Most small and mid-sized contractors over-invest in the wrong opportunities because they read the wrong market signals. They scan SAM.gov for fresh solicitations, chase posted RFPs, and treat every open competition as equally winnable. In 2026, that approach loses to the contractors who understand how federal buying actually flows.
This post examines the details of the defense contract market — the dollars, the vehicles, and the structural patterns that should drive your pipeline allocation. It is written for Business Development leaders building targets, managers prioritizing pursuits, and contracts/operations leaders deciding which vehicles to pursue.
The dollars: still high, redistributing toward defense
Per GAO’s “A Snapshot of Government-Wide Contracting for FY 2024” (June 24, 2025), federal contract obligations totaled approximately $755 billion in FY 2024 — with DoD accounting for $445.1 billion (58.9%) and civilian agencies combined at roughly $310 billion. FY 2025 tracked in a similar range, though DoD reporting lag and the 43-day shutdown to open FY 2026 cloud final figures. The Department of Veterans Affairs, Department of Energy, and Department of Homeland Security led non-defense growth in FY 2025.
According to the SBA’s announcement of the FY 2024 Small Business Procurement Scorecard (January 10, 2025), small businesses received more than $183 billion in prime contracts from the federal government — 28.78% of all federal contracting dollars — in fiscal year 2024, the fourth consecutive year above the 23% statutory goal. Within that breakdown: Small Disadvantaged Businesses received $78.10B (12.26%); Service-Disabled Veteran-Owned Small Businesses received $32.82B (5.15%); Women-Owned Small Businesses received $31.68B (4.97%); and HUBZone firms received $17.45B (2.74%). The HUBZone 3% statutory goal was unmet in FY 2024.
The pattern beneath those numbers is consolidation. Total unique contracts are declining, the contractor pool is shrinking, and the vehicles are getting larger.
The vehicles: OASIS+, MAS, GWACs, OTAs
GSA’s OASIS+ launched into rolling awards through 2024–2025 and entered Phase II on December 4, 2025, expanding to 13 service domains and opening for continuous proposals on or about January 12, 2026. Per GSA’s OASIS+ Buyers’ Guide, the program has no maximum order limitation and a ten-year cumulative ordering window. Trade reporting (Washington Technology, September 2025) puts the small business awardee count at 2,823 with an unrestricted roster of 698 — and additional awards in 2025 brought the total small business count above 3,000 as Phase II on-ramping accelerated. If your services portfolio sits in management consulting, engineering, R&D, logistics, environmental, facilities, intelligence, or human capital, it can be eligible through OASIS+.
GSA MAS continues to consolidate as the channel for commercial catalog buying. The 2025 OneGov procurement strategy and broader category management push are concentrating standardized commercial buys onto MAS and complex non-IT services onto OASIS+. Alliant 3 (proposal deadline February 3, 2025) and the upcoming Polaris cycles are the IT equivalents.
Beyond the schedules, OTAs and Commercial Solutions Openings (CSOs) are growing. DoD’s 2025 Acquisition Transformation Strategy directs Portfolio Acquisition Executives to default to OTAs and CSOs for software development — a major signal to contractors building tech capabilities.
The set-aside picture: Rule of Two intact, re-certification tightening
The FAR Part 19 rewrite published September 26, 2025 retained the Rule of Two, which directs contracting officers to set aside acquisitions when there is a reasonable expectation of receiving two or more competitive offers from small businesses. A separate SBA proposed rule from August 22, 2025 would raise receipts-based size standards for 263 industries — many growing small businesses will get more runway.
But the SBA re-certification final rule effective January 16, 2025 cuts the other way. Following a merger, sale, or acquisition that triggers a disqualifying re-certification, a small business will be ineligible for future set-aside orders under Multiple Award Contracts (including MAS, starting January 17, 2026 for orders going forward).
CMMC 2.0: a market filter
The CMMC final acquisition rule took effect November 10, 2025. Phase 1 requires Level 1 or Level 2 self-assessments in applicable solicitations. By Phase 2 (November 10, 2026), Level 2 C3PAO certifications become mandatory for many CUI-handling contracts. Phase 3 (November 10, 2027) adds Level 3 DIBCAC assessments. Phase 4 (November 10, 2028) is full implementation across all applicable contracts and option periods. DoD’s rulemaking estimate cited approximately 8,350 medium and large entities requiring Level 2 third-party (C3PAO) certification as a condition of award. If you cannot show a credible CMMC path matching the work, you likely won’t win the contract.
Where to put your Business Development energy
Three rules guide pipeline construction.
First, build for the vehicle pattern of your target agencies — not for SAM.gov keywords. If your top agencies buy services through OASIS+, having a MAS contract without an OASIS+ position is half the picture.
Second, weight set-aside pursuits by your actual eligibility and recertification stability, not the certification you hold today. The January 2025 SBA recertification rule changes the math.
Third, factor compliance readiness into bid/no-bid — CMMC, accounting system adequacy, cybersecurity controls — because in a consolidated market the friction-free contractor wins.
The operational tie-in
Pipeline only matters if you can actually perform. The contracts in this market increasingly require cost-reimbursable accounting capability, clean labor distribution, and the ability to pass an SF 1408 pre-award accounting system survey at speed. The vehicles you want to be on (OASIS+, GWACs, large IDIQs) regularly carry that requirement.
Take the 3-minute DCAA Timekeeping Compliance Assessment to benchmark whether your operational foundation can carry the pipeline you’re trying to build. Strong / Moderate / At Risk scores across six areas tell you where to invest before your next major bid.