Once a company clears Gate 0, the question changes. It is no longer “are you eligible?” but “can you scale?”
The New Defense Hex™ answers that question. It is not a checklist. It is a way of understanding why some companies can operate inside sovereign constraints and why others cannot, no matter how good the technology looks.
The Hex makes six structural layers visible. Each is interdependent. A weakness in one creates cascade failures across the others. A company with clean IP but no sovereign-aligned ownership cannot export. A company with a funded contract but no security accreditation cannot deploy.
After detailing how to reach Gate 0 in his first guest article, Pierre-Marie Derouin joined us again to break down what you need as a defense tech startup to scale.
The Six Dimensions
1. Security & National Security Compatibility
This is not about having a firewall. It is about whether the company’s architecture, personnel, and governance can survive the security accreditation process that governs every sensitive defense program.
What to evaluate:
- Can the founding team and key engineers obtain the required security clearances? This typically means 6–12 months of continuous residency and no disqualifying foreign ties.
- Are the cloud architecture, data residency, and supply chain accredited to the classification level required by the mission? A system that works at UNCLASS but needs SECRET or TS/SCI is not viable.
- Are there foreign ownership, investor, or subcontractor arrangements that would prevent accreditation? A non-EU cloud provider, a US investor with board control, or a Chinese component supplier can all block accreditation.
Why it matters:
Without security compatibility, you have a product that cannot be fielded. It is a hard stop, not a deployment delay.
Ghost Shark example:
Anduril’s team included people who already held US clearances and who understood how to architect for SECRET accreditation from Day One. That is why they could move from classified brief to prototype in months, not years.
2. Government Contracting & Revenue Quality
Revenue from the defense ministry is not fungible. A pilot contract funded from an R&D budget is not the same as a production contract from a Program Objective Memorandum (POM) line. This dimension separates exploratory funding from real procurement.
What to evaluate:
- What percentage of revenue is tied to documented capability requirements with committed funding? Grants, pilots, and SBIR-style contracts do not count.
- Is there a clear acquisition pathway from pilot to production? If the program office cannot name the budget line and contracting vehicle, there is no path.
- What is the mean time from contract award to first mission deployment? A system that takes 18 months to field after award is not operationally relevant for urgent capability gaps.
Why it matters:
A company with 90% grant revenue and 10% pilot revenue is not a defense company. It is a research shop. Only revenue tied to documented, funded capability requirements signals real scaling potential.
Ghost Shark example:
The Australian program had a committed budget line from the start. Anduril did not have to “earn” a production contract. It was already authorised. That is sovereign-grade revenue quality.
3. Defense Technology & IP
Intellectual property in defense is not about patents. It is about sovereignty. Who controls the technology, where it can be used, and whether it can be exported or shared with allies.
What to evaluate:
- Is the IP clearly and solely owned by the company, free of government purpose rights, university encumbrances, or joint ownership with foreign entities? Any encumbrance that gives a third party veto power over commercialisation or export is disqualifying.
- What is the export control classification? ITAR-controlled technology (US International Traffic in Arms Regulations) is subject to severe restrictions on who can work on it and where it can be deployed. For European buyers, ITAR can be a hard stop.
- Can the technology be manufactured and supported without reliance on single-source foreign components? Supply chain jurisdiction matters. A Chinese component can strand an entire system if geopolitical relations shift.
Why it matters:
A brilliant but encumbered technology is not a defense asset. It is a liability. Sovereign buyers will not gamble on unclear IP.
Ghost Shark example:
Anduril engineered full IP control from inception. No university spin-out terms, no government purpose rights, no foreign components that could not be sourced from allied suppliers. That is why the export and manufacturing path was clear.
4. Strategic Positioning in Defense Markets
Strategic positioning is not about market size or total addressable market (TAM). It is about alignment with the documented capability requirements, the national strategy, and the political mandate.
What to evaluate:
- Does a documented capability requirement exist? (JUONS, ICD, national strategy paper, ministerial statement.) If not, the “requirement” is speculative.
- Is the capability in Tier 1 or Tier 2 of the sponsor’s capability plan? Tier 3 capabilities are not funded in the near term. They are background noise.
- How many allied nations share this requirement? A capability that is a priority for three or more Five Eyes/NATO allies has coalition scale. A capability that is only a national priority is a single-market bet.
Why it matters:
A company solving a problem that is not in a funded, documented tier is not a defense company. It is a lobbying effort.
Ghost Shark example:
Australia’s undersea autonomy requirement was in the national defense strategy and explicitly funded¹. It was not a wish list item. That is strategic positioning.
5. Regulatory & Compliance Environment
The regulatory environment is not a background constraint. It is a structural gate that determines where the technology can be used, who can invest in it, and how it can be exported.
What to evaluate:
- Can the company pass FDI screening in its target markets? The EU now flags 37% of Phase 2 defense sector assessments for additional scrutiny. Foreign ownership can block market access.
- Can the technology be exported to key allies under existing frameworks? (ITAR, EAR, Wassenaar, national export controls.)
- Are there pending regulatory changes that would render the capability stranded?
Why it matters:
A technology that cannot be exported or funded by foreign capital is a single-market product. That dramatically reduces scale and exit options.
Ghost Shark example:
Anduril’s US-Australia alignment meant ITAR and FDI were non-issues. The regulatory environment was already aligned. That is why the deal could move at speed.
6. Operational Readiness & Sovereign-Grade Scalability
Operational readiness is not about having a working prototype. It is about being able to produce, support, and upgrade the system at a sovereign scale, inside sovereign constraints.
What to evaluate:
- Can the company produce the 10th unit at sovereign-grade quality within 26 weeks of prototype acceptance? If not, the production learning curve is too shallow for urgent capability needs.
- Is there a support and sustainment plan that meets mission availability targets (e.g., 95% uptime, <24-hour repair response)?
- Can the supply chain be trusted and secured against geopolitical disruption? Single-source components in adversary nations are disqualifying.
Why it matters:
A prototype that cannot be manufactured at scale is a science project. Sovereign buyers need systems that work, can be repaired, and can be supplied.
Ghost Shark example:
Anduril had a manufacturing partner lined up, a support plan, and a supply chain that was already US-trusted. They could scale from 3 to 300 units without re-engineering. That is sovereign-grade readiness.
How the Dimensions Interlock
The Hex is not six independent scores. It is a system. A weakness in one dimension creates cascading failures:
- Weak IP (Dimension 3) reduces exportability (Dimension 5) and slows accreditation (Dimension 1).
- Weak security posture (Dimension 1) blocks access to funded programs (Dimension 2) and limits strategic positioning (Dimension 4).
- Weak operational readiness (Dimension 6) makes the revenue in Dimension 2 temporary because the sponsor cannot field the system at scale.
A company that scores 9/10 on five dimensions but 3/10 on one is a 3/10 company. The weak dimension will collapse the entire structure under sovereign pressure.
Implications for Investors and Founders
For defense investors:
Stop scoring companies on traction, team, and TAM. Score them on the Hex. A company with a 7+ average on all six dimensions, Gate 0 cleared, and documented capability alignment is credible. A company with high scores on three dimensions and low scores on three is a prototype that will stay on the shelf.
For defense tech founders:
Build for the Hex from Day One. Design IP for exportability. Hire people who can obtain clearances. Choose investors and suppliers who pass FDI and sovereignty screens. Create manufacturing and support plans that can be accredited at sovereign grade.
For defense customers:
Use the Hex to evaluate whether a vendor can actually deliver. A vendor that scores high on all six dimensions is a real program partner. A vendor that scores low on any one is a risk you cannot afford.
The Hex as a Living Dashboard
The New Defense Hex™ is not a one-time exercise. It is a dashboard to be updated quarterly. Political gravity shifts, export rules change, sponsors move, supply chains break. A company that scored 8/10 on all six dimensions last year can score 4/10 this year if the mission priority changes or a component becomes ITAR-controlled.
The Ghost Shark program will not be an outlier. It will be the template. But that template only works for companies and investors that understand the six dimensions and build around them from the start.
