FEMA's $1.5B Terrorism-Prevention Package Has Two Lanes Everyone Overlooks: The $95M Port Security and $88M Transit Security Grants Close July 24

When FEMA announced $1.5 billion in terrorism-prevention funding on June 24, 2026, most of the coverage — including our own deep dive on the Homeland Security Grant Program — focused on the big three: the State Homeland Security Program, the Urban Area Security Initiative, and the Nonprofit Security Grant Program. Those are the household names, and they absorb most of the attention because their applicant pools are enormous.

But folded into that same package are two smaller, transportation-specific programs that consistently under-subscribe relative to the risk they cover: the Port Security Grant Program (PSGP), with $95 million, and the Transit Security Grant Program (TSGP), with $88.4 million. Both opened June 24 and both close at 5:00 p.m. ET on July 24, 2026. For port authorities, ferry operators, passenger-rail systems, and intra-city transit agencies, these are among the most winnable federal security dollars available this summer — precisely because fewer organizations know to chase them, and because the applicant universe is naturally bounded to entities that own the infrastructure.

This is the deep analysis of who should apply, what changed this year, and how to build a package that survives FEMA's risk-based review.

Two programs, one deadline, very different infrastructure

The PSGP and TSGP share a mission — hardening surface and maritime transportation against terrorism — but they cover different physical worlds and different applicants.

The Port Security Grant Program ($95 million) funds the maritime side. Eligible applicants include port authorities, terminal and facility operators, and eligible state, local, and territorial government agencies with a stake in the security of a designated port area. FEMA describes allowable uses as spanning surveillance and monitoring systems, access-control infrastructure, waterside security upgrades, cybersecurity improvements, and emergency-response planning. The through-line is protecting the "critical port infrastructure" that moves the overwhelming majority of U.S. trade by tonnage — container terminals, bulk facilities, passenger cruise terminals, and the waterside approaches to all of them.

The Transit Security Grant Program ($88.4 million) funds the surface-transit side, up from $83.7 million in FY2025 — a rare increase in a budget cycle defined by cuts. Eligible applicants are public transportation systems: passenger rail, intra-city bus, ferry systems, and related transit operations. The environments it covers are the ones millions of Americans pass through daily — rail stations, bus terminals, passenger platforms, ferry facilities, transfer hubs, operations centers, and maintenance yards. Allowable uses run from planning (threat assessments, emergency operations plans, security capital plans) to security equipment and capital improvements, training and exercises, technology investments such as AI-based weapons detection, emergency notification, access control and cameras, cybersecurity initiatives, interoperable communications, and operational security activities.

The overlap zone worth flagging: ferry systems can be eligible under both programs. A ferry operator with maritime terminal infrastructure may find its waterside and vessel-security needs align with PSGP, while its passenger-facility and operations needs align with TSGP. That is not a license to double-dip on the same scope, but it is an argument for reading both Notices of Funding Opportunity before deciding where a given project belongs.

The change that reframes the whole application: cyber is now explicit

The most consequential shift in the FY2026 cycle is not a dollar figure — it is language. Both programs now name cyberattacks and cyber threats explicitly alongside physical terrorism as risks the funding is meant to address. FEMA's own framing for the port program describes protecting infrastructure "from acts of terrorism and cyberattacks," and cybersecurity upgrades sit among the approved project categories in both.

That matters because it changes what a competitive application looks like. Transportation security has historically been dominated by physical hardening — bollards, fences, cameras, guards. The explicit cyber framing invites — and rewards — projects that address operational technology (OT) security, SCADA and industrial-control-system protection, network segmentation between IT and OT environments, intrusion detection, and incident-response capability for the digital systems that now run cranes, signaling, fare collection, and vessel-traffic management. A transit agency that has never treated its fare-payment network or its rail-signaling system as a homeland-security asset now has a direct funding pathway to do so.

The strategic read: if your organization has a physical-security wish list but no cyber component, you are leaving points on the table against a rubric that has been deliberately broadened. The strongest FY2026 packages will pair a physical deterrent with a named OT-security or cyber-resilience investment tied to the same threat scenario.

Why these programs are more winnable than the headline numbers suggest

The instinct with any federal grant is to assume the money is oversubscribed. For PSGP and TSGP, the dynamics cut the other way for three reasons.

First, the applicant pool is structurally bounded. You cannot apply for a port-security grant unless you operate or govern port infrastructure. You cannot apply for transit security without a transit system. That eliminates the flood of general-purpose applicants that dilutes broader programs, and it means the real competition is other transportation entities in your risk tier — a much smaller field.

Second, the review is risk-based, and risk is documentable. Guidance for the transit program is explicit that "projects tied to documented risk perform strongest in review." Transportation entities usually already possess the raw material — threat and vulnerability assessments, ridership or throughput data, prior incident logs, Coast Guard or TSA facility-security assessments. An applicant that maps a specific requested investment to a specific documented vulnerability is doing exactly what the rubric asks.

Third, the application window is short and the process is technical, which suppresses competition. Recent cycles have used FEMA Grants Outcomes (FEMA GO) for submission, and the windows have run roughly 30 days. Organizations that have not pre-staged their System for Award Management (SAM.gov) registration, their Investment Justifications, and their supporting risk documentation simply do not make the deadline. That attrition works in favor of applicants who prepared early.

Building a July 24 package that survives review

With roughly two weeks left as of this writing, the realistic path is to assemble, not originate. Here is the sequence that gives an application the best chance.

Confirm SAM.gov and FEMA GO access today. An expired or lapsed SAM.gov registration is the single most common reason a technically strong application never gets submitted. Registration renewal can take days to process; do not assume it clears overnight.

Anchor every investment to a documented risk. For each requested item, write a one-paragraph Investment Justification that names the threat scenario, cites the assessment or incident that documents it, and states the capability the funding closes. Reviewers are scoring the linkage, not the shopping list.

Pair physical with cyber where you can. Given the broadened language, a package that protects a ferry terminal's access control and segments its operational network reads as more complete than one that does only the former. If a full cyber project is out of reach this cycle, at minimum include a cyber vulnerability assessment as a planning line item.

Respect the cost-share expectations. Federal cost-share rules for these programs are set in the NOFO and vary by project type; some maritime and transit security capital projects carry a non-federal match. Confirm the exact percentage in the FY2026 NOFO before you budget, and identify your match source in the application rather than leaving it implied.

Write for the non-specialist reviewer. The person scoring your Investment Justification may not know your system. Spell out why a compromised signaling network or an unsecured fuel dock is a homeland-security problem, not just an operational inconvenience.

The bottom line

The Port Security and Transit Security Grant Programs are the quiet lanes inside FEMA's $1.5 billion package — smaller than the marquee programs, but bounded to a narrow, well-defined applicant pool and newly opened to the cyber investments that transportation systems increasingly need. The $95 million maritime pool and the $88.4 million transit pool both close July 24, 2026 at 5:00 p.m. ET. For any organization that owns a port, a rail line, a ferry, or a bus fleet, the deciding factor between now and the deadline is not eligibility — it is whether the risk documentation and the SAM.gov paperwork are ready in time.

Granted maps federal and state security grants to the organizations eligible for them and tracks deadline windows as they open. Search current opportunities to see what your agency qualifies for this cycle.