CISA Halts Billion-Dollar Cybersecurity Deal, Shakes Up Digital Defense Strategy

By Dan Evert, CCNP   Published: 05/15/25   Updated: 10/30/26   3 min read

CISA Halts Billion-Dollar Cybersecurity Deal, Shakes Up Digital Defense Strategy

At a glance:

The U.S. Department of Homeland Security has canceled a $2.4 billion cybersecurity contract that supported the Cybersecurity and Infrastructure Security Agency (CISA). The contract, known as Agile Cybersecurity Technical Solutions (ACTS), had been awarded to Leidos. The termination took effect on May 8, 2025, and it has started a debate about where federal cyber spending goes next.

Why DHS pulled ACTS

ACTS was meant to give CISA technical and engineering support for its cyber defense work. A rival bidder, Nightwing, had protested the award. DHS told the court that its IT and cybersecurity requirements had changed because of organizational changes and new priorities, and that the cancellation was not because of the protest. Nightwing dropped its protest on May 12. DHS said it would start new acquisition planning instead of re-awarding the contract.

Mixed reactions

Opinion is split. Some worry the cancellation will slow work that was under way and leave gaps in CISA’s capabilities while the agency shrinks. Others see a chance to rebuild the agency’s contracts around what it actually needs now.

Effects on contractors

The decision raises questions about how CISA will work with private contractors. ACTS was one of the agency’s largest planned support vehicles. Companies that bid on it, and those hoping to subcontract, now have to wait for whatever replaces it.

What comes next

The cancellation arrives as CISA faces staff cuts and a reorganization. How it fills the gap will show what the agency’s priorities have become. Some observers see the moment as a chance to align new contracts with the threats CISA now faces.

Leaner contracts ahead

Federal technology contracts may get smaller and more targeted after this. That could bring better use of money, or it could leave work undone. Contractors should watch DHS procurement notices for the new acquisition plan.

What to watch

DHS’s decision to scrap ACTS resets one of CISA’s biggest support contracts. The next steps will show whether the agency can buy what it needs while it shrinks, and how quickly it can do so.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Dan Evert, CCNP

Dan Evert is a self proclaimed Router Jockey. Dan got heavily involved in networking right out of high school and has never looked back! Dan is giving back by working with high school students to get them involved and interested in Networking and Security.