Splunk Security Information and Event Management
Past Recompete Updated
- Agency
-
Transportation Security Administration
Department of Homeland Security
- Solicitation expected
- Estimated value
- $20,000,000 to $50,000,000
- Set-aside
- No set-aside
Forecast facts
- Anticipated award
- Through
- Acquisition strategy
- Follow-on to Existing Contract
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Herndon, VA
- Forecast number
- F2026072532
- Points of contact
-
- Carlos Vallejo carlos.vallejo@tsa.dhs.gov (571) 294-5666
- Brian Thompson brian.thompson1@tsa.dhs.gov (703) 563-3476
Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.
About this forecast
The Transportation Security Administration, procuring through NASA SEWP V, is recompeting a follow-on contract for Splunk Enterprise and Splunk Enterprise Security software licenses and subscriptions, maintenance and support, professional services, and TrackMe software licenses to support its Security Information and Event Management system. The requirement encompasses expanding daily ingestion rates of security event data, configuring and optimizing the SIEM system to process events into actionable cyber security alerts, and supporting incident remediation and system expansion and development activities. The solicitation released July 30, 2026, with award anticipated September 30, 2026.
The estimated award value ranges from $20 million to $50 million under a firm fixed price contract covering a performance period from September 30, 2026 through September 29, 2030. Place of performance is Herndon, Virginia. For technical and requirements inquiries, contact Brian Thompson, Supervisory Program Specialist, at brian.thompson1@tsa.dhs.gov or (703) 563-3476; the alternate contact is Carlos Vallejo, Threat and Vulnerability Engineering, at carlos.vallejo@tsa.dhs.gov or (571) 294-5666.
Forecast text
TSA has a requirement for Splunk Enterprise and Splunk Enterprise Security software licenses and subscriptions, including associated maintenance and support, professional support services, and TrackMe software licenses. The additional software product is a mandatory component for the Security Information and Event Management (SIEM) system to operate at peak capability and is fully interoperable with the existing Splunk environment. These products are needed to ensure adequate licensing is in place to support the increase of daily ingestion rates of security event data, ensuring that the existing Security Information and Event Management (SIEM) system is configured properly and optimized to operate at peak performance to ingest and process security event data into actionable cyber security alerts and to support incident remediation activities, and to provide for the needed expansion and development of the SIEM system.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast