Trustwave - DBProtect Procurement
Past New Requirement Updated
- Agency
-
National Institutes of Health
Department of Health and Human Services
- Solicitation expected
- Estimated value
- $250,000 to $700,000
- Set-aside
- Total Small Business
Forecast facts
- Anticipated award
- NAICS code
- 513210 Software Publishers
- Points of contact
Forecast details come from HHS's procurement forecast. Agencies' dates and values are estimates.
About this forecast
The National Institutes of Health plans to procure Trustwave DBProtect tooling for enterprise vulnerability management, with an estimated solicitation release date and an estimated award date of June 1, 2026. The new requirement supports NIH compliance with the Federal Information Security Modernization Act (FISMA 2014) and CISA's Binding Operational Directives and Emergency Directives, and the tooling scans NIH databases to detect vulnerabilities and insecure configurations across the agency's 27 Institutes and Centers.
The estimated award value range is $250,000 to $700,000 under NAICS 513210 (Software Publishers), with a Total Small Business set-aside. Contract Specialist Justin Borden (justin.borden@nih.gov, +13014809887) and Division Director, Infrastructure & Data Protection, Sara Mattix (sara.mattix@nih.gov, 301-480-4006) are the points of contact.
Forecast text
This acquisition is required for the NIH's compliance with the Federal Information Security Modernization Act (FISMA 2014) and CISA's compulsory Binding Operational Directives and Emergency Directives. This acquisition is a core component of the NIH's enterprise vulnerability management solution for the NIH's 27 Institutes and Centers. Tooling provided by this contract conducts scanning of NIH databases to detect vulnerabilities and insecure configurations. By identifying vulnerabilities that pose significant risks, this vulnerability management capability is essential to protecting NIH against persistent and increasingly sophisticated malicious cyber campaigns that threaten the public sector. Disapproval of this acquisition will significantly degrade NIH's detection and monitoring of cybersecurity vulnerabilities and weaknesses, putting the agency at significant risk of major cybersecurity incidents, breaches, and heightened scrutiny from OMB and Congress, impacting the NIH's operational integrity and reputation. Therefore, timely execution of this acquisition is imperative to uphold regulatory compliance, mitigate cybersecurity risks, and sustain institutional trust.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast