Can You Win a Federal Contract with a Gmail Address?

Can you win a federal contract with a Gmail address and no website? We analyzed 4,964 veteran-owned IT firms to find out.

Why SDVOSBs?

We started with a specific population: the SBA's registry of Service-Disabled Veteran-Owned Small Businesses certified under NAICS 541511 (Custom Computer Programming). That's 4,964 firms.

Why set-asides exist

The federal government reserves a portion of contracts for specific categories of small businesses. The logic is simple: without preferences, small firms can't compete with Lockheed Martin for a $50M IT contract, no matter how good they are. Congress set an overall goal of 23% of federal contracting dollars to small businesses, with sub-goals for specific categories:

How big is this market?

In FY2025, the federal government committed $833.8 billion on contracts - a record high. To put that in perspective:

The Department of War (the renamed Department of Defense as of FY2027) accounted for $508.8B of FY2025 contracting - 61% of the total. And they've proposed a $1.5 trillion FY2027 budget.

Of that $194B in small business contracting, the most recent scorecard data (FY2024) showed SDVOSBs received $32.8 billion (5.14%) - just barely clearing the 5% threshold for the first time since it was raised from 3% by the FY2024 NDAA. The old 3% goal had been met every year since FY2012.

Is it working? Depends who you ask. In FY2024, WOSBs still hadn't hit their 5% goal for prime contracts (4.97% - close but no). HUBZone missed at 2.75%. DoD missed 7 of its 10 small business goals in FY2024. And the total number of companies winning federal work dropped to 105,044 in FY2025 from 108,899 in FY2024 - more dollars, fewer winners.

Why SDVOSB is a useful study population

Most set-aside programs exist to address historical socioeconomic disadvantage. The 8(a) program targets socially and economically disadvantaged individuals. WOSBs address gender disparity. HUBZone targets geographic underinvestment.

SDVOSB is different. The certification is earned through military service and a service-connected disability - not socioeconomic circumstances. The Veterans Entrepreneurship and Small Business Development Act of 1999 (P.L. 106-50) established the original 3% goal. The Veterans Benefits Act of 2003 created the sole-source and set-aside procurement tools. The rationale isn't correcting marketplace discrimination - it's recognizing that veterans who were injured in service deserve preferential access as they transition to the private sector.

That makes SDVOSBs analytically interesting: every firm in this dataset has the same preferential access. They can all compete for sole-source awards up to $5M and SDVOSB set-aside competitions. The playing field is already tilted in their favor. So when 67.6% of them have zero contract awards, the question isn't "did the government give them a chance?" - it's "what distinguishes the firms that converted that access into revenue?"

And here's the other thing: according to a Congressional Research Service report, 55% of dollars awarded to SDVOSBs came through full and open competition, not set-asides. Only about 30% used an SDVOSB-specific preference (4% sole source, 26% set-aside). Most SDVOSB winners are competing and winning in the open market.

We cross-referenced these 4,964 firms against USAspending.gov contract award data using each firm's Unique Entity Identifier (UEI) for exact matching, and profiled their technology stacks using the BuiltWith API.

The question: does your digital presence predict whether you'll win?

The Gmail Baseline

Of the 4,962 firms we matched to USAspending.gov data (2 excluded due to API errors):

The difference is statistically significant: chi-square = 214.9 (p < 0.001). Firms with corporate email domains are 5.8 times more likely to have won federal contracts than firms using personal email.

But here's the thing: 49 firms with @gmail.com addresses have won federal contracts. The largest Gmail winner - FG Management Group - holds $36M in awards. A Gmail address is clearly not disqualifying. But the median Gmail winner holds $358K - compared to $5.4M for corporate-domain winners. The typical Gmail-address firm that wins gets much smaller contracts.

Why Gmail actually hurts: it's not just correlation

There's a documented reason beyond correlation. The GSA Office of Inspector General and Commerce Department OIG have both issued fraud alerts warning that fake procurement solicitations commonly originate from commercial email domains. The DOC OIG states explicitly: "Government agencies will not redirect you to a commercial domain to conduct procurement business." The GSA OIG instructs recipients to "make sure the sender's domain is the correct domain affiliated with the government agency."

These alerts train contracting officers and vendors across multiple agencies - Commerce, Interior, GSA, Transportation, State - to treat non-.gov email as a fraud indicator. A capabilities response from contractor@gmail.com sits adjacent to a known fraud pattern in a procurement officer's mind. It's not that Gmail is illegitimate - it's that the procurement environment is actively primed to associate commercial email with impersonation scams.

That's a mechanistic reason a Gmail address hurts, separate from the correlational data above.

Part of this gap is also structural: firms sophisticated enough to register a corporate domain are, on average, more mature on every dimension - age, revenue, staff, BD process - than firms still using personal email. The corporate domain proxies firm maturity, not just email preference.

Reconciling the numbers

Here's how the full population breaks down:

Corporate-domain firms make up 85% of the population and 96% of the winners. That's how a 36.4% corporate win rate coexists with a 32.4% overall win rate - the personal-email firms (15% of firms, 4% of winners) drag the blended rate down.

The Population: Most SDVOSBs Have Never Won

Of the 4,962 firms we matched:

• 32.4% have won at least one federal contract (95% CI: 31.1% - 33.7%)
• 67.6% have never received a federal contract award

More than two-thirds of registered SDVOSBs in custom software have zero federal revenue. The median winner holds $4.7M in cumulative awards, but the distribution is heavily right-skewed - the top 10% of winners hold 68% of total dollars.

What's on Their Websites?

We used BuiltWith's technology profiling API to scan 693 firms and detect what software, frameworks, analytics tools, and infrastructure they run. We then scored each firm on web maturity (0-10) based on the presence of these technology signals.

The core finding: higher web maturity scores correspond to larger contract portfolios.

The Spearman rank correlation between web score and log-transformed contract awards is rho = 0.218 (p < 0.001, n = 591). (The BuiltWith sample of 693 firms includes 591 winners and 102 non-winners.) Statistically significant, but modest - web presence explains roughly 4-5% of the variance in contract outcomes. The practical pattern: firms scoring 7+ have a median 6.1x higher than firms scoring 0-2.

(We collapse the 7-8 and 9+ tiers into a single "7+" bucket because the 9+ group contains only 30 firms with a wide confidence interval. The relationship is monotonic through 7-8, then flattens - likely a small-sample artifact.)

The Signals That Distinguish Winners

We tested each technology signal individually against contract outcomes. Two pass statistical scrutiny:

Firms with a careers page or hiring platform integration (Greenhouse, Lever, iCIMS) are 5.4 times more likely to have federal contract awards.

Important caveat: the hiring signal is concurrent, not causal - firms that are actively recruiting have contracts to staff, so a Greenhouse integration tells you a firm is already executing on funded work. It's diagnostic rather than actionable. The plausibly actionable signals are the ones a prospective contractor can actually change: corporate email domain, CMS choice, structured capabilities content, and visible technical depth.

The Drupal Question

Among contract winners, the choice of CMS correlates with the scale of awards:

Drupal firms show median awards 10.2x higher than Webflow firms. Why?

The short answer is that Drupal is the dominant CMS for federal government web properties, so firms that use Drupal for their own sites tend to be firms that build Drupal sites for the government. According to a Promet Source study of identifiable CMS usage on government websites, Drupal holds 22.2% of that government CMS market - double WordPress at 11.1%. Acquia reports that 56% of government websites worldwide use Drupal.

But why does the government use Drupal in the first place? Can't WordPress do the same things?

Technically, yes - WordPress can achieve Section 508 accessibility compliance through plugins and accessible themes, and WordPress VIP has FedRAMP Moderate authorization. But there are real differences:

• Security: Drupal has built-in granular access controls, semantic HTML5, and ARIA landmarks in core. WordPress achieves compliance through its plugin ecosystem - and plugin vulnerabilities account for 55.9% of all WordPress attack entry points. WordPress accounts for 74% of hacked websites (at 64% market share); Drupal accounts for ~2% of attacks.
• Federal-specific tooling: Drupal has the U.S. Web Design System (USWDS) distribution built specifically for federal agencies - 508-compliant components, proper heading hierarchies, keyboard navigation out of the box. WordPress has no equivalent federal distribution.
• Identity and compliance: Drupal integrates natively with federal identity providers (PIV/CAC card authentication) and supports the NIST 800-53 security controls federal sites require.

There's also an honest element of institutional momentum. Government agencies invested in Drupal infrastructure early, built their teams around it, and kept expanding on it. That's partly "behind the tech curve" as you might expect from government IT, and partly a rational choice - when you already have Drupal expertise, compliance tooling, and security audits in place, switching to WordPress to save money on development introduces risk for unclear benefit.

So the Drupal signal in our data isn't really about which CMS is "better." On the open web, Drupal powers only about 1.1% of all websites - but among identifiable government CMS installations, it holds 22.2%. That 20x concentration ratio makes it a strong domain signal. WordPress, by contrast, powers 42% of all websites globally but only 11.1% of government sites - roughly proportional to its general market share. Seeing WordPress on a corporate site tells you nothing specific about what kind of work a firm does. Seeing Drupal does.

Content Depth: What Top Firms Actually Publish

We crawled the websites of 60 SDVOSB firms across CMS types and award tiers, parsing sitemaps and checking for eight standard content sections: capabilities/services, contract vehicles, careers, about, leadership, partners, certifications, and news/blog. Of the 60 domains, 45 were accessible (75%) and 34 had parseable sitemaps.

The most common content sections across all accessible sites: capabilities (84%), about (80%), news/blog (62%), careers (58%), contract vehicles (56%), and leadership (53%). Partners and certifications pages appeared on only 22% of sites each.

By award tier, the pattern sharpens:

Firms with over $100M in awards average 4.9 content sections out of 8, while firms under $1M average 3.0. The Spearman rank correlation between content section count and total awards is rho = 0.244 (n = 45) - modest but consistent with the broader web maturity correlation.

The top-scoring sites in our crawl - Harkcon ($153M, 7/8 sections, 218 sitemap pages), TL Services ($309M, 6/8 sections, 403 pages), and Minburn Technology Group ($4B, 6/8 sections, 55 pages) - all publish contract vehicle pages, partner listings, structured service descriptions, and active news sections. They have the kind of structured content that procurement officers look for during market research.

At the other end, firms like Sciolex Group ($307M) and GXM Technologies ($129M) have won large despite minimal web content (0-1 sections). These are exceptions that prove the rule: they likely win through incumbent relationships and direct teaming rather than inbound market research.

What We Scored (Methodology)

For transparency, here's the web maturity scoring model we used:

Each firm's website was assessed for eight technology signals detectable by BuiltWith: live website (+1), content management system (+1), web analytics (+1), CDN (+1), marketing automation (+1), hiring platform (+2, double-weighted due to statistical significance), DevOps tooling (+1), and modern JavaScript framework (+1).

This is an additive model - not a regression, not machine learning. The double-weighting of the hiring signal is based on its observed significance in the data, not pre-registered. The score is a proxy for digital maturity, not a formula for winning contracts.

Limitations

What this analysis can and cannot tell you:

• Can: Identify a statistically significant (but modest) correlation between web maturity and contract outcomes at the population level
• Cannot: Predict whether any specific firm will win contracts based on its website
• Cannot: Establish causation - web investment may be a result of contract success, not a cause

Data sources: - SBA Dynamic Small Business Search export (NAICS 541511, SDVOSB certification, May 2026) - USAspending.gov Recipient Search API (all-time obligated amounts, UEI-based exact matching) - BuiltWith API v21 (current and historical technology detection, 693 domains)

Known biases: - VetCert transition bias. The SBA eliminated SDVOSB self-certification effective October 1, 2024; only firms certified through VetCert now qualify. Our May 2026 registry is entirely VetCert-era, but the USAspending award history spans both the pre-2024 self-certification era and the current regime. Some recent certificants will appear as "non-winners" simply because they have not had much post-certification runway yet, biasing the 67.6%-never-won figure upward. The SBA export lacks certification dates, so we cannot segment by cohort. - BuiltWith detection limits. BuiltWith detects only client-side technologies. Server-side tooling is undercounted. - Sample scope. The BuiltWith sample requires corporate email domains, excluding firms using personal email. Our personal-email analysis uses the full 4,962-firm USAspending dataset. - Survival bias. Firms that have won large contracts can afford better websites. The direction of causation is ambiguous. The hiring signal in particular is a concurrent indicator (a symptom of current execution) rather than a leading predictor.

What This Means

Five findings, in order of statistical strength:

1. A corporate email domain is the biggest baseline signal. Corporate-domain firms are 5.8x more likely to have won contracts (p < 0.001, n = 4,962). This isn't just correlation - federal fraud alerts actively train procurement officers to treat commercial email domains as a scam indicator. But 49 Gmail-address firms have won too, including several with multi-million dollar portfolios.

2. The hiring signal is the strongest concurrent web technology indicator. Firms with a careers page or hiring platform are 5.4x more likely to be contract winners (p < 0.001). But this is diagnostic, not causal - a Greenhouse or Lever integration tells you a firm is already executing on funded work, not that adding one will help you win.

3. Web maturity correlates modestly with contract scale. Spearman rho = 0.218, p < 0.001. Real but modest - the relationship exists at the population level but explains only a small fraction of individual outcomes. Don't expect a website redesign to win contracts. Do expect that contracting officers conducting market research will form impressions from what they find.

4. Drupal signals federal web specialization. It's the most-used CMS on government websites (22.2% vs. WordPress at 11.1%). Firms running Drupal on their own sites tend to be firms building Drupal sites for the government. WordPress is too ubiquitous to signal anything specific.

5. Your website is your public capabilities statement. GSA and agency procurement teams conduct market research online. In our crawl of 60 SDVOSB websites, firms with over $100M in awards averaged 4.9 out of 8 standard content sections (capabilities, contract vehicles, careers, about, leadership, partners, certifications, news) - compared to 3.0 for firms under $1M. Contract vehicle pages, partner listings, and structured service descriptions are the digital equivalent of a capabilities brief.

A Gmail address won't disqualify you. But the data says that the firms that invest in their digital presence - at every level from email domain to technology stack - win more often and win bigger.