deadline of October 2, 2027.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 1 year

Weather Radar Analysis Software ProviderThis small business set-aside subcontract with the Department of Defense, specifically the FA2330 Arspc Mgnt Systms Aflcmc/hba agency, involves the supply and development of specialized meteorological software for U.S. Air Force weather forecasting projects. The provider is responsible for creating software binaries compatible with Army Gold Disc and Standard Desktop Configuration environments that operate under standard user accounts, while ensuring strict compliance with WSR-88D Interface Control Document standards. The scope of work includes the delivery of software installation binaries and 670 perpetual license keys. This opportunity falls under NAICS code 511210 and was posted on September 2, 2026, with a response deadline of October 2, 2027.

Software Publishers

POSTED

DEADLINE

in about 1 year

Meteorological and Weather Forecasting Software

Solicitation # FA2330A1

The Department of Defense, specifically the FA2330 Arspc Mgnt Systms Aflcmc/hba office, has issued a sources sought request for meteorological and weather forecasting software. This opportunity is designated as a total small business set aside under NAICS code 541511. Interested parties must submit their responses by October 2, 2027. The primary point of contact for this request is Captain Christopher Thier, and the office is located at Hanscom AFB in Massachusetts. This action is currently an RFI only to determine market capabilities.

Custom Computer Programming Services

POSTED

DEADLINE

in about 1 year

Tactical Air Traffic Control (ATC) Command and Control (C2) System (TACOS)

Solicitation # FA2330_RFI_TACOS

The Air Force Life Cycle Management Center's Electronic Systems Directorate is issuing this Request for Information to conduct market research for the potential future acquisition of a Tactical Air Traffic Control (ATC) Command and Control (C2) System, known as TACOS. This system is intended to replace legacy expeditionary ATC systems that are currently ill-suited for modern multi-domain warfare due to excessive size, weight, power, and personnel footprints, as well as vulnerability to kinetic and non-kinetic threats. TACOS is envisioned as a modular, scalable, and highly interoperable platform designed to support Agile Combat Employment in contested, degraded, or operationally-limited environments. It must serve as a multi-level secure data fusion engine capable of integrating feeds from battle management, unmanned aircraft systems, and weather networks to provide a unified airspace awareness picture. Key technical requirements for the TACOS solution include a Modular Open Systems Approach to allow for rapid hardware and software decoupling, a compact footprint transportable on a single 463L pallet, and the ability to be deployed by a small team within hours. The system must maintain high operational availability and be hardened against electromagnetic pulses and electronic warfare while remaining operable by personnel in MOPP Level 4 gear. Essential capabilities include automated safety alerts such as Minimum Safe Altitude Warning and Conflict Alerts, compliance with FAA and EUROCONTROL standards, and the ability to integrate next-generation platforms like Collaborative Combat Aircraft. This RFI is for planning purposes only and does not constitute a solicitation or a commitment to award a contract. Participation is limited to United States-registered contractors, with responses due by September 11, 2026.

Search, Detection, Navigation, Guidance, Aeronautical, and Nautical System and Instrument Manufacturing

POSTED

DEADLINE