DHS taps dataset of baggage images to improve TSA scans

Overview

DHS (Department of Homeland Security) Science & Technology Directorate (S&T) has contracted through the Silicon Valley Innovation Program (SVIP) to develop a synthetic X‑ray baggage image dataset intended to improve TSA screening. That work supports TSA’s Gold+ program, which seeks public‑private partnerships to deliver turnkey security screening solutions — including technology, maintenance, and workforce management — to airports on a voluntary opt‑in basis. The effort signals a shift toward greater private‑sector involvement in airport security operations and opens new contracting opportunities in AI, machine learning, synthetic data generation, computer vision, security technology, and screening and facilities support services. Contractors with strengths in dataset generation, model development, cloud hosting, and operational screening services should take early steps to position for solicitations and teaming. Action is needed now to align capabilities, document compliance readiness (notably around NIST 800‑171, FedRAMP (Federal Risk and Authorization Management Program), and the SAFETY Act as surfaced), and accelerate capture activity against forthcoming opportunities from DHS, TSA, and S&T. See the Winning Federal Contracts Guide (/insights/winning-federal-contracts) for capture fundamentals and related topics.

Immediate Actions (This Week)

[ ] Monitor for the official solicitation or follow‑on announcement from DHS S&T, TSA, or SVIP and subscribe to agency notices.
[ ] Map your core capabilities (synthetic data generation, computer vision/AI, screening services, facilities support) to the market segments named in the event to identify primary pursuit threads.
[ ] Inventory current compliance posture against the named compliance surfaces (NIST 800‑171, FedRAMP, SAFETY Act) and flag gaps that would block work with sensitive datasets or cloud-hosted models.
[ ] Update past performance summaries and create 1‑page capability statements tailored to synthetic X‑ray data and screening solutions for rapid distribution to potential teammates and primes.
[ ] Identify internal stakeholders (technical lead, security/compliance lead, capture lead) and schedule a rapid capture kickoff meeting.

Short-Term Actions (30 Days)

[ ] Draft a lightweight technical approach for how your team would develop, validate, and operationalize synthetic X‑ray datasets and associated AI models, including data provenance and privacy considerations.
[ ] Pull together a teaming plan (primes, subs, vendors, academic partners) and begin outreach to build a capture consortium with complementary capabilities in AI, maintenance, and workforce management.
[ ] Prepare a compliance remediation plan for addressing any high‑priority items from your NIST 800‑171 and FedRAMP assessments; identify certificate/authorization paths if cloud hosting is required.
[ ] Create a risk register focused on insider risk, dataset bias, explainability, and operational reliability for security‑screening use cases.

Long-Term Actions (90+ Days)

[ ] Mature a prototype or demonstration (technical, procedural, or pilot) showing synthetic dataset generation and model performance on representative screening tasks for use in briefings and past performance narratives.
[ ] Complete required FedRAMP or equivalent cloud authorization steps if you will host models or datasets in the cloud — or document how you will interoperate with FedRAMP‑authorized environments.
[ ] Evaluate SAFETY Act eligibility and prepare documentation needed for any seller protection application if your solution would be claimed under that regime.
[ ] Finalize capture materials (compliance matrix, staffing plan, transition plan, cost/price model) and run a bid/no‑bid decision with updated match scoring from your opportunity pipeline.

Compliance Checklist

[ ] NIST 800‑171 — Assess and remediate controls applicable to handling controlled unclassified information (CUI (Controlled Unclassified Information)) in datasets and model development environments.
[ ] FedRAMP — Determine whether cloud hosting or SaaS components require FedRAMP authorization and plan for authorization pathways or use of FedRAMP‑authorized hosting.
[ ] SAFETY Act — Evaluate whether your technology or service offering should pursue SAFETY Act designation and assemble necessary documentation for an application.
[ ] Compliance scope TBD — re‑evaluate when official solicitation or agency guidance is published to confirm specific contract security requirements.

Resources

NIST 800‑171 — https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final
FedRAMP — https://www.fedramp.gov/
DHS SAFETY Act information — https://www.dhs.gov/safety-act
DHS Science & Technology Directorate — https://www.dhs.gov/science-and-technology
TSA — https://www.tsa.gov

Helpful internal reading:

Winning Federal Contracts Guide (/insights/winning-federal-contracts)
CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide)
CUI-Safe CRM Guide (/insights/cui-safe-crm-guide)

How Cabrillo Club Automates This

Cabrillo Signals War Room — War Room already detected this SVIP/S&T event and delivered this briefing within minutes. It continuously monitors DHS, TSA, and SVIP announcements and will surface any new solicitations, Q&A releases, or policy shifts related to the Gold+ program and synthetic‑data efforts so your capture team never misses a posting or amendment.
Cabrillo Signals Match Engine — Match Engine automatically rescales opportunity relevance when events like this change the landscape. It will bump opportunities and historical solicitations that match keywords such as “synthetic X‑ray,” “screening,” or the NAICS codes in your portfolio, update match scores, and reprioritize your pipeline so you focus on the highest‑value pursuits first.
Cabrillo Signals Intelligence Hub — Intelligence Hub tracks affected agencies (DHS, TSA, S&T), contract vehicles, and NAICS codes from this event. Use the Hub’s saved search feature to get alerts the moment a solicitation or SAM notice appears that aligns with this event’s profile and to maintain a roster of potential teaming partners and past‑performance matches.
Proposal Studio (Proposal OS) — Proposal Studio generates first‑draft technical approaches, compliance matrices, and staffing plans using your past performance and the event context. For this effort, it can produce a draft approach focused on synthetic data generation and screening operations, and populate a win‑theme library tailored to Gold+ priorities to accelerate proposal authoring.
Proposal Studio Workflow Tracker — The Workflow Tracker drives a 9‑gate capture workflow from opportunity ID through post‑submission. It routes compliance reviews to your security and legal teams, tracks required certifications (FedRAMP readiness items, NIST 800‑171 remediation tasks, SAFETY Act documentation), and assembles audit‑ready proposal packages for submission.

Call to action: log into Cabrillo Signals War Room and set a saved search for this SVIP/S&T synthetic X‑ray dataset event, then run a Match Engine re‑score on your pipeline so your capture team can prioritize follow‑on solicitations and start Proposal Studio drafts.

Overview

Immediate Actions (This Week)

[ ] Monitor for the official solicitation or follow‑on announcement from DHS S&T, TSA, or SVIP and subscribe to agency notices.

[ ] Map your core capabilities (synthetic data generation, computer vision/AI, screening services, facilities support) to the market segments named in the event to identify primary pursuit threads.

[ ] Inventory current compliance posture against the named compliance surfaces (NIST 800‑171, FedRAMP, SAFETY Act) and flag gaps that would block work with sensitive datasets or cloud-hosted models.

[ ] Update past performance summaries and create 1‑page capability statements tailored to synthetic X‑ray data and screening solutions for rapid distribution to potential teammates and primes.

[ ] Identify internal stakeholders (technical lead, security/compliance lead, capture lead) and schedule a rapid capture kickoff meeting.

Short-Term Actions (30 Days)

[ ] Draft a lightweight technical approach for how your team would develop, validate, and operationalize synthetic X‑ray datasets and associated AI models, including data provenance and privacy considerations.

[ ] Pull together a teaming plan (primes, subs, vendors, academic partners) and begin outreach to build a capture consortium with complementary capabilities in AI, maintenance, and workforce management.

[ ] Prepare a compliance remediation plan for addressing any high‑priority items from your NIST 800‑171 and FedRAMP assessments; identify certificate/authorization paths if cloud hosting is required.

[ ] Create a risk register focused on insider risk, dataset bias, explainability, and operational reliability for security‑screening use cases.

Long-Term Actions (90+ Days)

[ ] Mature a prototype or demonstration (technical, procedural, or pilot) showing synthetic dataset generation and model performance on representative screening tasks for use in briefings and past performance narratives.

[ ] Complete required FedRAMP or equivalent cloud authorization steps if you will host models or datasets in the cloud — or document how you will interoperate with FedRAMP‑authorized environments.

[ ] Evaluate SAFETY Act eligibility and prepare documentation needed for any seller protection application if your solution would be claimed under that regime.

[ ] Finalize capture materials (compliance matrix, staffing plan, transition plan, cost/price model) and run a bid/no‑bid decision with updated match scoring from your opportunity pipeline.

Compliance Checklist

[ ] NIST 800‑171 — Assess and remediate controls applicable to handling controlled unclassified information (CUI (Controlled Unclassified Information)) in datasets and model development environments.

[ ] FedRAMP — Determine whether cloud hosting or SaaS components require FedRAMP authorization and plan for authorization pathways or use of FedRAMP‑authorized hosting.

[ ] SAFETY Act — Evaluate whether your technology or service offering should pursue SAFETY Act designation and assemble necessary documentation for an application.

[ ] Compliance scope TBD — re‑evaluate when official solicitation or agency guidance is published to confirm specific contract security requirements.

Resources

NIST 800‑171 — https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final

FedRAMP — https://www.fedramp.gov/

DHS SAFETY Act information — https://www.dhs.gov/safety-act

DHS Science & Technology Directorate — https://www.dhs.gov/science-and-technology

TSA — https://www.tsa.gov

Helpful internal reading:

Winning Federal Contracts Guide (/insights/winning-federal-contracts)

CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide)

CUI-Safe CRM Guide (/insights/cui-safe-crm-guide)

How Cabrillo Club Automates This

Cabrillo Signals War Room — War Room already detected this SVIP/S&T event and delivered this briefing within minutes. It continuously monitors DHS, TSA, and SVIP announcements and will surface any new solicitations, Q&A releases, or policy shifts related to the Gold+ program and synthetic‑data efforts so your capture team never misses a posting or amendment.

Cabrillo Signals Match Engine — Match Engine automatically rescales opportunity relevance when events like this change the landscape. It will bump opportunities and historical solicitations that match keywords such as “synthetic X‑ray,” “screening,” or the NAICS codes in your portfolio, update match scores, and reprioritize your pipeline so you focus on the highest‑value pursuits first.

Cabrillo Signals Intelligence Hub — Intelligence Hub tracks affected agencies (DHS, TSA, S&T), contract vehicles, and NAICS codes from this event. Use the Hub’s saved search feature to get alerts the moment a solicitation or SAM notice appears that aligns with this event’s profile and to maintain a roster of potential teaming partners and past‑performance matches.

Proposal Studio (Proposal OS) — Proposal Studio generates first‑draft technical approaches, compliance matrices, and staffing plans using your past performance and the event context. For this effort, it can produce a draft approach focused on synthetic data generation and screening operations, and populate a win‑theme library tailored to Gold+ priorities to accelerate proposal authoring.

Proposal Studio Workflow Tracker — The Workflow Tracker drives a 9‑gate capture workflow from opportunity ID through post‑submission. It routes compliance reviews to your security and legal teams, tracks required certifications (FedRAMP readiness items, NIST 800‑171 remediation tasks, SAFETY Act documentation), and assembles audit‑ready proposal packages for submission.

DHS taps dataset of baggage images to improve TSA scans