A contract specialist at a regional installation has a recurring HVAC maintenance requirement and a need date six weeks out. She opens SBA’s Small Business Search, sets the industry code, sets her state, checks Service-Disabled Veteran-Owned Small Business, then sets one more filter most vendors don’t know is there. Profile status, within the past 6 months.
Forty minutes from her gate there’s a firm that has done exactly this work for fifteen years. The owner is a service-disabled veteran certified through SBA, so he clears that filter. The freshness filter is where he disappears.
Nothing about that firm is careless. He registered himself, got his number, entered his banking, and stopped, because his screen said he was finished. He hasn’t opened his SBA profile since, and that date sits in the Last updated column her filter reads. The half he never finished has a price, and he pays it across the next year without ever seeing the bill.
The half of the foundation nobody finishes
SAM.gov registration runs in four parts: Core Data, Assertions, Representations and Certifications, and Points of Contact. Somewhere in there you get your Unique Entity Identifier, the 12-character code that replaced DUNS. Numbers feel like completion.
The SBA side is the half most first-time registrants never touch. Until July 2025 it was the Dynamic Small Business Search. SBA retired that name and moved the tool to Small Business Search at search.certifications.sba.gov. Profiles carried over with a catch: you have to claim your business before you can edit anything in it. Firms that never claimed are locked out of every field that matters and don’t know it.
Behind that claim sit a capabilities narrative, a separate keywords field, bonding levels, a quality assurance standards pick list, and a capabilities statement link. Then Performance history, where every entry carries a customer, a contract value, dates, and a reference somebody can call. There’s no field anywhere for a facility or personnel clearance. People who worked the old tool go looking. Put clearance detail in your capability statement instead.
The search box reads, word for word: Search by name, UEI, CAGE code, narrative, or keywords. CAGE is your Commercial and Government Entity code, assigned with registration. Your narrative and your keywords are the text a buyer’s query runs against. Your website isn’t.
What the buyer sees in the results list
In the results table your narrative shows as a short preview, cut off mid-sentence and closed with an ellipsis. Whatever sits past the cut needs a click a specialist under deadline may never make.
Every empty field renders as the italic words Not Provided. A half-built profile shows up as a column of those two words, and someone scanning twenty firms forms a view in four seconds.
The fields that quietly delete you
Advanced search filters by industry code, location, SBA certifications, ownership and self-certifications, capability keywords, bonding levels, quality assurance standards, and profile status. Every blank field is a filter you fail without knowing. Hold ISO 9001, skip the quality standards pick list, and you’ve hidden a real credential.
Two of those filters look alike and behave nothing alike. SBA certifications is a vetted list: 8(a), SBA’s program for socially and economically disadvantaged firms, HUBZone, for firms sited and staffed in historically underutilized business zones, and the women-owned and veteran-owned categories. SBA read a file before any of that landed next to your name. Ownership and self-certifications is whatever you told SAM.gov about yourself, and the tool warns buyers on screen that those attestations are not vetted. A veteran with a disability rating who never applied through VetCert, SBA’s veteran certification program, sits in the second list and is missing from the first. The first is the one she filters on when her agency is behind on its veteran goal.
Profile status is the one that hurts. It limits results to profiles updated Anytime, within the past 3 months, within the past 6 months, within the past year, or a custom range. Yours, last touched the day you registered, is gone under everything but Anytime.
Then there’s the export. Buyers pull results into a spreadsheet: narrative, capabilities statement link, certifications, codes, bonding levels, keywords, contact name and email. A separate function exports email addresses alone, which is how sources sought lists get built. A blank contact field puts you in the file and never in the email.
Opting out of public display in SAM.gov usually starts with a bookkeeper trying to cut the spam. Your profile then carries a notice telling every viewer you opted out, and you vanish from primes, state buyers, and anyone without a .gov or .mil sign-in.
Codes that describe you instead of what they buy
Under 13 CFR 121.402(b) the contracting officer designates the industry code, not you. She picks “the single NAICS code which best describes the principal purpose of the product or service being acquired,” NAICS being the North American Industry Classification System every solicitation runs on. One code per solicitation. So you need to sit under the code an officer will type, not the one you’d use for your own company, mechanics we took apart in a separate piece on the codes you picked.
One firm enters a single code off the state license. It’s honest, and it covers one slice of how the government buys the work. Another loads forty on the theory that surface area equals opportunity, which reads as unfocused next to a specialist and puts size status in play across markets it never meant to enter. A third makes the roomiest size standard its primary code, which buys nothing: solicit under a different code and your size gets measured against that one. Primary NAICS code is a column in every buyer export.
The small business assertion in SAM is set per code, not once for the company. Every code you add carries its own affirmation that you’re small under that standard. Leave one unaffirmed and you drop out of size-filtered searches under that code while still qualifying on paper.
Product and Service Codes get skipped by nearly every DIY registrant. They’re the four-character codes for what the government actually bought, entered in the same Assertions section. The solicitation carries one. If your record doesn’t, you’ve given up a whole axis of matching.
Size status is fixed the moment you submit an offer that includes price, measured against the code in that solicitation, using receipts averaged across your five most recently completed fiscal years, not three. And when SBA changes a standard, nothing recalculates on its own.
The words that match nothing
Commercial marketing language costs you here in a way you can’t feel. “Innovative solutions.” “Trusted partner.” “Customer-focused.” “Turnkey.” None of those are words a contract specialist types into a search box, and none of them settle a question the buying side has to answer.
That copy usually isn’t bad writing. Someone competent wrote it for a commercial market where it earns its keep. Federal search is the room where it stops working, because the reader is a query and the query wants nouns.
This is the shape of it, before and after.
Before: “Founded in 2011, we are a customer-focused provider of innovative facility solutions and a trusted partner to clients and owners throughout the region…”
After: “HVAC preventive maintenance, chiller and boiler service, air handler replacement, and direct digital controls integration for federal and municipal fa…”
Both get cut at the same place, because the table gives every firm the same short preview. Same firm, same truth. One survives a keyword search on the nouns in her requirement. The other spent its whole preview on a founding year and three adjectives.
Keywords get treated worse, usually left blank. That field is free space for pure indexing. Fill it with nouns out of real solicitations: preventive maintenance, chiller, air handler, boiler, direct digital controls, refrigerant recovery. A specialist who needs a chiller serviced types the word chiller. She has no reason to try a synonym.
The capability statement is the same failure in a suit. Either there’s none, or a sales brochure got renamed and uploaded. Small Business Search renders that link in the buyer’s results table, so a brochure there is worse than no link at all. She opens it building her contact list and closes it without finding a UEI, a code, or a phone number. What belongs in it is covered in the capability statement federal buyers actually read.
The row that is your company
You see a company. Fifteen years of it. The technician you trained who runs his own crew now. A customer who called at nine last night about a dead compressor and got you on the second ring, because that’s how you’ve run the place since the day you opened it.
The government sees a row. Business name. UEI. CAGE code. Primary code. All codes. Which codes you asserted small status under. Size. Active certifications. The opening line of your narrative. Keywords. Bonding levels. Quality assurance standards. Contact name and email. SAM status. Last updated date.
That row is the artifact. Whatever you’re proud of that never landed in a field did not happen.
Nobody on the buying side thinks you’re a bad company. They haven’t thought about you at all.
“I was never shopping when I opened that search. I was building a file my small business specialist had to sign. If two firms on the screen could carry the work, I wrote the set-aside. If I honestly couldn't tell, I wrote the memo that says I looked, and that memo closes the door for a year.”
What gets checked, and when
Market research happens long before anything you can bid on exists. Part 10 of the Federal Acquisition Regulation governs it today, and it still sends contracting officers to the SBA search under the name SBA retired a year ago. A proposed rule published June 23, 2026 would remove Part 10 outright and move market research to a new Subpart 7.2. Comments closed July 23 and nothing is final. The behavior outlives the renumbering: Defense policy tells the officer to run that search and attach the results to the Market Research Report.
On a Defense action that report isn’t paperwork theater. The officer certifies by signature whether the results support a set-aside. It travels with DD Form 2579, the Small Business Coordination Record. Block 7c carries the industry code. Block 11a holds the market research results and the sources sought submissions. Blocks 16 through 16f are where the agency Small Business Professional signs concurrence, or doesn’t.
That’s what gives a sources sought response its weight. A brochure sent in reply becomes evidence that capable small firms couldn’t be found.
The set-aside decision runs on FAR 19.502-2. Above the $15,000 micro-purchase threshold and at or below the $350,000 simplified acquisition threshold, the officer shall set the work aside unless there’s no reasonable expectation of offers from two responsible small businesses. The rule qualifies that: the two have to be competitive in terms of market prices, quality, and delivery. That’s the escape hatch, and it’s the one officers write to. Both dollar figures moved up on October 1, 2025, from $10,000 and $250,000, and Part 19 hasn’t been touched by the rewrite, so the rule of two reads today the way it reads in the book.
Declining to set work aside is the decision that demands written justification and invites a non-concurrence, so the pressure runs in your favor. The specialist wants two qualified small firms on her screen.
By the time a solicitation is visible, the code and the set-aside are locked. Under FAR 5.101 an action expected to exceed $25,000 gets synopsized on SAM.gov, and under FAR 5.203 the notice goes up at least 15 days before the solicitation issues. What decided your fate happened months earlier, when your profile was the only thing speaking for you.
Responsibility comes last, under FAR 9.104-1: financial resources, schedule, performance record, integrity, technical skills, equipment. For a first-time contractor with nothing in CPARS, the government’s performance reporting system, the only answers are your proposal, your capability statement, and your Performance history entries. FAR 9.104-1(c) says a firm can’t be found nonresponsible solely for lacking one, and such a finding against a small business goes to SBA for a Certificate of Competency under FAR Subpart 19.6.
Why the bill arrives a year late
Bad foundations are expensive for one reason: the feedback loop is a year long. Defense policy treats market research as good for up to twelve months for awards, and the proposed rewrite would set eighteen government-wide. Fix your profile in month two of somebody’s research cycle and you’re invisible to that requirement until the next one.
Meanwhile the spending starts. A bid subscription. A conference booth. Proposal hours on pursuits found through public postings, where the set-aside was decided months ago and the incumbent already knows the customer.
Then comes the conclusion that ends it. After a year of silence, a reasonable owner decides the market is wired and quits it. SBA released the fiscal 2025 scorecard on June 25, 2026: $179 billion in prime contracts to small businesses, close to 28 percent of all prime dollars against a 23 percent goal. The same scorecard puts the small disadvantaged share at 11.6 percent, its first decline in ten years. Money moved the whole time he sat still.
What you can genuinely do alone
A disciplined owner can complete SAM end to end, Assertions included. You can claim your Small Business Search profile, write a real narrative, fill the keywords field to the last character it allows, and load a decade of commercial and municipal work into Performance history. SBA charges nothing for any of it, and an APEX Accelerator will help you at no cost across roughly 95 centers nationwide. Those are the federally funded counseling offices called Procurement Technical Assistance Centers until Defense renamed them in 2023.
What almost nobody gets right alone takes seeing the buyer’s screen. Which code a specific agency solicits your work under, as opposed to which one describes it. Which nouns run through the statements of work your competitors win. Whether two other small firms are already visible in your market, because that count is the whole set-aside conversation. That comes from sitting in the chair with the memo due Friday.
Nobody owns the clock
Registrations rot. SAM expires at 365 days, and entity validation can add weeks when a legal name or address changed, so starting on the expiration date is already late. Certifications run their own clocks. HUBZone recertification runs on a three-year cycle under 13 CFR 126.500, filed in the 90 days before the triennial anniversary of your certification date. What you have to swear to at that moment turns on the prior year: a firm that won a HUBZone contract in the preceding twelve months represents that it is attempting to maintain the 35 percent HUBZone-resident employee level, while a firm that won none has to actually be at 35 percent on the day it recertifies. The social disadvantage standard inside 8(a) is in open flux, with a proposed rule from June 11, 2026 that isn’t final.
No system sends one person one email about any of that. When we build a foundation through our core packages, one named person owns those clocks and refreshes the profile quarterly. Even the tightest window on that filter, within the past 3 months, never quietly drops a client out of a search.
Start here
Then look at your own profile the way a stranger would, the exercise behind how buyers actually search SAM. Open it signed out and count the fields that say Not Provided.
The specialist had her HVAC maintenance under contract six weeks later, on schedule, and closed the file. Forty minutes from her gate, the man who’d done that exact work for fifteen years never knew the search ran.