360 Privacy - Vulnerability Detection and Removal Tool

The Federal Energy Regulatory Commission (FERC) is seeking to procure a 360 Privacy Vulnerability Detection and Removal Tool through this Request for Quotations. The tool must provide proactive threat detection capabilities to identify, isolate, and remove data broker profiles and Personally Identifiable Information (PII) from digital sources, including daily monitoring and scanning of the Deep and Dark Web for compromised personal information. The platform will support FERC's Chief Security Officer in monitoring digital exposure, reducing attack surfaces, and preventing targeted attacks like doxing by pulling intelligence from social media and other sources. Awards will be made using the lowest-priced technically acceptable evaluation criteria, with technical acceptability defined as quoting the exact items in the Contract Line Item Numbers and meeting the Brand Name Justification requirements. The deadline for submitting questions was August 22, 2025, with quote submissions due by August 29, 2025 at 1:00 PM EST.

This procurement is designated as a Total Small Business set-aside and represents a sole-source acquisition for the specific "360 Privacy" brand name product, as justified by FERC's determination that no equivalent alternatives exist after conducting market research through NASA SEWP, GSA eLibrary, and discussions with law enforcement counterparts. The contract includes a base period from September 15, 2025 to September 14, 2026, with two optional one-year extensions that could extend the contract through September 14, 2028. The services will be performed in Washington, DC at FERC's headquarters location. The brand name justification specifically notes that 360 Privacy is the only product that encompasses all required capabilities for removing PII from hundreds of data broker websites and conducting ongoing monitoring and deletion of that data. The procurement falls under NAICS code 541519 for Other Computer Related Services and PSC category DJ10 for IT and Telecom Security and Compliance as a Service.