What the DoD Small Business Audit Means for GovCon Firms Right Now
What the DoD Small Business Audit Means for GovCon Firms Right Now
If your firm holds a small business set-aside contract over $20 million with the Department of Defense, or is pursuing one, the ground shifted in January 2026.
And most small business BD teams are still catching up to what it means.
Here is what actually happened, what is at stake, and what the smartest firms are doing right now.
What Happened
On January 16, 2026, Secretary of Defense Pete Hegseth directed a department-wide, line-by-line review of every small business sole-source and set-aside award over $20 million across the entire DoD.
The review covers every set-aside category, not just 8(a). SDVOSB, WOSB, HUBZone, and general small business set-asides are all in scope. Any active contract meeting the criteria was subject to review.
The audit had two phases. In the first phase, DoD components identified covered contracts and assessed whether each was mission critical. Contracts deemed non-essential to warfighting were flagged for potential termination for convenience. In the second phase, DoD validated compliance with limitations on subcontracting and assessed whether pricing was at or below market rates. Results were reported to DOGE by February 28, 2026.
The scale is significant. The DoD awarded more than $80 billion to small businesses in FY2024, almost ten times the small business contracting spend of any other federal agency. This audit touched a meaningful portion of that portfolio.
Meanwhile the SBA ran a parallel audit of its 8(a) program. The SBA sent data requests to 4,300 contractors demanding three years of financial records, contracting agreements, and employee records. By January 2026, the SBA had suspended over 1,000 companies for failing to comply.
What It Means for Your Firm
If you hold a covered contract:
You may have already received, or may still receive, outreach from your contracting officer or a DoD component asking you to demonstrate compliance. At minimum, be prepared to provide invoice and payment records, labor hour reports, and documentation of your subcontracting arrangements.
The primary concern is pass-through arrangements, where a small business holds the contract but a large business performs the majority of the work in violation of limitations on subcontracting rules. If your firm is clean on this, document it and be ready to respond quickly.
If you don't hold a covered contract:
The audit still matters to you, for a reason most firms are missing.
When contracts get terminated for convenience or flagged for non-compliance, they come back to market. An early termination creates a recompete window that most BD teams won't see coming because it won't follow the normal solicitation cycle. The firms watching the audit outcomes will see those opportunities before they hit SAM.gov.
The Broader Context: This Isn't Just About 8(a)
It is important to understand the political context without letting it distract from the practical implications.
The stated rationale from Secretary Hegseth framed this as eliminating waste and pass-through schemes. The legal foundation for small business set-aside programs remains intact. The Rule of Two requirement, SDVOSB statutory protections, and other program authorities were not eliminated by this audit.
What changed is the scrutiny level. The bar for compliance documentation is higher. The tolerance for arrangements that look like pass-throughs, even if technically compliant, has dropped significantly. And the precedent for expanded audits across all small business categories has been set.
The Treasury Department announced a parallel review of all preference-based contracting estimated at $9 billion in value. Congressional pressure is adding to the scrutiny. This is not a one-agency, one-time event.
What the Smartest Firms Are Doing Right Now
Conducting an internal compliance review. Before any agency asks, know where you stand on limitations on subcontracting for every active contract. If you are performing work through subs that exceeds the allowed thresholds, address it now rather than when you are responding to a government inquiry.
Documenting everything. Invoice records, labor hour logs, payment records, subcontracting agreements. Have them organized and accessible. If you get a data request, your ability to respond quickly signals credibility and reduces exposure.
Watching the termination pipeline. Contracts that get terminated for convenience don't disappear. They come back to market. BD teams that track which contracts are under scrutiny will see recompete opportunities before the broader market does.
Staying mission-aligned. The clearest path through this environment is contracts that are unambiguously mission-critical. If your firm's work directly supports warfighting, readiness, or national security, and you can document that clearly, you are in a much stronger position than firms performing work that could be characterized as administrative or peripheral.
The Bottom Line
The DoD small business audit is a compliance event for firms with active covered contracts. But for firms watching the market carefully, it is also a BD intelligence signal.
Contracts are moving. Some will terminate early. Others will recompete ahead of schedule. The agencies conducting this review will be more scrutiny-sensitive in their next solicitation cycle, which means the small business firms that respond to this environment with better compliance posture and cleaner teaming structures will be better positioned for what comes next.
The firms that treat this as a background event will find out when the RFP drops.
The ones treating it as a BD intelligence signal are already positioning.
govconcareershub.com