Brief
Find Evil LLC
USAC RFP: Penetration Testing as a Service
Decision
Pursue the USAC PTaaS opportunity strictly as a subcontractor.
While Find Evil LLC offers elite DFIR and multi-cloud forensics expertise, the solicitation focuses heavily on Penetration Testing as a Service. A lack of federal past performance and pending socio-economic certifications limit competitive standing for a prime bid.
Why this call
The recommended path makes sense, but it still needs specific partner, proof, or execution validation before it is ready to act on.
- The core requirement is Penetration Testing as a Service (PTaaS), including ethical hacking and web application testing.
- Federal past performance is typically expected to win a prime federal contract of this scope.
- The RFP explicitly requires Contractor Staff to be on-site at USAC Headquarters in Washington, DC at least 2 days per week.
Next capture moves
- Record No Go as Prime; pursue only as subcontractor.
- Identify established federal cybersecurity contractors likely to bid on USAC IT-26-027.
- Produce a one-page capability-to-scope map that shows where the company fits and where it does not.
Decision watchouts
Why not prime
Unresolved On-Site Hybrid Work Requirement
On-Site Hybrid Work Requirement is still unresolved in the validated evidence set.
Prime-delivery mismatch
The current evidence points to a gap between the solicitation's PTaaS program shape and the company's documented prime-delivery proof.
Capability Misalignment
The core requirement is Penetration Testing as a Service (PTaaS), including ethical hacking and web application testing.
Still to verify
Business-status discrepancy
Profile claims active 8(a)/HUBZone/SDB, but Capability Statement says Pending/Eligible
Opportunity
USAC RFP: Penetration Testing as a Service
Penetration Testing as a Service (PTaaS) across 16-20 core systems, including ethical hacking, web app, and API testing.
Agency / customer
USAC (FCC-associated)
Place of performance
Washington, DC 20005
Company
Find Evil LLC
Core capabilities
Digital Forensics and Incident Response (DFIR), Compromise Assessment, Cloud Forensics
Strengths
Elite DFIR capabilities, Multi-cloud forensics
Major gaps
Lack of federal past performance, No DC-based personnel, Pending socio-economic certifications
Business statuses
Small business, Profile claims active 8(a)/HUBZone/SDB, but Capability Statement says Pending/Eligible, 8(a) is claimed in the canonical company profile but not corroborated in SBA summary, HUBZone is claimed in the canonical company profile but not corroborated in SBA summary
Review the full analysis and requirements
