The Army plans to activate Project Gatekeeper on Oct. 23, a cybersecurity sandbox designed to assess commercial software before it reaches Army networks. The service says the AI-enhanced system will replace fragmented review arrangements with a standardized process intended to reduce approval timelines from months to minutes. Acting Army Chief Information Officer Gabe Chiulli announced the launch at the annual AUSA conference, as Breaking Defense reported.
Gatekeeper will run on the Army’s cloud while remaining isolated from operational networks and sensitive data. Companies will be able to submit software for assessment without first holding an Army contract, having a program manager sponsor the effort or responding to a formal request for proposals. The arrangement is intended to let prospective vendors identify and correct cybersecurity problems before seeking to place their products into an Army environment.
The current process can take days or weeks and has delayed some software projects for as long as nine months, Army officials said. Review practices have varied by program office, creating uneven cybersecurity procedures and limited visibility for contractors and Army leaders. Under the previous arrangement, a company often had to secure an Authority to Operate, or ATO, before Army organizations would engage with it, while obtaining that approval could depend on an organization already willing to assess the software.
David Markowitz, the Army’s chief data and analytics officer, said responsibility for reviewing commercial software had effectively been left to individual program managers. Some offices lacked the capability or willingness to evaluate unfamiliar code, officials said. When a program office did agree to test new software, it often lacked an isolated environment and instead had to place the code on an Army network for assessment.
That approach also created access hurdles for companies. Company personnel had to obtain Common Access Cards to access Army systems during the assessment process, according to Army officials. Gatekeeper is intended to remove much of that burden by providing a dedicated assessment environment. Companies will initially still need CACs to access the platform, but the Army is working with the General Services Administration to add Login.gov authentication.
David Wright, chief engineer at the Army Software and Innovation Center, said the Login.gov integration is expected around mid-November. Once available, the change is intended to make the platform commercially accessible to users outside the Army’s existing contractor and program-management channels. Until then, CAC access remains part of the initial process described by Army officials.
After gaining access, a company will be able to upload its software and run it through standardized Army cybersecurity tools, including an artificial-intelligence assessment. The automated pipeline is designed to return either a passing result or detailed feedback explaining why the software failed. Gatekeeper will also include the Army’s DevSecOps software development kit, allowing companies to address identified problems within an environment that uses Army-vetted tools.
The Army says the faster workflow will not lower its security requirements. Instead, officials describe the project as a way to make those requirements more accessible and provide immediate feedback before software is introduced into an operational Army network. The sandbox’s Oct. 23 activation is the first scheduled milestone, followed by the planned Login.gov integration in November.
Gatekeeper is intended to give the Army a single venue for evaluating commercial software rather than relying on separate arrangements across program offices. For companies, the planned process would provide a way to identify cybersecurity issues before pursuing Army business. For the service, officials say the sandbox could shorten reviews while preserving the security checks required before software reaches Army networks.