Hundreds of Proposals Written
Federal, State & Foundation Grants
SBIR/STTR, Grant Strategy

SBIR Reauthorization 2026: What Changed and What Founders Must Do Now

{/* Schema recommendation: BlogPosting + FAQPage. Set author to Nalin Vahil, datePublished and dateModified to 2026-06-16. The "Frequently asked questions" section maps to FAQPage entities. The "60-second version" summary table and the "When do the changes take effect?" timeline table are strong AI-extraction targets and can be marked up as structured data. */}

By Nalin Vahil | Last updated: June 16, 2026 | Cada Grant Strategy. Cada has mapped grant funding across 30+ agencies and written 100+ proposals.

The SBIR reauthorization 2026 is real and it is law. On April 13, 2026, the President signed S.3971, the Small Business Innovation and Economic Security Act (Public Law 119-83), reauthorizing the SBIR and STTR programs through September 30, 2031. After a roughly six-month lapse that paused new awards, the programs are back, and four things about them are different.

This is not a news recap. It is a founder action guide. For each major change, you get the same four answers: what changed, who it affects, what you should do differently, and by when. Where agencies have not yet decided how to implement a provision, I will say so plainly instead of guessing.

These SBIR program changes in 2026 affect startups at every stage, from first-time applicants to prior Phase II winners. If you are sitting on a stalled application, planning an FY2027 submission, or weighing a multi-agency strategy, the changes below should reshape your plan.

What changed in the 2026 SBIR reauthorization?

The SBIR reauthorization 2026 reauthorizes SBIR/STTR through September 30, 2031 and makes four substantive changes: a new Strategic Breakthrough Award (up to $30M Phase II scale-up authority), per-company proposal submission caps starting in FY2027, enhanced national security and foreign-risk reviews, and expanded technical and business assistance (TABA) funding. None of these change who can apply. All of them change how you should apply.

Here is the 60-second version.

What changed What it is Who it hits When
Strategic Breakthrough Award New Phase II authority, up to $30M over 48 months, milestone-based Prior Phase II winners with a scale-up and match path Enacted; agency use still being decided
Proposal submission caps Agencies must cap how many proposals one company can submit High-volume submitters first, but everyone should plan for it FY2027
Foreign-risk and security reviews Awards barred to listed foreign-linked entities; ownership, cyber, and patent review Companies with foreign capital, ownership, or weak cyber posture In effect now for new awards
TABA expansion Codified at $6,500 (Phase I) and $50,000 (Phase II), stackable, broader uses Every awardee In effect now
Five-year reauthorization Authority restored through September 30, 2031 Every SBIR/STTR applicant Effective April 14, 2026

The one-line takeaway by founder type:

  • First-time applicant: the program is open again. Focus on fit, not volume, because caps are coming.
  • Prior Phase II winner: there is now a statutory scale-up rung above Phase II. Start building toward it.
  • Multi-agency submitter: the spray-and-pray strategy is on a clock. Pick your best three programs.
  • Founder with foreign investors: clean up your ownership and cyber disclosures before you apply.

The SBIR Strategic Breakthrough track: a $30M scale-up path, not a new grant

The Strategic Breakthrough track is the headline change, and it is also the one most likely to be misdescribed. It is not a new $30M grant program you can apply to cold.

The SBIR Strategic Breakthrough Award is a new Phase II scale-up authority that lets eligible agencies make awards of up to $30 million to a single small business, over a period of performance up to 48 months, structured as a single award or a series of milestone-based awards. It exists to move proven Phase II technology across the "valley of death" toward production and procurement. It is co-financed, not free money.

The eligibility gates are strict. Here is what actually has to be true.

Gate Requirement
Prior award At least one prior Phase II SBIR or STTR award
Agency eligibility Only agencies with required SBIR expenditure over $100M may use the authority
Allocation size Agencies may use up to 0.50% of extramural R&D budget (an internal allocation, not new money)
Match At least 100% matching funds from new private capital, new non-SBIR government funding, or a combination
Market proof Demonstrated evidence the technology is an effective solution, based on market research
Award speed Agency must complete the contract award within 90 days of receiving the proposal
DoD-specific gate Readiness, a POM commitment from a program acquisition executive or higher, a high-priority operational need, and at least 20% of the match from new non-SBIR DoD funding

One nuance for defense founders: the DoD requirements stack on top of the 100% match, not instead of it. You still need a full match, and at least 20% of it must come from new non-SBIR DoD funding.

Who's affected. This is built for a specific founder: a prior Phase II winner with a product moving from prototype to deployment, a credible match stack, and a real government customer. If you are a first-time applicant or a company with only Phase I awards, this is not for you yet.

What to do differently. If you are early in Phase I or Phase II, design your milestones, data, and customer relationships around a future scale-up event now. The strongest Strategic Breakthrough candidates will be companies that lined up private capital or non-SBIR government funding and a transition sponsor before they needed them. Treat your match stack as a deliverable, not an afterthought.

By when. The authority is law as of April 14, 2026. But here is the honest part: agencies still have to decide whether and how to use it. The statute creates the authority. It does not force any agency to stand up a Strategic Breakthrough solicitation on a particular date. Before you build a strategy around it, confirm the specific agency you are targeting has published implementation guidance. Do not assume a program exists because the law allows it.

SBIR FY2027 proposal limits: the end of spray-and-pray

For years, a small number of companies have submitted hundreds of proposals per cycle, won a modest percentage, and built a business on volume. The 2026 reauthorization targets that directly.

The SBIR FY2027 proposal limits require agencies to set caps on how many proposals a single applicant may submit, on a per-year, per-solicitation, or per-topic basis. The caps take effect in FY2027. Waivers exist for time-sensitive mission needs but are limited to roughly 5% of topics annually and require senior sign-off. The intent is to curb so-called "SBIR mills" and push award dollars toward genuine innovation.

Who's affected. High-volume submitters take the direct hit. But every applicant should plan as if a per-company or per-topic cap applies to them, because it likely will.

What to do differently. Stop optimizing for volume. Optimize for fit. If you can only submit a limited number of proposals, each one needs to target a program where you are genuinely competitive. This is exactly the portfolio logic that wins: pick the two or three agencies where your technology, team, and customer story line up, and put your effort there. A founder submitting three well-matched applications will beat a founder submitting fifteen scattershot ones, especially once caps remove the volume option.

By when. The caps apply in FY2027, and agencies are expected to publish their specific limits ahead of the fiscal year. I will be straight with you: the exact cap numbers and the precise dates each agency posts them are still settling. Watch your target agencies' solicitation announcements rather than relying on a single published figure. The direction is certain even if the decimals are not.

Enhanced national security and foreign-risk reviews

This is the change most likely to quietly disqualify a company that does not see it coming.

The reauthorization bars awards to entities tied to certain foreign-linked lists, including the Section 889 prohibition list, the Military End User list, the 1260H list of Chinese military companies, and the Non-SDN Chinese Military-Industrial Complex Companies list. Agencies must also assess foreign ownership, control, or influence, along with your cybersecurity practices and patent portfolio.

Who's affected. Companies with foreign investors, foreign ownership stakes, foreign-based affiliates, or thin cybersecurity documentation. If a foreign entity holds a meaningful position on your cap table, or your security posture is undocumented, expect scrutiny.

What to do differently. Get ahead of it. Map your cap table and disclose foreign ownership cleanly. Document your cybersecurity practices before you apply, not after a reviewer asks. If you have foreign investors, understand how their stake reads against the new screening criteria. This is not a reason to panic, but it is a reason to do the diligence early. A clean, well-documented application moves faster through a more skeptical review.

By when. These reviews apply now, to new awards. There is no FY2027 grace period here.

TABA just got more useful, and you should use it

Technical and Business Assistance is the provision founders most often leave on the table, and the reauthorization made it more valuable.

TABA funding is now codified at $6,500 per Phase I project and $50,000 per Phase II project, and it can stack on top of your core award rather than being carved out of it. The allowable uses expanded too: you can put TABA toward cybersecurity assistance (including CMMC-related costs), commercialization planning, and building internal capability, not just buying outside services.

Who's affected. Every awardee.

What to do differently. Build TABA into your budget request from the start. Given the new foreign-risk and cybersecurity scrutiny described above, using TABA to fund cybersecurity readiness is a smart double play: you strengthen the exact area reviewers now examine, on top of your core award. Leaving $50,000 of Phase II assistance unclaimed is a mistake.

When do the SBIR reauthorization 2026 changes take effect?

Here is the timeline at a glance.

Provision Effective Status
Reauthorization through FY2031 April 14, 2026 In effect
Foreign-risk and security reviews April 14, 2026 In effect for new awards
TABA expansion April 14, 2026 In effect
Strategic Breakthrough Award authority April 14, 2026 Enacted; agency-by-agency implementation pending
Proposal submission caps FY2027 Agencies setting caps ahead of the fiscal year

The pattern to remember: most provisions are live now, but the two that change your strategy most (Strategic Breakthrough and the FY2027 caps) depend on agency implementation that is still rolling out. The single authoritative source for any specific program's status is the agency's own solicitation portal, not a news article or an AI summary, both of which go stale fast.

What should you do now?

Concrete next steps, by where you sit today.

If you are a first-time applicant:

  1. Confirm your target program is actually open on the agency's portal.
  2. Pick programs by fit, not by how many you can submit. Caps are coming in FY2027.
  3. Document your cybersecurity practices now so the new review does not slow you down.

If you are a prior Phase II winner eyeing scale-up:

  1. Check whether your agency has more than $100M in SBIR obligations (the Strategic Breakthrough threshold).
  2. Start assembling a match stack: new private capital, non-SBIR government funding, or both.
  3. Line up a federal customer and, for DoD, a POM-level acquisition sponsor.
  4. Watch for your agency's Strategic Breakthrough implementation guidance before building a timeline around it.

If you are a high-volume or multi-agency submitter:

  1. Identify your two or three best-fit programs and concentrate your effort there.
  2. Model your pipeline as if per-company caps apply in FY2027.
  3. Shift from a volume strategy to a portfolio strategy across complementary agencies.

If you have foreign investors or ownership:

  1. Map your cap table against the new foreign-risk screening lists.
  2. Disclose foreign ownership cleanly and early.
  3. Get legal eyes on how your structure reads under the new FOCI criteria before you apply.

Frequently asked questions

Is SBIR reauthorized for 2026? Yes. The President signed S.3971 into law on April 13, 2026, as Public Law 119-83, reauthorizing SBIR and STTR through September 30, 2031. The roughly six-month lapse that paused new awards is over, and agencies are reopening solicitations on their own schedules.

What is the SBIR Strategic Breakthrough Award? It is a new Phase II scale-up authority, not a standalone grant. Eligible agencies can make awards of up to $30 million to a single small business over up to 48 months, structured around milestones. It requires a prior Phase II award, at least 100% matching funds, and demonstrated market proof.

Who qualifies for the $30 million Strategic Breakthrough Award? Companies with at least one prior Phase II SBIR or STTR award, applying to an agency with more than $100M in SBIR obligations, that can bring 100% matching funds from new private capital or non-SBIR government funding and show real market and customer demand. DoD adds a POM commitment and a 20% non-SBIR DoD match.

Are the SBIR proposal limits in effect yet? Not yet. The per-company proposal caps take effect in FY2027. Agencies are expected to publish their specific limits ahead of the fiscal year, so watch your target agency's solicitation announcements rather than assuming a single nationwide number.

Does taking foreign investment disqualify me from SBIR? Not automatically. The reauthorization bars awards to entities on specific foreign-linked lists and requires agencies to assess foreign ownership, control, and influence. Foreign investment triggers scrutiny, not automatic disqualification, but you should disclose ownership cleanly and get ahead of the review.

Did SBIR award amounts change? The core Phase I and Phase II award guidelines were not the headline change. The major dollar change is the new $30M Strategic Breakthrough scale-up authority above Phase II, plus codified TABA at $6,500 (Phase I) and $50,000 (Phase II) that now stacks on top of your award.

Where Cada fits

If you are trying to figure out what the 2026 SBIR reauthorization means for your specific programs, that is exactly the question worth answering before you invest 40-plus hours in an application.

Cada's grant roadmaps already incorporate the 2026 reauthorization changes: the FY2027 caps, the Strategic Breakthrough sequencing for prior Phase II winners, and the new foreign-risk screening. We will tell you which programs you are genuinely competitive for and how these changes reshape your timing.

Book a free consultation. No pitch, no obligation, just a straight read on where you stand.

Ready to explore your funding options?

We'll map your technology to the most relevant programs and tell you where to start. 15 minutes, no obligation.

Book Strategy Review