U.S. Army launches Project Gatekeeper to clear commercial software in minutes, not months

The U.S. Army has opened a new gateway for commercial software developers, launching Project Gatekeeper on 23 October, a platform meant to cut the time it takes to test and clear outside code for use on Army networks. The service says the evaluation cycle can fall “from months down to minutes”.

The Army’s Office of the Chief Information Officer describes Gatekeeper as a DevSecOps platform and security sandbox. Companies submit code or containerised applications into isolated test environments, where automated tools scan for vulnerabilities, check compliance guardrails and return remediation guidance almost in real time. The system also produces the standard compliance documents that authorising officials need to decide whether to grant an authority to operate, the formal approval known as an ATO.

What problem it addresses

According to the Army, commercial providers, especially start-ups and firms that do not normally sell to the military, have long struggled with the accreditation process. Getting an ATO or a military sponsor often required an existing defence contract and Common Access Card credentials, and approval timelines could stretch to six to eight months or longer. Gabe Chiulli, the acting Army chief information officer, said companies had previously had to “navigate disparate, ad-hoc mechanisms simply to get their code evaluated”. Gatekeeper, he said, replaces that with an automated intake pipeline.

Vendor code runs in containerised enclaves that, the Army says, keep it away from operational data while still allowing testing against Army enterprise standards. The platform draws its authorisation framework from the Army’s existing DevSecOps Platform and connects to the service’s unclassified network environment through a dedicated commercial-facing relay.

Access and next steps

For now, access is limited to vendors that hold a Department of War Common Access Card. The Army says public access will follow soon through Login.gov, which will authenticate and vet people reaching the platform from the commercial internet. It also says the platform will shortly begin using what it calls frontier security models from “super intelligence” partners to strengthen its security tooling, provide aggregated reporting and help prioritise fixes. The Army has not named those partners in the release.

The launch fits a wider push by the Pentagon to bring commercial technology into service faster, a theme also visible in the autonomy effort described in Pentagon’s Project Agincourt writes to industry as it builds a four-star Autonomous Warfare Command. The Army’s release links Gatekeeper to Department of War initiatives on agile acquisition and continuous software delivery, and Chiulli said the platform provides “the automated foundation required to scale with the speed of commercial technology”.

Whether the promised turnaround holds in practice will depend on how many vendors use the platform and how quickly authorising officials act on the evidence it generates; the Army has not published usage figures or performance data. Further details are on the U.S. Army release.