If you hold a federal prime contract above $900,000, or $2 million for construction, you almost certainly carry a small business subcontracting plan under FAR 52.219-9, with a goal line for Service-Disabled Veteran-Owned Small Businesses. That goal got bigger. The FY2024 NDAA (P.L. 118-31) raised the government-wide SDVOSB subcontracting target from 3% to 5%. So you need more SDVOSB dollars, and the supply of firms that legitimately count toward them just got narrower.
Here's why the supply narrowed, and where to find the firms that still qualify.
Self-certification is gone, and that changes who countsFor years a veteran could check a box in SAM.gov and represent the business as an SDVOSB. That ended. Under the FY2024 NDAA, the SBA eliminated SDVOSB self-certification for any award that counts toward an agency or subcontracting goal. Firms that applied to SBA's Veteran Small Business Certification program (VetCert) by December 22, 2024 could keep self-certifying while their application was pending. Everyone else lost the ability to self-certify after that date.
What this means for you as the buyer: a subcontract only counts toward your SDVOSB goal if the firm is certified through VetCert. A self-attested SDVOSB on a capability statement does not count anymore, no matter how the owner describes the business. The certification function moved from the VA to SBA on January 1, 2023, and the program runs at veterans.certify.sba.gov. Status verification is the part most subcontracts managers still get wrong, so treat the certification check as a hard gate, not a formality.
This is a sourcing problem and a compliance problem at the same time. Miss the goal, and your contracting officer sees it. Count a subcontract that shouldn't have counted, and you have a reporting integrity issue. Both are avoidable with the right source list.
The three federal sources, and what each is good forThere's no single perfect directory. Use these together.
VetCert (veterans.certify.sba.gov). This is the system of record for whether a firm is a certified VOSB or SDVOSB. It's where the certification lives. You'll use it to confirm a specific firm's status before you award. It's a verification tool more than a discovery tool, because you generally need to know who you're checking.
Dynamic Small Business Search (DSBS). This is SBA's searchable database of small businesses, built from their SAM.gov registrations. DSBS is your discovery engine. You can filter by NAICS code, keyword, location, and socioeconomic status, and certified veteran-owned and service-disabled veteran-owned firms appear under the government certifications section of each profile. SBA has pointed contracting officers to DSBS as the place to confirm SDVOSB certification status, since the data syncs from the certification program. If a firm shows the SDVOSB government certification in DSBS, that's a strong signal it's legitimately certified. For older firms that predate the current data sync, a static VetCert list still exists, and SBA has said it will sunset that list once SAM is fully updated.
SUBNet. SBA's subcontracting opportunities database lets prime contractors post notices of subcontracting opportunities that small businesses, including SDVOSBs, can browse and respond to. One caveat worth knowing: the ability to post new opportunities on SUBNet has not been consistently available, so don't rely on it as your only outbound channel. It's still useful for searchable, posted opportunities by state, and FAR cites the use of federal systems like DSBS and SUBNet as part of the good-faith-effort standard.
A practical workflow: discover candidates in DSBS by your NAICS and geography, confirm each one's certification in VetCert or via the DSBS government-certification field, and post the opportunity where qualified firms can find you.
Verifying status the right wayTreat verification as a documented step, not a vibe. When you identify an SDVOSB subcontractor, confirm the certification is active in VetCert or reflected in the firm's DSBS profile, and save a dated screenshot or record in your subcontract file. If a firm tells you it's "in process," that no longer lets it count toward your goal unless it falls under the narrow grace-period window tied to the December 22, 2024 application deadline, and that window is effectively closed for new firms now.
Watch for the common mistakes:
- A SAM.gov representation that says veteran-owned is not the same as a VetCert certification. The representation alone doesn't make the subcontract count.
- VOSB and SDVOSB are different. Only the service-disabled tier counts toward the 5% SDVOSB goal. Confirm which one the firm holds.
- Size matters. SDVOSB status is a small business designation. A veteran-owned firm that has outgrown the size standard for the relevant NAICS code isn't an SDVOSB for goal purposes.
If you also source from corporate or non-federal channels and need to confirm who issues a given credential, our directory of certifying bodies maps out the organizations behind each certification so you're not guessing what a badge actually means.
How this rolls up to your reportingYour SDVOSB subcontract dollars don't just sit in a spreadsheet. They report up through the Individual Subcontract Report (ISR) and the Summary Subcontract Report (SSR), required under paragraph (l) of FAR 52.219-9. The system behind those reports changed recently. The Electronic Subcontracting Reporting System (eSRS) at esrs.gov was retired on February 20, 2026, and subcontracting reporting moved into SAM.gov at sam.gov/esrs. If your team still has muscle memory pointed at the old eSRS portal, redirect it.
A few mechanics carried over and a few changed. You still file ISRs for individual contracts and an SSR that summarizes activity, and good-faith effort is still the standard a contracting officer judges you against if you fall short of a goal. Under the migration, NAICS and PSC codes are no longer required on the ISR and SSR the way they were, and SBA added an AI-assisted review of submitted goals, actuals, and remarks in place of the old contracting-officer acknowledgment workflow. SBA also extended the mid-year ISR deadline during the transition, so confirm the current due date in SAM.gov rather than assuming the historical October 30 annual date and June mid-year cadence.
The reason verification and reporting are joined at the hip: a subcontract you report as SDVOSB needs to survive scrutiny. If the firm wasn't VetCert-certified at the time of award, that dollar shouldn't be in your SDVOSB line. Building the certification check into your award process keeps your ISR and SSR clean.
What the 2025 policy shift did and didn't touchThere's understandable confusion in procurement shops after the 2025 rollback of federal contractor affirmative-action requirements, when Executive Order 11246 was rescinded. That change hit voluntary, employment-side obligations. It did not repeal the statutory small business subcontracting program. FAR 52.219-9, the subcontracting plan requirement, the SDVOSB goal, and the ISR and SSR reporting obligations are creatures of the Small Business Act and the FAR, and they're still in force. If your prime contract carries the clause, you still owe the plan and the report. Frame this internally as compliance and small-business economic impact, because that's what it legally is.
Where to start your searchBuild a working list of certified SDVOSB firms that match your NAICS codes and the work you're subcontracting, then confirm each one's status before you commit.
Our supplier directory lets you search certified diverse and small suppliers, including service-disabled veteran-owned firms, filtered by what they do and where they operate, so you can shortlist candidates and then verify their federal certification in VetCert or DSBS before award. If you're standing up a broader sourcing process across multiple goal categories, our guide to the cheapest path to federal contracts in 2026 covers the registrations and systems both sides of the table rely on.
Find the firms first. Verify before you count. Report it clean.
