The SBA Rule That Just Opened Your Competitor's Pipeline

On January 17, 2026, a single regulatory change took full effect, and most GovCon firms haven't yet mapped it. The SBA's new recertification rule disqualified hundreds of acquired small businesses from competing for set-aside work on the very vehicles they currently hold.

In the second session of the Sprint to September 30 Series, GovDash Sr. GTM Manager Brittany Winkler walked through which incumbents are out of compliance, how to find them using public data, and how to convert that intelligence into capture wins before Q3 task orders drop.

Watch the on-demand version of this event

Get the Full Intelligence

The webinar covers the highlights. The full picture is in GovDash's FY26 Mid-Year Intelligence Report: the complete SBA §125.12 breakdown, the SB compliance calendar, the protest decision tree, and the full Q3 opportunity map across $52.8B in expiring contracts.

The firms that win set-aside work in Q3 FY26 already know which incumbents are ineligible. This report is how you find them.

One Rule. Immediate Effect. Most Firms Haven't Adjusted.

SBA §125.12 now requires annual recertification at every long-term contract anniversary and within 30 days of any M&A event. A firm that recertifies as "other than small" is immediately ineligible for new set-aside task orders under every multiple-award contract it currently holds.

This applies across all pools: SR, 8(a), HUBZone, SDVOSB, and WOSB.

GovCon M&A volume was high in FY24 and FY25. The recertification clock has been running. Some firms have recertified correctly and confirmed their ineligibility. Others have not recertified at all and continue to compete for set-aside work they are legally prohibited from holding.

As Brittany put it:

"These firms are actively bidding on work they can no longer legally hold. The opportunity is open right now.

The recertification gaps are there. The data to find them is public. Most firms just haven't looked."

Who Is at Risk and How to Find Them

The profile of a disqualified incumbent is specific. They were acquired in FY24 or FY25 and have not been recertified since the transaction. Or their organic growth pushed them over their NAICS size threshold without a formal recertification event. In fast-moving NAICS codes like IT professional services, cybersecurity, and AI/ML, both scenarios are common.

The data to identify them is entirely public.

Pull the incumbent list for your target vehicles from FPDS or USASpending.gov. Cross-reference each firm against the SBA Dynamic Small Business Search for current size certification. Check SAM.gov for entity name changes, novation notices, and M&A filings in the last 18 months. Flag any incumbent whose recertification date postdates a known acquisition event.

"By the time the task order drops, it's too late to start this research. You need the list before the award action, not after."

That list is your protest pipeline.

The Protest Decision Tree

Brittany walked through a clear framework for when to file and what outcome to pursue.

File when the incumbent is at or approaching the size threshold, with M&A or rapid NAICS growth, the task order is in a set-aside pool, and you have a plausible recertification gap with an upcoming award action. The filing window with the SBA Area Office is five days from award notification. That clock starts the moment you receive the award notification, which is exactly why the research has to happen before the task order drops.

"This is not opportunistic. This is how a well-functioning set-aside market is supposed to work. The rule exists to protect small business set-asides. When you identify a noncompliant firm and file correctly, you are the system working as designed."

The outcome to pursue is not just the single protest win. It is an ineligibility determination. That means structural ineligibility for future task orders under the same MAC pool. One successful protest removes that competitor from the pool for every subsequent task order.

The Successor Position

This is where most firms stop short. Winning the protest is the beginning, not the end.

When a CO loses an incumbent, especially right before a new task order drops, they need a viable alternative immediately. The firms that win the follow-on work are the ones that were already in front of the CO before the disqualification happened.

Brittany was direct: "Brief the program office before the bridge contract decision is made. When the CO needs an alternative, the firm that already handed them a capability brief is the firm that gets the call."

Have a one-page capability summary ready that ties your past performance to the specific SOW the incumbent was performing. Same NAICS. Same agency. Same pool. The protest gets you in the room. The successor position wins the work.

Where to Look First

The opportunity is not equally distributed. VA carries a high volume of set-aside task orders, with significant IT and professional services M&A activity among incumbents. DOD has the largest MAC ecosystem in the federal government, OASIS+, SeaPort-NxG, and JETS, with broad exposure to set-aside pools across the board. HHS and CMS have active 8(a) and WOSB task order activity, as well as several recent incumbent acquisitions in the health IT and professional services space. DLA moves fast with high Q3 obligation velocity and a concentration of long-term set-aside contracts.

Four Moves to Make Right Now

Pull the incumbent list for your three highest-priority vehicles. Run each firm through the SBA Dynamic Small Business Search today. Flag any size certification change in the last 18 months.

Set a SAM.gov alert for entity name changes and novation notices for incumbents at your target agencies. That is your five-day protest clock starting.

For any firm you flag as potentially ineligible, draft a one-page capability summary positioning your firm as the successor now, before the next task order drops.

Validate your own recertification status. Any firm with Q3 task order exposure under the SB set-aside pools must confirm its current size status before April 1.

How GovDash Powers This Work

GovDash is the AI platform to win and run government contracts. From opportunity discovery and capture to proposal execution and post-award operations, GovDash provides BD, capture, and proposal teams with a unified workflow platform built for this market.

The firms that identify incumbent vulnerabilities early and move into the successor position before the solicitation is even announced are the ones using intelligence-driven capture workflows to get ahead of the field. GovDash is built to give your team that edge at every stage of the lifecycle.

What's Next

This was the second session in a three-part series. One session remains.

Session 3, July 8, 2026: The September 30 Fast Lane: FAR 13.5's new $9M ceiling, outcome-based CLINs, and the vehicles that still close this fiscal year.

Register for the upcoming session.

Previous Sessions in This Series

The $2.13 Trillion Obligation Sprint: May 6, 2026

The Disqualified Incumbent: June 10, 2026

Get the Full Intelligence

The webinar covers the highlights. The full picture is in GovDash's FY26 Mid-Year Intelligence Report: the complete SBA §125.12 breakdown, protest framework, SB compliance calendar, and the full Q3 opportunity map.

The firms that win set-aside work in Q3 FY26 are now building their strategies around this data. This report is how you get there.