A capability statement is a one-page marketing document that introduces your business to federal agencies and large prime contractors: who you are, what you do well, and why an agency should shortlist you before a solicitation is even posted. The federal government aims to award at least 23 percent of its contracting dollars to small businesses each year, and a sharp one-pager is often what gets a small firm into the room. Below is what belongs on the page, how to lay it out, and the mistakes that keep good companies off the list.
The Identifiers Agencies Expect to See
Before you write anything, register in the System for Award Management. Federal Acquisition Regulation Subpart 4.11 requires contractors to be registered in SAM before submitting offers on federal contracts.1Acquisition.GOV. FAR Subpart 4.11 – System for Award Management Registration produces two identifiers that belong at the top of your capability statement.
The first is your Unique Entity ID, a 12-character alphanumeric code SAM assigns to track federal awards. It replaced the old DUNS number, and it is free.2SAM.gov. Entity Registration The second is your Commercial and Government Entity (CAGE) code, a five-character identifier tied to a specific physical location that you’ll need before you can be paid on a federal contract.3Acquisition.GOV. 48 CFR 52.204-16 – Commercial and Government Entity Code Reporting Include both. Their absence tells a contracting officer you haven’t cleared the basic prerequisites.
Round out the identification block with your legal business name, point of contact, phone, email, and website.
Core Competencies and Past Performance
Core competencies are the two to five things your company does better than most competitors. Resist listing everything you could theoretically do. Agencies care about what you’ve actually delivered, not what you’re willing to attempt. A cybersecurity firm might list network vulnerability assessment, incident response, and compliance auditing. A construction firm might list federal facility renovation, environmental remediation, and concrete restoration. Pick the ones you can back with proof.
Paired with competencies is a past performance section, and this is where many capability statements fall apart. Businesses either skip it or describe projects so vaguely that a contracting officer can’t evaluate them. For each project, include the client name, a brief description of the work, the contract value, and whether you delivered on time and within budget. Three to five recent projects is the sweet spot. Agencies weigh past performance heavily because it’s the most reliable predictor of how you’ll perform on their contract.
Differentiators That Actually Differentiate
Every firm bidding on federal work claims to be qualified. Differentiators explain why you’re the better pick: proprietary technology, specialized equipment, staff certifications like Project Management Professional credentials, or active security clearances. Be specific. “Three employees hold active TS/SCI clearances” hits harder than “cleared personnel available.”
Bonding and Insurance
If you pursue federal construction contracts, bonding capacity matters. The Miller Act requires both a performance bond and a payment bond on any federal construction contract exceeding $100,000.4Office of the Law Revision Counsel. 40 USC 3131 – Bonds of Contractors of Public Buildings or Works Stating your bonding capacity and insurance limits gives agencies immediate financial assurance. Even outside construction, agencies appreciate seeing general liability and professional liability coverage.
Certifications That Open Doors
Small business certifications can dramatically improve your odds because agencies actively seek certified firms to help meet their contracting goals. Two SBA programs carry particular weight.
The 8(a) Business Development Program lasts nine years and gives eligible disadvantaged businesses access to sole-source contracts worth up to $4.5 million, or $7 million for manufacturing work. Sole-source means the agency can award the contract directly to you without full competition.5U.S. Small Business Administration. 8(a) Program Administration
The HUBZone program requires that your principal office sit in a historically underutilized business zone and that at least 35 percent of your employees live in a HUBZone. Certified firms receive a 10 percent price evaluation preference in open competitions and must recertify every three years.6eCFR. 13 CFR 126.200 – Requirements To Be a Certified HUBZone Small Business Concern7U.S. Small Business Administration. HUBZone Program
Also worth listing: Women-Owned Small Business, Service-Disabled Veteran-Owned Small Business, and any state-level disadvantaged business certifications relevant to your target agencies. If you hold any of these, put them near the top of the page where they’re impossible to miss.
NAICS and Product Service Codes
Every federal contract is tagged with a North American Industry Classification System (NAICS) code and a Product Service Code (PSC). NAICS codes describe your industry; PSCs describe the specific goods or services you provide. Contracting officers use these codes to search for vendors in SAM, so getting them right determines whether you appear in results at all.
List your primary NAICS code and any secondary codes reflecting work you have actually performed. The same goes for PSCs. Both sets should match what’s in your SAM profile so an officer can confirm alignment with a procurement at a glance.
Formatting the One-Pager
Contracting officers scan stacks of these documents quickly. The Department of Health and Human Services recommends keeping capability statements to one page (front and back at most), presented concisely with bullets and highlighted sections for readability.8HHS.gov. How to Write a Good Capability Statement Most experienced contractors stick to a single side because it forces prioritization and makes the document easier to hand off at events.
Save the final version as a PDF. Word processing files shift formatting across systems and are easy to edit by accident. A PDF locks everything in place. Use clear section headings, your company logo, and a professional color scheme that matches your other marketing materials. Leave enough white space that the page doesn’t feel like a wall of text. If it looks crowded, something needs cutting.
Have someone outside your company proof it before you send it out. Typos on a one-page document leave a worse impression than they would on a 50-page proposal, because there is nowhere to hide.
Cybersecurity Callouts for DoD Work
If you plan to pursue Department of Defense contracts, cybersecurity readiness belongs on the page. The Cybersecurity Maturity Model Certification (CMMC) program is rolling out in phases. During Phase 1 (November 2025 through November 2026), solicitations focus primarily on CMMC Level 1 and Level 2 self-assessments. Starting in November 2026, Phase 2 solicitations will require Level 2 certification by an authorized third-party assessment organization.9Department of Defense Chief Information Officer. About CMMC
Level 1 covers 15 basic security requirements assessed through annual self-assessment. Level 2 requires compliance with all 110 security requirements in NIST SP 800-171 and can be assessed by self-assessment or a third-party assessor, depending on the sensitivity of the information involved.9Department of Defense Chief Information Officer. About CMMC Contractors handling controlled unclassified information must also report their NIST SP 800-171 assessment scores to the Supplier Performance Risk System.10Acquisition.GOV. NIST SP 800-171 DoD Assessment Requirements
Listing your current CMMC level, NIST SP 800-171 score, and any third-party assessment status signals that you’ve already done the compliance homework. For defense work this is increasingly a threshold issue. Skip it if you’re targeting civilian agencies only.
Keep It Accurate
Everything on your capability statement needs to be true. This is not just good practice; it’s a legal requirement with real consequences. The False Claims Act imposes civil penalties for each false claim submitted to the government, plus damages of up to three times what the government loses as a result.11Office of the Law Revision Counsel. 31 USC 3729 – False Claims Overstating past performance, fabricating certifications, or misrepresenting your small business status can all trigger liability.
Beyond fines, the government can debar your company from all federal contracting, typically for three years. Grounds for debarment include fraud in connection with a public contract, making false statements, willful failure to perform contract terms, and delinquent federal taxes exceeding $10,000.12Acquisition.GOV. FAR 9.406-2 – Causes for Debarment Debarment follows both the company and its principals, and prime contractors avoid teaming with a debarred firm on any project.
The practical rule: if you haven’t earned a certification yet, don’t list it. If a project came in over budget, don’t claim otherwise. Capability statements are marketing documents, but they operate in a space where the buyer has subpoena power.
Getting It Into the Right Hands
The SBA maintains a searchable database where small businesses can add a link to their capability statement, making it visible to contracting officers browsing for qualified vendors before any solicitation posts.13U.S. Small Business Administration. Updated Features in DSBS The system accepts a URL, not a file upload, so host the PDF on your company website first. Keep your SAM profile complete and current at the same time, since agencies often start vendor research there.
Some agencies run their own vendor portals for regional or specialized opportunities. Check the procurement pages of agencies you want to work with and register wherever possible. Direct outreach to an agency’s Office of Small and Disadvantaged Business Utilization also works: email your statement with a clear subject line that includes your company name and primary NAICS code.
Industry days and matchmaking events are where a good one-pager pays off most visibly. Bring printed copies and be ready to hand them off during brief conversations. Keep multiple tailored versions on your hard drive. A version aimed at a defense agency should emphasize clearances and CMMC status. A version for a civilian health agency should highlight relevant past performance and certifications. Refresh each version at least quarterly so your most recent wins and certifications show up on the page.