Built to Be Bought told the story of the government-contracting machine that turns a small cleared firm into a fortune: build the book of business, sell it, and roll the equity. That machine does not care much about your starting hand. A U.S. citizen with no experience at all, a cleared non-veteran, a veteran, a service-disabled minority veteran, a woman owner, and a firm owned by a Native American tribe can all run the same play. What changes from one to the next is the wedge they use to get in the door and the size of the door itself. This post lays out the certifications, how they stack, the free tools any founder can use to start or to partner up, and the rules that quietly decide who wins. Everything here is drawn from public rules, cited at the end.
The menu of certifications
The federal government runs several small-business programs, each with its own eligibility test, and each one opens a set of contracts reserved for firms that qualify:
- Service-Disabled Veteran-Owned and Veteran-Owned (SDVOSB and VOSB): at least 51 percent owned and controlled by veterans, service-disabled for SDVOSB. Since January 1, 2023, you must be certified by the SBA through VetCert to win a veteran set-aside or sole-source prime contract; self-certification no longer counts.
- Women-Owned and Economically Disadvantaged Women-Owned (WOSB and EDWOSB): at least 51 percent owned and controlled by women. EDWOSB adds an economic test (personal net worth under 850,000 dollars, three-year average income of 400,000 dollars or less, assets of 6.5 million dollars or less). Set-asides apply in the industries where women are underrepresented.
- 8(a) Business Development: a nine-year program for firms 51 percent owned and controlled by people who are both socially and economically disadvantaged. It opens 8(a) set-asides and sole-source awards.
- HUBZone: the firm's principal office sits in a Historically Underutilized Business Zone and at least 35 percent of its employees live in one. It brings set-asides, sole-source, and a 10 percent price preference in open competitions. You can check any address against the SBA HUBZone map.
- Small Disadvantaged Business (SDB): self-certified in SAM.gov, it supports the government's 5 percent disadvantaged-business goal but for most agencies carries no set-aside of its own.
The important part: one firm can hold several of these at once. You can only use one designation on any given contract, but holding several widens the universe of work you can chase and gives a contracting officer more ways to steer a job to you.
The clearance axis, which stacks on everything
A security clearance is not an SBA program and it does not care about ownership. A Facility Security Clearance is a government determination that your company can handle classified information, and a personnel clearance does the same for a person. You cannot grant either one to yourself; a government customer or a prime has to sponsor it against a classified requirement. That is exactly why it is valuable, and why it stacks on top of any set-aside. A woman-owned firm with a Facility Security Clearance and a roster of cleared engineers is a different, more valuable thing than a woman-owned firm without one. The clearance is the differentiation the build-sell-roll story is built on. The set-aside is how you get in the door.
Seven starting hands, one machine
The U.S. citizen with no experience. The most common starting hand, and it still works. Every company begins with no past performance, and the government builds a lane for exactly this. Under the Rule of Two, a contracting officer must reserve an acquisition for small business whenever two responsible small firms are expected to bid at fair prices, and every acquisition above the micro-purchase threshold and not over the Simplified Acquisition Threshold is automatically reserved for small business. Those thresholds rose on October 1, 2025: the micro-purchase threshold is now 15,000 dollars and the Simplified Acquisition Threshold is 350,000 dollars. So a brand-new firm with no certifications competes in a pool already fenced off from the giants. The path from zero is not a certification, it is subcontracting: win a spot on a prime's team, deliver, earn a past-performance record, and use it to bid prime work next time. The rest of this post is the ladder that citizen climbs.
The cleared non-veteran. No set-aside to lean on, so the clearance and differentiated work are the entire wedge. This founder wins by teaming as a subcontractor to build past performance, chasing full-and-open work where a cleared, technical shop beats a generalist, and, because the firm is still small, becoming a protege in the Mentor-Protege Program described below. The exit is the same: build cleared past performance, get on the vehicles, and become the tuck-in a larger platform pays for.
The veteran. Verified through VetCert, a veteran-owned firm can pursue veteran set-asides and, if the owner is service-disabled, the richer SDVOSB pool. Veterans get one extra edge worth knowing. At the Department of Veterans Affairs, the Veterans First program and the Supreme Court's decision in Kingdomware Technologies v. United States (2016) make the Rule of Two mandatory for veteran-owned firms: a unanimous Court held that when two veteran-owned small businesses will compete, the VA must set the work aside for them. Layer a clearance on top and the firm is both reserved-eligible and differentiated.
The service-disabled minority veteran. Now the certifications start to stack. A single firm can be SDVOSB and 8(a) at the same time, which means it can pursue both veteran set-asides and 8(a) sole-source awards. There is a ceiling to know about: for an individually-owned 8(a) firm, sole-source awards are effectively capped at 4.5 million dollars for services and 7 million for manufacturing, and there is a 168.5 million dollar lifetime limit on total 8(a) contracts. Real and useful, but bounded.
The woman owner. A woman-owned firm runs the WOSB or EDWOSB lane, and it combines with everything else. The clearest proof this is not theoretical is a firm that appears in Built to Be Bought: Victory Solutions of Huntsville, a service-disabled-veteran and woman-owned small business founded by Kris McGuire, built real missile-defense and space past performance and sold to Dynamo Technologies in January 2026. Service-disabled veteran plus woman-owned plus a marquee radar program is a full house, and it exited cleanly.
The service-disabled minority veteran who is also tribal or Native American. This is where the ceiling comes off. A firm owned by an Indian tribe or an Alaska Native Corporation can receive sole-source 8(a) awards above the competitive threshold with no dollar ceiling, Native Hawaiian Organizations get the same for Defense Department contracts, these entities are exempt from the 168.5 million dollar lifetime cap, and a tribe or ANC can own an unlimited portfolio of separate 8(a) firms while an individual gets only one 8(a) company in a lifetime. The one remaining check is that a sole-source award above 25 million dollars, or 100 million for a Defense agency, still needs a written justification. Everything else about the play is identical; the tribal-owned firm simply gets to run it at a scale an individual cannot.
The point across all seven: the starting hand sets the size of the wedge, not the shape of the game. Every one of them builds a cleared book of business and aims it at the same exit.
Day one, from a standing start
The newcomer's first moves cost nothing and follow a fixed order:
- Register in SAM.gov, for free. Registration and the Unique Entity ID that goes with it are free, and the SBA and GSA warn plainly that you never need to pay a third party to do it. The Unique Entity ID replaced the old DUNS Number on April 4, 2022, and the registration must be renewed every year.
- Pick your NAICS codes. Federal work is classified by the Census Bureau's NAICS six-digit industry codes, and you list the ones that describe your work in your profile. This matters because your size is measured per code.
- Confirm you are small. SBA size standards attach a maximum, either average annual receipts or an employee count, to each NAICS code. For revenue-based standards, the average is now taken over five years, not three, which lets a firm stay small longer as it grows.
- Build your profile so buyers can find you. SBA runs a searchable directory, now the Small Business Search, where contracting officers and primes look for small firms by capability. Your SAM profile and this one are your resume before you have a past-performance record.
- Get a free counselor and start teaming. An APEX Accelerator, described next, walks you through all of the above at no cost and puts you in front of primes.
The free help any of them can use: APEX Accelerators
None of this requires paying a consultant to get started. APEX Accelerators are the government-contracting help centers formerly known as Procurement Technical Assistance Centers, a program first authorized by Congress in 1985. One correction worth making, since it is widely misstated: the program did not move to the SBA. It stayed inside the Defense Department, shifting from the Defense Logistics Agency to the Office of Small Business Programs in 2022 and rebranding from PTAC to APEX Accelerators in 2023. The SBA confirms the program is administered by the Defense Department and funded through cooperative agreements plus state and local matching funds.
The services are free. A counselor will help you register in SAM.gov, screen which certifications you qualify for, run bid-matching against live opportunities, do market research, and get you into teaming and matchmaker events where primes look for small partners. The network is 90-plus programs with 300-plus local offices across every state plus DC, Puerto Rico, and Guam. napex.us is the professional association for the accelerators themselves; to find the office that will actually help you, use its locator or the Defense Department's apexaccelerators.us. It is the single best first stop for any founder on this list.
Partnering up: the Mentor-Protege Program
To win work above your weight class, the SBA Mentor-Protege Program lets a small protege form a joint venture with a mentor, and the mentor can be a large company. The 8(a) and All Small mentor programs were merged into this single program on November 16, 2020. The joint venture can compete as a small business for small-business, 8(a), SDVOSB, WOSB, and HUBZone set-asides, as long as the protege itself still qualifies as small. The mentor may take up to a 40 percent equity stake in the protege, may hold up to three proteges at once, and the agreement runs up to six years. A specific joint venture can win an unlimited number of contracts for two years from its first award before the partners risk being treated as affiliated. This is the formal, legal way a set-aside firm partners up with a prime and wins work it could never land alone.
Reverse mentorship, which any of them can start
Reverse mentoring is the opposite arrangement, and it is a real, documented practice, not a metaphor. It flips the usual direction: a more-junior or more-current person mentors a more-senior one, usually on technology, cyber, or a fresh perspective. Harvard Business Review has written about why it works and how to run it, the Center for Creative Leadership describes the same, and it is widely credited to Jack Welch, who around 1999 paired hundreds of GE executives with younger employees to learn the internet. Keep it separate from the Mentor-Protege Program above, which is a large-helps-small business arrangement, not reverse mentoring.
It matters here because the defense world now runs formal reverse-mentoring programs. The Defense Department held a reverse-mentoring event in January 2026 where junior people mentored senior leaders on technology and workforce trends, the Army Sustainment Command built a reverse-mentor role into its program, and the Space Force runs its own initiative. There is no federal program that markets reverse mentorship to outside founders, so this next part is a way to apply the idea, not a program to enroll in: a newer cleared, technical, or veteran founder holds exactly the current cyber and cleared-workforce knowledge that a large, less-technical prime or an agency leader lacks. Offering that knowledge, and pairing it with a real teaming relationship, is a credible way to build the relationships that turn into subcontracts and, later, a place on a prime's team.
The other avenues worth stacking
Set-asides are the wedge, but they are not the only door. Any founder here can also use:
- SBIR and STTR: non-dilutive federal research funding, meaning the government pays for your development without taking equity, on a Phase I proof-of-concept, Phase II development, Phase III commercialization ladder. Eleven agencies run SBIR and the programs direct more than 4 billion dollars a year, with the Defense Department the largest participant. It is open to any small business, which makes it a favorite first win for the no-experience founder with a real idea.
- Other Transaction Agreements and the innovation on-ramps: an Other Transaction is an agreement that sits outside the standard procurement rules, used for research and prototypes and often run through consortia. The Defense Innovation Unit fields commercial technology into the military, typically in 12 to 24 months, and AFWERX and the National Security Innovation Network route startups into the Air Force and the wider department.
- The GSA Schedule: the Multiple Award Schedule is a governmentwide vehicle with a five-year base and three five-year options, up to 20 years, and it is the largest commercial-acquisition program in the government. Getting on it gives a small firm a standing vehicle agencies can buy from again and again.
- Prime subcontracting goals, and a stacking trick: the government-wide prime small-business goal is 23 percent, with sub-goals of 5 percent for small disadvantaged and women-owned firms and 3 percent each for HUBZone and service-disabled-veteran firms. Large primes on big contracts must file subcontracting plans with targets for each. Here is the trick the stacking makes possible: a single firm that is, say, SDVOSB and woman-owned and HUBZone and 8(a) can help a prime move all four of those sub-goals at once. That is not just eligibility, it is a reason a prime picks up the phone.
- CMMC, and its three levels: the Cybersecurity Maturity Model Certification began appearing in Defense solicitations on November 10, 2025. Under the final rule, Level 1 protects basic contract information and is an annual self-assessment, Level 2 protects controlled unclassified information and usually requires a third-party assessment, and Level 3 is the highest and is assessed by the government itself. For a cleared cyber firm, getting certified early is a moat, because eventually the work is closed to firms that are not.
- Capital, including bonding: SBA 7(a) loans up to 5 million dollars, 504 loans for fixed assets, the SBIC program, which set a record in fiscal 2025, and, for a firm that needs a bid or performance bond it cannot otherwise get, the SBA Surety Bond Guarantee program, which backs the surety so it will bond a small firm.
- Beyond the federal government: the same idea repeats at the state and local level. The Department of Transportation's Disadvantaged Business Enterprise program reserves a share of federally funded highway, transit, and airport work for certified disadvantaged firms, a separate certification and a separate pool from the SBA programs above.
The rules that bite
Three rules quietly decide whether the play works, and a founder should meet them early rather than in a debrief after a lost award:
- You have to do the work. On a set-aside, the limitations on subcontracting mean the prime may not pass more than 50 percent of a services or supply contract to firms that are not themselves similar small businesses (85 percent for general construction, 75 percent for specialty trade). A set-aside is not a pass-through to a big partner; you must perform the core of it.
- Affiliation can erase your size. SBA can add your revenue or headcount to a partner's if it decides the partner controls you, and the ostensible subcontractor rule treats a prime as affiliated with a subcontractor that is really running the job. A teaming deal built the wrong way can cost you the very small-business status you were teaming to use.
- Your status does not survive a sale unchanged. Covered next, and it is the hinge of the whole exit.
The same exit, and one caution
However a founder starts, the finish is the one from Built to Be Bought: build a cleared, documented book of business, get on prime vehicles, and become the firm a larger platform wants to buy. One caution specific to set-asides: your reserved status does not transfer on a sale. The SBA requires you to recertify your size and status within 30 days of a change in control, and under a final rule effective January 17, 2026, a disqualifying recertification after a merger generally strips the firm of future task orders and options on small-business set-aside vehicles, with a small-to-small exception. In plain terms: the set-aside gets you in and grows the backlog, but the thing a buyer ultimately pays for is the unrestricted past performance, the clearances, and the vehicles that survive the sale. Build for those from the first contract, whatever hand you started with.
Related reading
- Built to Be Bought: the build-sell-roll machine every starting hand here is running.
- Why a National-Security Investor Sits in Boca Raton, Not the Beltway: where the capital that buys these firms actually sits.
- Thomas Churbuck and the turbine-parts company he sold twice: a founder who built and sold, the destination of this whole play.
- The Army's Top General Took a Private Equity Seat: the customer side of the market these firms sell into.
Fact-check notes and sources
- SDVOSB/VOSB certification (13 CFR Part 128, mandatory SBA certification since January 1, 2023): eCFR Title 13 Part 128. WOSB and EDWOSB: SBA WOSB program. 8(a): SBA 8(a) program. HUBZone and the map tool: SBA HUBZone program and the HUBZone map. SDB: SBA SDB page. Holding multiple certifications: SBA contracting-assistance programs.
- Individually-owned 8(a) sole-source thresholds (4.5 million services, 7 million manufacturing): 13 CFR 124.506. The 168.5 million dollar lifetime cap and its tribal/ANC/NHO exemption: 13 CFR 124.519. Tribal/ANC uncapped above-threshold sole-source: 13 CFR 124.506. Unlimited tribal/ANC 8(a) firms versus one per individual: 13 CFR 124.109. The 25 million / 100 million written-justification threshold: Maynard Nexsen.
- The Rule of Two and the automatic small-business reservation: FAR 19.502-2. The current thresholds (micro-purchase 15,000 dollars, Simplified Acquisition Threshold 350,000 dollars, effective October 1, 2025): FAR 2.101 and the FAR Council inflation-adjustment rule. The 250,000 dollar figure was correct only through September 30, 2025.
- SAM.gov registration and the Unique Entity ID are free: SAM.gov. The UEI replaced the DUNS Number on April 4, 2022: GSA. The SBA Small Business Search directory: search.certifications.sba.gov. NAICS codes: Census Bureau. Size standards and the five-year receipts averaging (Small Business Runway Extension Act): SBA size standards and the SBA final rule.
- Facility Security Clearance basics: State Department FCL FAQ. Victory Solutions sold to Dynamo Technologies in January 2026: Washington Technology.
- VA Veterans First and Kingdomware Technologies v. United States (2016), the mandatory VA Rule of Two: the Supreme Court opinion and the VA program FAQ.
- Mentor-Protege Program (single program since November 16, 2020; mentor may be large, up to 40 percent equity, up to three proteges, six-year agreements): SBA Mentor-Protege Program and 13 CFR 125.9. The two-year joint-venture window, affiliation, and the ostensible subcontractor rule: 13 CFR 121.103. Limitations on subcontracting (50 / 85 / 75 percent): 13 CFR 125.6.
- Reverse mentoring: SHRM, Harvard Business Review, Center for Creative Leadership, the Jack Welch origin, the Defense Department event, and the Army Sustainment Command program. Teaming as the vehicle: Deltek's SDVOSB guide. The founder-facing application of reverse mentoring is a synthesis of documented teaming practice, not a named federal program.
- APEX Accelerators (formerly PTACs, authorized 1985, DoD-administered, free, 300-plus offices): NAPEX, SmallGovCon on the rebrand, the SBA federal-contracting-assistance page, and a center FAQ confirming no fees.
- SBIR/STTR: SBIR.gov and its FAQ. Other Transactions and DIU/AFWERX/NSIN: Defense Innovation Unit. GSA Multiple Award Schedule: GSA. The 23 percent prime goal and sub-goals: SBA scorecard; subcontracting plans: FAR Part 19. CMMC levels (32 CFR Part 170): DoD CIO CMMC and the final rule. Capital and bonding: 7(a), 504, the SBIC record-capital release, and the Surety Bond Guarantee program. The DOT Disadvantaged Business Enterprise program (49 CFR Part 26): transportation.gov.
- Size and status recertification within 30 days of a change in control, and the January 17, 2026 final rule: PilieroMazza and Venable.
This post is informational and journalistic, describing publicly available programs, rules, companies, and transactions. It is not legal, tax, investment, or M&A advice, and program rules and dollar thresholds change; verify current requirements with the SBA, the relevant agency, and qualified counsel before acting. All third parties are discussed from public records as nominative fair use, with no affiliation implied and nothing endorsed by them.