What's the right way to sell to a government/federal buyer?

**Federal sales requires a GSA Multiple Award Schedule (MAS) contract, a SAM.gov UEI (replaced DUNS on 2022-04-04), a CAGE code, primary NAICS (511210 for SaaS, 541512 for IT systems design, 541519 for IT staffing), and a 6-18 month procurement cycle governed by FAR Part 8.4 and FAR Part 15.

You compete on past performance (CPARS), compliance posture, technical approach, and price reasonableness, never on features or demos.** SUBAGENT_VERIFIED

Per GSA official MAS solicitation 47QSMD20R0001 (acquisition.gov), there are NO 'CDSSP 84.05' codes. Offers go under a Large Category / Subcategory / Special Item Number (SIN): Information Technology Category, SIN 54151S (IT Professional Services), SIN 511210 (SaaS / Cloud), SIN 33411 (Computer Hardware), SIN 54151HACS (Highly Adaptive Cybersecurity Services), SIN 54151ECOM (Electronic Commerce).

Twelve sourced specifics every founder must internalize:

1. GSA MAS award averages 110 days per GSA FAS dashboard. 60%+ of first-time submissions are rejected for incomplete Pathways to Success training or missing Commercial Sales Practices (CSP-1) disclosures.
2. FedRAMP Moderate authorization runs $2M-$2.5M and 12-18 months per fedramp.gov. 3PAO assessment alone is $250K-$500K (Coalfire, Schellman, A-LIGN dominate). Continuous monitoring (ConMon) is $40K-$80K/month indefinitely. FedRAMP High adds 50-80% more cost. The 2024 OMB M-24-15 rewrite (whitehouse.gov/omb) removed JAB approval and replaced it with the FedRAMP Authorization Board, simplifying agency-sponsored ATOs.
3. Micro-purchase threshold is $10,000 (FAR 2.101), simplified acquisition $250K, commercial item threshold $7.5M.
4. Section 889 Part B (effective 2020-08-13) bans contractors using covered Huawei/ZTE/Hytera/Hikvision/Dahua gear (FAR 52.204-25). 30% of would-be vendors fail this representation.
5. GAO bid protests must be filed within 10 days of award (or 5 days post-debrief) per 4 C.F.R. 21. Effectiveness rate (sustained or corrective) was 51% in GAO FY2023 Annual Report. COFC (Court of Federal Claims) protests at uscfc.uscourts.gov are an alternative when the GAO timeline closes; COFC has no automatic stay but offers de novo review.
6. DoD obligated $456B in FY2024 vs ~$300B civilian per USAspending.gov. DoD favors OTAs (10 U.S.C. 4022), Commercial Solutions Openings (CSOs), and SBIRs; civilian favors GSA Schedules, IDIQs, and BPAs.
7. SBIR Phase III is sole-source eligible without a dollar ceiling (sbir.gov policy directive), but only ~10% of Phase II awardees ever monetize a Phase III. Topics release 3x/year via topics.sbir.gov. DoD AFWERX (afwerx.com) and SOFWERX run their own accelerated SBIR/STTR cohorts, including the AFWERX Open Topic that lets vendors propose against a generic problem statement.
8. GWACs are the high-value lanes: NIH CIO-SP4 ($50B ceiling), GSA Alliant 2 ($75B ceiling, recompete imminent), NASA SEWP VI (products), GSA OASIS+ (services), GSA 8(a) STARS III ($50B small-business). Without a GWAC seat or a sub role, you are locked out of $200B+ in annual federal IT spend.
9. Capture-to-win conversion benchmarks (APMP/Shipley industry data, apmp.org): Bid/no-bid discipline of 30-40% bid rate, target Pwin >40% before submitting, average proposal cost $50K-$500K depending on complexity, color-team review cycle (Pink/Red/Gold/White) compresses 8-12 weeks of writing into a defensible package.
10. BAFO (Best and Final Offer) mechanics: After initial proposals, the contracting officer establishes a competitive range, conducts discussions, and requests final proposal revisions per FAR 15.307. Discounting in BAFO is the moment most amateurs leave 8-15% margin on the table; pros hold price and trade non-price terms (transition risk, key personnel, past performance addenda).
11. CMMC 2.0 phased rollout (32 CFR Part 170 final rule, effective 2024-12-16, DoD CMMC program): Level 1 self-assessment, Level 2 third-party C3PAO assessment ($60K-$300K), Level 3 DIBCAC government assessment. Mandatory in DoD contracts handling CUI starting in DFARS contract clauses through 2028. Adds $100K-$1M of compliance overhead.
12. Other Transaction Authority (OTA) mechanics under 10 U.S.C. 4021/4022: Research OTAs (4021) and Prototype OTAs (4022). Prototype OTAs require at least one non-traditional defense contractor or a one-third cost share. Production OTAs (4022(f)) are sole-source-eligible follow-ons to a successful prototype, the cleanest fast-path from SBIR/prototype to production scale (dau.edu OTA guide).

Federal Procurement Tiers (FY2026 thresholds):

Agency-by-Agency Tendencies (where to focus first):

• DoD (Army, Navy, Air Force, SOCOM, DIU): OTA-friendly. DIU and AFWERX move in 60-90 days. Avoid traditional FAR contracts as a startup. Submit via DSIP for SBIR/STTR.
• DHS: FirstSource III for SDVOSB/8(a). EAGLE Next-Gen for IT services. DHS S&T does SBIRs aggressively. Procurement Innovation Lab (PIL) pilots agile contracting.
• VA: T4NG2 ($65B ceiling) is the lane. SDVOSB Rule of Two preference (FAR 819).
• DOI / USDA / NPS: Lower compliance bar. Good first-ATO agencies for early-stage SaaS.
• GSA itself: Buys early to seed FedRAMP catalog. Pursue ATOs through GSA own customers (FAS, TTS, 18F, login.gov ecosystem).
• State, Local, Education (SLED): Not federal but uses GSA Schedule via Cooperative Purchasing. Sell to state CIOs and NASPO ValuePoint (naspovaluepoint.org).
• Intelligence Community (CIA, NSA, NRO, ODNI): Separate IC ITE ecosystem, requires TS/SCI cleared staff, In-Q-Tel as a strategic on-ramp (iqt.org).
• HHS / NIH / CDC: ARPA-H is the new BAA-driven biomedical innovation arm; aggressive on SBIR/STTR.

Federal CAC Payback Math (the part founders skip):

• Commercial mid-market SaaS: CAC $30K-$60K, ACV $25K-$80K, payback 12-18 months.
• Federal SaaS: pre-revenue compliance burn $2.5M-$3M (FedRAMP + GSA Schedule + bid and proposal + capture hires), then CAC per logo $200K-$400K (proposal labor at $150-$250/hr loaded), ACV $250K-$2M, payback 24-48 months. Federal LTV is high (5-year base + three 5-year options), but the J-curve is a 3-year cash dig.
• B&P (Bid and Proposal) reserves: budget 2-4% of federal revenue for B&P; below that, pipeline volume is too thin to hit Pwin >40%.
• Indirect rate structure: Federal cost-reimbursable contracts require a DCAA-compliant accounting system with provisional billing rates (Fringe, Overhead, G&A, F&CM). Without it, you cannot bid cost-reimbursable, only firm-fixed-price.

Capture and Color-Team Workflow:

1. Pursue gate (12-24 mo out): Identify opportunity via SAM.gov, agency forecasts, FedBizOpps history. Score Pwin.
2. Capture gate (6-12 mo out): Customer call plan, hot-button discovery, teaming agreements (prime/sub LOIs), draft RFP review, pre-RFP white papers and RFIs.
3. Pink Team review (40% draft): Strategy and theme check.
4. Red Team review (90% draft): Adversarial peer review, compliance matrix audit.
5. Gold Team review (final): Executive go/no-go.
6. White Team: Final compliance and production.
7. Submit, then prep for discussions and BAFO. Win rate uplift from disciplined color-team review: APMP data shows 25-40% Pwin lift vs unreviewed proposals.

The Real Federal Sales Motion:

• Past performance is gating. No fed past performance? Subcontract via an 8(a) prime, HUBZone, SDVOSB, or WOSB (sba.gov 8(a)). Joint Ventures (JVs) under SBA Mentor-Protege Program let small primes leverage large mentor past performance.
• GSA Schedule pricing is locked via the Price Reductions Clause and MFC disclosure. Discount commercially below tracked ratio and you owe a price reduction on every GSA order, historically the #1 IG audit finding and the leading False Claims Act vector.
• Capture management starts 12-24 months pre-RFP. When an RFQ hits SAM.gov, the requirement is already wired to an incumbent or a sole-source justification. Track via SAM.gov forecasts, FPDS-NG, and agency Forecast of Contracting Opportunities pages.
• End-of-fiscal-year (Sep 30) drives ~35% of annual obligations. Use-it-or-lose-it 1-year money spends aggressively in Q4. Continuing Resolutions (CRs) starve new starts and protect incumbents.
• Two distinct playbooks. DoD: SBIR Phase I -> Phase II -> OTA -> Production OTA -> Phase III sole-source. Civilian: 8(a) sub -> GSA Schedule -> BPA -> IDIQ prime -> GWAC seat.
• Sole-source justifications are real. FAR 6.302 authorizes sole-source under seven exceptions (only one source, unusual urgency, industrial mobilization, international agreement, statute, national security, public interest). A skilled capture team writes the J&A (Justification and Approval) with the agency, not against them.

Bear Case (why federal kills early-stage SaaS):

Federal is a cash-flow trap below $10M ARR. FedRAMP burns $2M-$2.5M plus $40K-$80K/month ConMon before first revenue dollar. Net-30 commercial becomes Net-60-to-120 in federal (Prompt Payment Act 31 U.S.C. 3902 nominally requires 30 days; agencies delay via invoice-rejection loops).

One Section 889 misrepresentation or one MFC pricing miss triggers False Claims Act exposure: treble damages plus $13,508-$27,018 per claim (DOJ FY2024 inflation-adjusted). Real precedents documented in DOJ press release archive: Oracle 2010 $199.5M FCA settlement over GSA Schedule MFC pricing, CA Inc. $111M settlement (2004), Carahsoft 2015 $61M settlement, NetCracker/Computer Sciences 2015 $12.75M, IBM $14.8M (2017), Cisco $8.6M (2019).

IG audits average 18-month timelines with discovery-heavy depositions. Eight recurring failure modes I have observed: (1) FedRAMP burn without a sponsor agency, you cannot self-authorize; (2) winning a $50K SBIR Phase I and assuming Phase III follows; (3) signing a Schedule before commercial pricing stabilizes, locking in below-cost rates for a 5-year base plus three 5-year options; (4) accepting a sub-tier role under a prime that owns the customer relationship and the CPARS; (5) protesting a loss and getting informally blacklisted by the contracting officer; (6) hiring a former government Senior Executive without enforcing the 1-2 year cooling-off period, triggering 18 U.S.C. 207 ethics violations; (7) misclassifying a small business size standard under 13 C.F.R. 121 and losing set-aside eligibility mid-performance via SBA size-protest; (8) failing to flow down required FAR/DFARS clauses to subcontractors, exposing the prime to liability for sub non-compliance.

If ARR is under $5M, you have no federal-experienced hire with prior agency relationships, and no sponsor agency for an ATO, expected NPV from federal is negative, raise commercial first.

Counter-Bear (when federal IS the right motion):

Federal works when (a) your product solves a mission requirement no commercial alternative addresses (defense, intel, cyber), (b) you have $15M+ ARR or $20M+ in unrestricted runway to absorb the 24-36 month J-curve, (c) you can hire a federal GM with a P&L track record at a peer firm, (d) you have a sponsor agency that will co-author your ATO package, and (e) your commercial pricing has stabilized so MFC lock-in does not destroy unit economics.

In those conditions, federal contributes 40-70% of revenue with 90%+ logo retention through option years, and a $5M ACV federal logo is structurally lower-churn than three $1.5M commercial logos.

Related Pulse knowledge:

• /knowledge/q47 - Enterprise sales cycle benchmarks
• /knowledge/q88 - Compliance-as-a-sales-motion
• /knowledge/q112 - Channel partner economics and prime/sub splits
• /knowledge/q133 - Multi-year contract structuring and ramp clauses
• /knowledge/q156 - Procurement-led buying committees
• /knowledge/q172 - CAC payback by segment
• /knowledge/q189 - SOC 2 Type II vs FedRAMP cost tradeoff
• /knowledge/q204 - DCAA-compliant accounting for federal contractors

TAGS: federal-sales, gsa-mas, sam-uei, fedramp, far-compliance, section-889, gao-protest, cofc, ota, sbir, gwac, cio-sp4, oasis-plus, cmmc, color-teams, bafo, dcaa, government-procurement