Software vendors that want to sell into the Department of Homeland Security now face a single front door. DHS has set up a $2.7 billion ceiling blanket purchase agreement with Carahsoft Technology Corp. for enterprise software licensing, giving 14 listed components one vehicle for buying licenses, cloud subscriptions and support from more than 70 manufacturers. The agreement, number 70RTAC26A00000011, runs from July 20, 2026, through July 19, 2031, according to Carahsoft's contract page.
FedScoop reported on Oct. 22 that DHS issued a sole-source justification this week for the nearly $2.7 billion agreement. Carahsoft is a sole distributor for the 70-plus original equipment manufacturers available under the BPA, all of them drawn from Carahsoft's General Services Administration Multiple Award Schedule contract.
What the $2.7B Carahsoft BPA Covers
The scope is broad but bounded. According to FedScoop's account of the justification document, DHS will acquire off-the-shelf software licenses, software-as-a-service and cloud-based platform subscriptions, associated maintenance and technical support, and limited related professional services. The tools span data analytics, cybersecurity, automation and access management.
Carahsoft describes the vehicle in wider terms. Its contract page says the BPA "provides a standardized, enterprise-wide approach for acquiring software, cloud, cybersecurity, artificial intelligence (AI), data, and other emerging technologies." The company says components will order through "a streamlined, GSA-based ordering process," with Carahsoft helping program offices identify eligible products, support quotes and coordinate vendor onboarding when new capabilities are needed.
The manufacturer roster on Carahsoft's page leans heavily toward security and identity tooling. It includes Okta, SailPoint Technologies, Delinea, Radiant Logic, Rapid7, Qualys, Wiz, Recorded Future, Corelight and Trellix, alongside platform and productivity names such as ServiceNow, GitLab, Elastic, Dynatrace, Atlassian, Smartsheet, Qlik and VMware.
Which DHS Components Can Order
Carahsoft lists the eligible ordering components as U.S. Customs and Border Protection, the Cybersecurity and Infrastructure Security Agency, the Countering Weapons of Mass Destruction Office, DHS headquarters offices, the Office of Intelligence and Analysis, the Management Directorate, the Science and Technology Directorate, the Federal Emergency Management Agency, the Federal Law Enforcement Training Centers, U.S. Immigration and Customs Enforcement, the Transportation Security Administration, the U.S. Coast Guard, U.S. Citizenship and Immigration Services and the U.S. Secret Service.
That list covers nearly every operational arm of the department. Components that buy the same software through separate orders on different vehicles can now pull from one agreement with common terms.
Why DHS Wants One Software Vehicle
DHS frames the agreement as an efficiency and visibility play. "A single enterprise BPA reduces procurement cycle times, streamlines order processing, and lowers administrative burden compared to multiple one-off orders across different vehicles," DHS said in the document, as quoted by FedScoop.
The department also tied the agreement to governance. "The BPA enables DHS to standardize key software platforms, track usage, manage renewals, and enforce consistent terms across DHS Components, reducing duplication and enhancing security and interoperability," the document states.
FedScoop reported that DHS sees the contract as a scalable, repeatable mechanism for managing renewals and upgrades, and that it supports the Office of the CIO's goal of consolidating purchasing and enhancing visibility. On price, the agency expects multi-vendor and volume-based discount structures and will seek additional discounts "as appropriate."
The visibility argument matters as much as the discount argument. When each component buys its own licenses, headquarters struggles to see how many seats of a given product the department owns, when they renew, or whether two components pay for overlapping tools. Routing purchases through one BPA with one contract number gives the CIO's office a single data trail.
How the Deal Fits DHS's Cumulus and Biometrics Push
The Carahsoft agreement is the latest step in a broader centralization drive at DHS this year. Under the Cumulus name, the department tapped cloud service providers at an agencywide level, rather than component by component, for the first time. FedScoop reported that DHS predicted the centralized cloud strategy would save at least $142 million in its first year of execution.
DHS has also consolidated its buying of biometric capture devices. FedScoop reported that the department is leading federal procurement with indefinite delivery, indefinite quantity contracts carrying a combined ceiling of more than $440 million, most of it aimed at multimodal devices, in an effort to avoid inconsistencies and duplicative costs.
Taken together, the three efforts show a department moving away from component-level purchasing for commodity technology. Cloud hosting, biometric hardware and now commercial software licensing each have a department-wide vehicle.
What It Means for Contractors
For software manufacturers, the immediate question is whether they appear on Carahsoft's DHS roster. Companies on the list gain a pre-negotiated path into the 14 listed components. Companies off the list will likely need to work through Carahsoft's onboarding process, which the company says it coordinates "when new capabilities are needed," or compete for the share of DHS spending that still flows through other vehicles.
Resellers and value-added partners should expect fewer standalone software buys at the component level. Orders placed as one-off purchases across different vehicles are the specific target of the consolidation, according to DHS's own language. Firms whose DHS revenue depends on brokering individual license renewals face the most direct pressure.
Integrators and services firms should read the scope carefully. The BPA allows only "limited related professional services," per FedScoop's summary of the document, so large implementation and integration work appears to remain outside it. Those firms may find new demand in deploying and integrating platforms that DHS standardizes through the vehicle.
The discount language also signals what DHS will ask of manufacturers. Volume-based and multi-vendor discount structures, plus an explicit plan to seek additional discounts, suggest vendors should expect price pressure at renewal as DHS gains department-wide visibility into its spending.
The five-year period of performance, ending July 19, 2031, sets a long horizon. Software vendors that are not on the roster today have time to pursue onboarding, but the department's renewals and upgrades are likely to migrate to the BPA well before then.
