Cybersecurity and Infrastructure Security Agency

Agency facts

Acronym
Sub-tier code
7061
Organization
Contract obligations
$1,416,105,383 In FY2025

Agency codes and contract spending come from SAM.gov/FPDS.

Contract obligations by fiscal year

Fiscal year Obligated
FY2027 To date $11,992,415
FY2026 $1,606,811,662
FY2025 $1,416,105,383
FY2024 $1,624,925,178
FY2023 $1,667,573,239

Top contractors by obligations

Rank Contractor Obligated, FY2026–FY2027 Share
1 Caci, Inc. - Federal $296,535,102
2 ECS Federal, LLC $195,350,407
3 Booz Allen Hamilton Inc. $185,775,322
4 CGI Federal Inc. $128,005,611
5 Miracle Systems LLC $86,702,949
6 Amazon Web Services, Inc. $83,417,226
7 Sev1Tech, LLC $77,957,592
8 Caci Nss, LLC $63,282,054
9 Four Points Technology, L.L.C. $40,256,666
10 The Mitre Corporation $37,156,528

Top contract vehicles by obligations

Rank Vehicle Obligated, FY2026–FY2027 Share
1 Alliant II GWAC run by GSA · 10 contractors $878,036,270
2 Multiple Award Schedule (MAS) GSA Schedule run by GSA · 49 contractors $308,278,810
3 One Acquisition Solution for Integrated Services (OASIS) IDIQ run by GSA · 3 contractors $90,275,211
4 Solutions for Enterprise Wide Procurement V (SEWP V) GWAC run by NASA · 16 contractors $70,417,390
5 One Acquisition Solution for Integrated Services - Small Business (OASIS SB) IDIQ run by GSA · 14 contractors $21,715,724
6 Chief Information Officer - Solutions and Partners 3 (CIO-SP3) GWAC run by HHS · 1 contractor $21,692,064
7 8(a) STARS III (STARS III) GWAC run by GSA · 8 contractors $14,972,945
8 OASIS+ WOSB IDIQ IDIQ run by GSA · 3 contractors $14,240,025
9 One Acquisition Solution for Integrated Services Plus - Unrestricted (OASIS+ Unrestricted) IDIQ run by GSA · 1 contractor $12,322,380
10 Human Capital and Training Solutions (HCaTS) IDIQ run by GSA · 4 contractors $10,039,715

10 of 19 vehicles listed here. See the rest on GovTribe.

Contracting staff

About this agency

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) is a civilian sub-agency within DHS that procures and funds cybersecurity infrastructure, threat intelligence, vulnerability research, and critical infrastructure protection services and programs. CISA operates as both a contracting customer and a grant maker, funding defensive capabilities, awareness initiatives, and resilience work across federal, state, local, tribal, and private-sector entities.

CISA's contract portfolio totals 1,440 awards across 545 distinct prime contractors, with combined potential value of $19.61 billion and $12.16 billion obligated. Contract activity over the last five years shows 140 awards in 2022, 126 in 2023, 141 in 2024, 63 in 2025, and 98 year-to-date in 2026. Among recent awardees, The MITRE Corporation leads by award count with 36 awards worth $421.4 million in combined potential value over the last five years, followed by Moi, Inc. (24 awards, $11.4 million) and CACI NSS, LLC (17 awards, $351 million). By dollar value, Booz Allen Hamilton Inc. dominates with $1.17 billion across 4 awards, followed by MITRE and CACI NSS. The top five primes by award count hold 19% of recent awards, and the top five by dollar value hold 10% of combined potential value, indicating a fragmented competitive landscape where a broad vendor base participates. Set-aside awards account for roughly 27% of the portfolio: 14% total small business (including 8(a), SDVOSB, WOSB, HUBZone, and EDWOSB designations), while 73% award on open competition.

CISA's grant portfolio is substantially smaller: 26 total awards to 16 distinct recipients since 2013, with $229.1 million in combined federal dollars obligated. Recent grant activity shows 3 awards in 2020, 3 in 2021, 2 in 2022, 8 in 2023, and 1 in 2024. The Center for Internet Security, Inc. holds the dominant position by federal dollars with $70 million across 1 award, followed by the Cyberspace Innovation Center, Inc. ($13.6 million, 1 award). The top five recipients by award count and top five by federal dollars together cover 55% and 39% of recent activity respectively, reflecting moderate concentration. Cooperative Agreements account for 81% of grant awards and Project Grants for 19%. The most recent grant award closed in September 2024; no grant awards have been recorded since.

No recent contract opportunities or grant opportunities are recorded in the source data.

Quick answers

What is Cybersecurity and Infrastructure Security Agency?

Cybersecurity and Infrastructure Security Agency (CISA) is part of Department of Homeland Security.

How much does Cybersecurity and Infrastructure Security Agency spend on contracts?

Contracts funded by Cybersecurity and Infrastructure Security Agency and its offices obligated $1,416,105,383 in fiscal year 2025 and $6,327,407,877 in fiscal years 2023 through 2027.

Who are Cybersecurity and Infrastructure Security Agency's largest contractors?

The contractors Cybersecurity and Infrastructure Security Agency and its offices obligated the most to in fiscal years 2026 and 2027 are Caci, Inc. - Federal ($296,535,102), ECS Federal, LLC ($195,350,407) and Booz Allen Hamilton Inc. ($185,775,322).

Which contract vehicles does Cybersecurity and Infrastructure Security Agency use most?

The contract vehicles Cybersecurity and Infrastructure Security Agency and its offices obligated the most through in fiscal years 2026 and 2027 are Alliant II ($878,036,270), Multiple Award Schedule (MAS) ($308,278,810) and One Acquisition Solution for Integrated Services (OASIS) ($90,275,211). Orders through any contract vehicle obligated $1,465,765,709 in those years, 91% of its contract obligations.

On GovTribe

See the full record

  • Federal contract awards it funded
  • IDV awards it funded
  • Federal grant awards
  • Funding analysis by contractor, NAICS and set-aside
  • Contacts at this agency
  • Ask GovTribe AI about this agency