DLH Holdings Secured $19.1 Million NIH Cybersecurity Contract
The firm will manage risk, cloud security, and AI oversight for the health agency over a three-year period.
Updated on Sept. 28, 2026 in Cybersecurity
Live Poll
Do you trust private companies to manage the cybersecurity of sensitive government research data?
DLH Holdings has been awarded a $19.1 million task order to provide cybersecurity operations and risk management support to the National Institutes of Health. The contract covers a base period with options extending up to three years.
Why it matters
This contract supports the agency's broader initiatives to modernize cloud infrastructure and adopt zero-trust security architectures. It also underscores a growing focus on integrating responsible artificial intelligence oversight into government IT operations.
The engagement covers a three-year term and includes security assessments, vulnerability management, and incident response. These services are designed to address NIH requirements for automation and zero-trust, a security model that requires strict identity verification for every user and device.
The players
DLH Holdings
A government services contractor that provides digital transformation, cybersecurity, and health systems support to federal agencies.
National Institutes of Health
The primary federal agency responsible for medical research, currently undergoing broad cloud modernization and security upgrades.
The details
DLH will implement risk management frameworks across the NIH enterprise to mitigate operational threats. The scope of work includes support for responsible AI, which involves developing systems to ensure automated tools operate within defined safety and ethics parameters. The company will coordinate with other service providers to deliver these technical safeguards.
Timeline
September 16, 2026: DLH secured a $43.7 million contract from the National Heart, Lung, and Blood Institute.
September 28, 2026: DLH officially announced the $19.1 million NIH task order.
The Tech Race
This award follows the trajectory of federal agencies seeking private-sector assistance to scale specialized cybersecurity and AI compliance frameworks. The contract aligns with the National Institutes of Health cloud modernization initiative as the agency transitions away from legacy systems.
While the services are enterprise-focused, this contract dictates the security standards for data handled by the health agency. It aims to accelerate the deployment of automated workflows, though the timeline for specific service implementation remains dependent on the three-year contract cycle.
The takeaway
The firm now holds multiple high-value awards, with its market position and operational growth linked to its performance on federal digital mandates. Investors and industry observers can monitor future contract disclosures to see how these service-delivery partnerships influence the company's financial results.
Further reading
For broader trends in federal digital defense, read more in Cybersecurity.
Live Poll
Do you trust private companies to manage the cybersecurity of sensitive government research data?
