The Government Accountability Office has upheld the Department of Labor's decision to hire WINTrio LLC for cybersecurity assessment work at nearly half the price of a rival rated "Outstanding," rejecting Stondoh LLC's argument that its superior technical score should have carried more weight, according to GAO's July 6, 2026 decision in B-424439.
Background
The Department of Labor issued RFQ No. 1604DC-26-R-00003 as a small-business set-aside under the Federal Supply Schedule, seeking professional security control assessor and Plan of Action and Milestones (POA&M) validation services. The task order covers a base year plus four option years. Two firms competed for the work: Stondoh LLC, based in Baltimore, Maryland, and WINTrio LLC, based in Leesburg, Virginia.
Both offerors submitted technical and price proposals for evaluation under a best-value tradeoff framework, meaning the agency was not required to select the lowest price or the highest-rated technical proposal, but instead had to weigh the two against each other and document its reasoning. Under that framework, a source selection authority is free to accept a lower technical rating in exchange for a lower price, provided the agency's evaluation record explains the basis for that judgment rather than simply reciting the ratings and prices side by side.
Security control assessment and POA&M validation work of this kind typically supports an agency's ongoing compliance with federal cybersecurity risk-management requirements, verifying that identified vulnerabilities are tracked, remediated, and closed out on schedule. Multi-year task orders for this type of recurring assessment work are common across civilian agencies operating under the Federal Information Security Modernization Act framework, and they routinely draw competition on the FSS schedule from small businesses that specialize in security control assessor and authorization support.
Key Details
The Labor Department's evaluators rated Stondoh's technical proposal "Outstanding," identifying nine significant strengths and no weaknesses. WINTrio's proposal was rated "Good," with nine strengths but six weaknesses. On paper, Stondoh held a clear technical advantage.
Price told a different story. Stondoh's proposed price came in at $979,800, compared with WINTrio's $550,276 — a gap of roughly $430,000, or nearly 78 percent higher than the eventual awardee. WINTrio's price also landed close to the government's own benchmark: the Independent Government Cost Estimate was $560,114, just above WINTrio's bid and far below Stondoh's.
The Source Selection Authority determined that Stondoh's technical edge did not justify the added cost and awarded the task order to WINTrio. Stondoh protested, arguing the agency's tradeoff decision unreasonably "minimized or disregarded" its technical superiority and relied "almost entirely" on the price difference between the two bids.
GAO disagreed. In denying the protest, GAO found that the Source Selection Authority's tradeoff decision was "consistent with the solicitation and adequately documented," concluding that Stondoh's "incremental technical benefits" did not justify the significant price increase over WINTrio's quotation — a difference of roughly $430,000. The decision noted that the record reflected a genuine price-technical tradeoff rather than a mechanical reliance on price alone, and that the agency had specifically addressed why Stondoh's additional strengths — nine strengths and zero weaknesses versus WINTrio's nine strengths and six weaknesses — were not worth the cost difference.
GAO's decision, B-424439, was issued July 6, 2026, and appears among the agency's recently posted bid protest decisions.
Notably, GAO's decision did not find fault with the substance of Stondoh's nine identified strengths or dispute that its proposal outscored WINTrio's on technical merit. The dispute instead turned on whether the agency's tradeoff decision was rational and adequately documented, not on a disagreement over the underlying technical evaluation itself.
What It Means for Contractors
The Stondoh decision is a reminder that a top technical rating does not guarantee an award, even when the gap between competitors' technical scores is wide. Agencies running best-value tradeoffs are permitted to select a lower-priced, lower-rated proposal so long as the source selection authority explains, in the record, why the higher price of the better-rated proposal is not worth paying. GAO will not second-guess that judgment as long as the documentation is reasonable — it does not require agencies to prove the winning proposal is technically equal, only that the tradeoff itself was rational and recorded.
For contractors bidding on FSS task orders and other best-value procurements, the practical lesson is pricing discipline. Stondoh's proposal earned a nearly perfect technical record, yet priced itself out of the competition by coming in at roughly 78 percent above the awardee and well above the government's own cost estimate. Firms that know their technical approach will draw strong evaluator marks should still benchmark price closely against the IGCE where it is available, since this decision shows agencies can and do use that figure to gauge whether a technical premium is reasonable.
The decision also underscores the importance of how agencies write their tradeoff rationale. WINTrio's proposal carried six identified weaknesses, yet the award survived a protest because the Labor Department's selection memo explained, strength by strength and weakness by weakness, why those shortcomings did not offset the price advantage. Contractors evaluating whether to protest a best-value award should look closely at whether the agency's record contains that kind of itemized comparison — a tradeoff decision that merely restates ratings without explaining the "why" behind a price-driven award is more vulnerable to challenge than one that shows its work, as the Labor Department's did here.
Finally, the case is a data point for firms weighing whether a protest is worth filing. GAO's bar for disturbing a documented tradeoff decision remains high, and protesters carry the burden of showing the agency's judgment was unreasonable, not simply that they disagree with it. Absent a showing that the agency failed to consider material technical differences or that its price comparison was flawed, GAO will generally defer to a well-documented source selection decision, even one that departs from the highest technical score on the table.
Firms competing against incumbents or well-priced challengers on FSS task orders should treat the Stondoh outcome as a caution against assuming that stacking up strengths automatically offsets a large price gap. A proposal that earns a top adjectival rating still has to survive a dollar-for-dollar comparison against the government's own cost estimate. Offerors that price well above an IGCE should expect agencies to ask, in writing, whether the extra strengths are worth what they cost — and should be prepared for GAO to accept a reasonable "no" as the final word.
