Splunk License Renewal Procurement
Past New Requirement Updated
- Agency
-
National Institutes of Health
Department of Health and Human Services
- Solicitation expected
- Estimated value
- $20,000,000 to $50,000,000
- Set-aside
- No set-aside
Forecast facts
- Anticipated award
- NAICS code
- 513210 Software Publishers
- Points of contact
Forecast details come from HHS's procurement forecast. Agencies' dates and values are estimates.
About this forecast
The National Institutes of Health is forecasting a new requirement for a Splunk license renewal, an enterprise cybersecurity logging and monitoring solution for its 27 Institutes and Centers, with an estimated solicitation release date and award date of July 1, 2026. The acquisition supports NIH compliance with the Privacy Act of 1974, FISMA 2014, and OMB M-21-31, as well as CISA's Continuous Diagnostics and Mitigation (CDM) program. The solution collects an average of 17TB of data per day and retains nearly 4PB of data required for statutory compliance.
The forecast, posted November 14, 2026, carries an estimated award value range of $20 million to $50 million, no set-aside, and NAICS 513210 (Software Publishers). The logging and monitoring data supports approximately 800 security and privacy incident investigations per month. Points of contact are Sara Mattix, Division Director, Infrastructure & Data Protection (sara.mattix@nih.gov, 301-480-4006), and Justin Borden, Contract Specialist (justin.borden@nih.gov, +1 301-480-9887).
Forecast text
This acquisition is required for the NIH's compliance with the Privacy Act of 1974, Federal Information Security Modernization Act (FISMA 2014), OMB M-21-31, and support of CISA's Continuous Diagnostics and Mitigation (CDM) program. This acquisition is a core component of the NIH's enterprise cybersecurity logging and monitoring solution for the NIH's 27 Institutes and Centers, collecting an average of 17TB of data per day and retaining nearly 4PB of data required for statutory compliance. Disapproval of this acquisition would significantly inhibit the collection and storage of cybersecurity-related data and logs used to support the approximately 800 security and privacy incident investigations per month. Without adequate log data and monitoring capabilities, the NIH, HHS, and DHS will lose visibility into malicious activity actively occurring on NIH systems and miss indicators of broader threats, putting the agency at significant risk of major cybersecurity incidents and breaches. Therefore, timely execution of this acquisition is imperative to uphold regulatory compliance, mitigate cybersecurity risks, and sustain institutional trust.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast