The Pentagon now has legal authority to dock the pay of incumbent contractors who file bid protests that never had a factual leg to stand on. Section 875 of the National Defense Authorization Act for Fiscal Year 2026, signed into law December 18, 2025 as Public Law 119-60, directs the Defense Department to write rules letting contracting officers withhold up to 5% of payments owed to a contractor that keeps working under a bridge contract or extension while its own Government Accountability Office protest of a follow-on award plays out. If the GAO later throws out that protest for lacking "any reasonable legal or factual basis," the withheld money is gone for good.
Background
Incumbent contractors have long held an advantage when a program comes up for recompete and they lose: file a GAO protest, and the automatic stay provisions of the Competition in Contracting Act typically freeze the award while the case is decided. Agencies often keep the incumbent working through a bridge contract or extension during that stay, sometimes for months. Congress and the Pentagon have argued for years that this dynamic tempts losing incumbents to file protests with thin merit simply to keep collecting revenue on a contract they already lost on paper.
Section 875 is Congress's most direct response yet. It follows a related move a year earlier: Section 885 of the FY2025 NDAA directed GAO to develop a stricter pleading standard for bid protests. GAO answered that mandate through a 2025 decision adopting language requiring protesters to submit "credible allegations that are supported by evidence," rather than allegations or evidence standing alone as the prior formulation allowed. GAO has applied the new standard broadly, not just to Defense Department cases. Section 875 builds a financial penalty on top of that stricter gatekeeping, but only for the subset of protests where an incumbent is riding a bridge contract while the case is pending.
Lawmakers pursued Section 875 even though the overall volume of bid protests filed at GAO has trended downward in recent years. That decline did not quiet complaints from program offices that a small number of incumbent protests on high-value follow-on awards delay the transition to a new contractor for months. Section 875 targets that narrower pattern rather than discouraging protests across the board.
Key Details
Under Section 875, the withholding authority applies only when three conditions line up: the protest is filed at GAO (not at the agency level and not at the Court of Federal Claims), it challenges a DoD procurement, and the protester is an incumbent whose performance continues through a bridge contract or extension awarded because of the protest's automatic stay. Where those conditions are met, a contracting officer may withhold as much as 5% of what is owed to the contractor for work performed during that extended period.
The withheld amount is held back until GAO resolves the case. If GAO sustains the protest, denies it on the merits, or the case is otherwise resolved without a finding that it lacked any reasonable legal or factual basis, the contractor gets its money back. Forfeiture only kicks in when GAO makes a final determination that the protest had no reasonable legal or factual basis behind it — a bar meant to target protests widely seen as filed to run out the clock, not protests that simply lose.
The statute gives the Pentagon 180 days from enactment to write the implementing regulations through the Defense Federal Acquisition Regulation Supplement, putting the deadline in mid-June 2026. Until DoD publishes that DFARS rule, contracting officers have no mechanism to actually withhold anything — the NDAA sets the authority, but the rule still needs to exist before it can bite. Section 875 does not touch protests at civilian agencies, protests filed directly at the Court of Federal Claims, or agency-level protests, and it has no effect on a contractor that is not already the incumbent performing under a bridge contract or extension.
What It Means for Contractors
The combination of GAO's tougher pleading standard and Section 875's financial penalty changes the math for any incumbent weighing whether to protest a lost recompete. Under the old rule, filing cost little beyond legal fees and bought months of continued revenue on a bridge contract almost by default. Now a protest has to clear a higher evidentiary bar to survive dismissal, and even a case that does survive can still end in GAO ruling there was no reasonable basis for it — at which point the contractor forfeits real money it already collected.
Contractors should expect bid protest counsel to front-load evidence rather than filing a placeholder protest and supplementing later, since GAO's stricter "credible allegations" standard now requires evidence-backed allegations at the outset to avoid early dismissal. Companies currently performing on a bridge contract or extension tied to a pending GAO protest should also watch for the DFARS rule DoD is required to publish by mid-June 2026, since that rule — not the NDAA text itself — will spell out exactly how contracting officers calculate and hold the 5% withholding.
The provision does not touch protests where the protester is not an incumbent working under a stay-driven bridge or extension, so new entrants challenging an award they never held face no change in financial exposure. But for incumbents, the practical effect is that losing a recompete and protesting it now carries a real chance of losing money on top of the contract, not just legal fees, if GAO finds the protest groundless. Contractors weighing whether to protest a lost recompete should document the factual basis for a protest before filing rather than after, and weigh whether continued bridge performance is worth the forfeiture risk if the underlying challenge is weak.
Small and mid-tier contractors that depend on a single recompete for a large share of revenue face the sharpest version of this trade-off, since a 5% withholding on a bridge contract can represent real cash flow at that scale. Larger primes with diversified portfolios can better absorb a forfeiture on one program, but a GAO finding that a protest lacked any reasonable basis carries reputational cost regardless of company size.
