GovSprint
← Back to today

Splunk Security Information and Event Management

Department of Homeland Security · Transportation Security Administration · ACQ03 Enterprise Information Technology Acquisition Division
Account requiredWhy it scored this way

Every reason behind the verdict rather than the headline one — which of your certifications match, how much runway is left, whether the work is your size, and what we would need to know to sharpen it.

Start free for 14 daysSign in

Forecast detail

Not yet solicited

The expected date passed 21 days ago. It may already be on the street — check SAM.gov before doing anything else.

Solicitation expected
July 30, 2026
Anticipated award
September 30, 2026 · Q4 2026
Estimated value
$20M to $50M
Period of performance
September 30, 2026 to September 29, 2030
Contract type
Firm Fixed Price
Expected vehicle
NASA SEWP V
Competition
Follow-on to Existing Contract
Incumbent: THUNDERCAT TECHNOLOGY LLC · 70T03022F7667N065
This is a recompete. The agency has named who holds the work today, which tells you what you are displacing and what to ask about.

Who to talk to

At the forecast stage there is no active procurement, so contact is welcome rather than restricted — this is the one window where a direct conversation is straightforwardly appropriate.

The Small Business Specialist is usually the better first call. Helping firms like yours find and compete for this work is their actual job, and they can tell you whether a set-aside is still under consideration.

Published by the agency in its acquisition forecast, last updated June 30, 2026. Forecast entries are plans, not commitments — dates slip and requirements get cancelled, restructured or absorbed into another buy.

Requirement details

Solicitation number
F2026072532
Notice type
Forecast
NAICS
541519 — Other Computer Related Services
Set-aside
Unrestricted
Posted
2026-06-30
Place of performance
Herndon, VA

Market intelligence

Account requiredWho wins this work, and what it pays

Comparable awards under NAICS 541519 at this agency — the incumbent, what they were paid, when their period of performance ends, and the real pricing distribution rather than the headline number. From public federal award records.

Start free for 14 daysSign in

Statement of work, as posted

TSA has a requirement for Splunk Enterprise and Splunk Enterprise Security software licenses and subscriptions, including associated maintenance and support, professional support services, and TrackMe software licenses. The additional software product is a mandatory component for the Security Information and Event Management (SIEM) system to operate at peak capability and is fully interoperable with the existing Splunk environment. These products are needed to ensure adequate licensing is in place to support the increase of daily ingestion rates of security event data, ensuring that the existing Security Information and Event Management (SIEM) system is configured properly and optimized to operate at peak performance to ingest and process security event data into actionable cyber security alerts and to support incident remediation activities, and to provide for the needed expansion and development of the SIEM system.

Contact

Point of contact
Brian Thompson
Role
Requirements owner
Email
brian.thompson1@tsa.dhs.gov
Secondary
carlos.vallejo@tsa.dhs.gov
Introduce your firm

A short introduction against this specific requirement, sent while the agency is still deciding how to buy it.

Open email
Ask about the acquisition strategy

Ask whether a set-aside is being considered, which vehicle is planned, and whether the agency wants industry input. This is the question that can still change the outcome.

Open email
Ask to be notified on release

Ask to be added to any industry-day or notification list so you are not relying on catching the posting yourself.

Open email

Opens in your own mail client, addressed and with a subject line — you write the message. GovSprint never sends anything on your behalf.

Emails open in your mail client and are sent from your address, so the reply comes back to you and the exchange stays yours. Confirm the correct channel and any question deadline on the notice before sending — many solicitations require questions in a specific way.

View in the DHS forecast