Corelight Procurement
Past New Requirement Updated
- Agency
-
National Institutes of Health
Department of Health and Human Services
- Solicitation expected
- Estimated value
- $1,500,000 to $3,000,000
- Set-aside
- Total Small Business
Forecast facts
- Anticipated award
- NAICS code
- 513210 Software Publishers
- Points of contact
Forecast details come from HHS's procurement forecast. Agencies' dates and values are estimates.
About this forecast
The National Institutes of Health (NIH), within the Department of Health and Human Services, is forecasting a new requirement under the Corelight Procurement for network protection capabilities, classified under NAICS 513210 (Software Publishers) and set aside for Total Small Business. The estimated solicitation release date is June 1, 2026, and the estimated award date is July 1, 2026. The acquisition supports NIH's compliance with the Federal Information Security Modernization Act (FISMA 2014) and the Privacy Act of 1974, and serves as a core component of NIH's defense-in-depth capability for its 27 Institutes and Centers.
The estimated award value range is $1.5 million to $3 million. The source cites approximately 800 security incidents per month requiring network forensic analysis and automatic blocking of over approximately 40,000 connections per month to 1,200 confirmed malicious IP addresses. Contacts are Sara Mattix, Division Director, Infrastructure & Data Protection (sara.mattix@nih.gov, 301-480-4006), and Justin Borden, Contract Specialist (justin.borden@nih.gov, +13014809887).
Forecast text
This acquisition is required for the NIH's compliance with the Federal Information Security Modernization Act (FISMA 2014) and Privacy Act of 1974. This acquisition provides critical network protection capabilities and is a core component of the NIH's defense in depth capability, safeguarding NIH critical systems and the NIH's 27 Institutes and Centers. Disapproval of this acquisition will significantly degrade the NIH's Investigatory and Remediation Capabilities related to Cybersecurity Incidents including network forensic analysis in support of the approximately 800 security incidents per month and detection of malicious activity supporting the automatic blocking of over approximately 40,000 connections to 1200 confirmed malicious IP addresses per month. Without this critical capability, the NIH will have greatly reduced capability to detect malicious threat actors attempting to compromise systems on the network, risking the integrity of research data, the availability of critical life, health, and safety systems, compliance with federal regulations, and putting the organization at higher risk of a major cyber security incident or breach. Therefore, timely execution of this acquisition is imperative to uphold regulatory compliance, mitigate cybersecurity risks, and sustain institutional trust.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast