

Most guidance on entering defence technology describes the sector: threat domains, technology categories, the list of stakeholders. It is accurate and it does not help, because the difficulty is not identifying what militaries need. It is that the buying process is unlike any commercial process, and a company built for one will fail at the other.
What follows is how the purchase actually happens, why demonstrations rarely become contracts, and what a small European supplier can realistically pursue.
The single most expensive mistake is assuming the enthusiastic operational user can buy something.
A defence purchase involves at least five parties. The requirement owner in the armed service who wants the capability and is usually genuinely enthusiastic. The acquisition authority who runs the process and is accountable for its regularity. The budget holder, whose planning cycle determined years ago whether money exists in the relevant year. The security authority who decides whether the supplier is eligible to hold the information. And frequently a prime contractor who controls integration into the existing system.
A supplier who has convinced only the first has convinced the one participant with no purchasing authority. That is the origin of the pattern where a startup reports strong interest for eighteen months and no contract.
Innovation funds exist to award pilots, and pilots are comparatively easy to win. Converting one into recurring procurement is a different problem entirely.
A programme of record requires a budget line planned in an earlier cycle, an operational sponsor willing to defend it against competing priorities, and usually a route through an existing prime contract, since the capability has to integrate with something.
None of that is influenced by how well the demonstration performed. Companies collect three or four pilot awards, treat the sequence as traction, and reach the end of their runway with excellent technical references and no recurring revenue.
The practical test to apply before accepting a pilot: which budget line would fund this at scale, in which year, and who owns it. If nobody in the customer organisation can answer, the pilot is a technology demonstration and should be costed as marketing rather than as a sales stage.
Most written guidance in this field is implicitly American. The European landscape is different in structure.
The European Defence Fund co-finances collaborative research and development, generally requiring a consortium spanning several member states rather than a single company. It suits a specialist supplier joining a group, not a startup seeking a customer.
NATO innovation programmes include an accelerator network and a dedicated fund investing in dual-use technology, aimed specifically at bridging the gap described above.
The NATO Support and Procurement Agency handles common procurement on behalf of member states, which offers a route to multiple national customers through one contracting relationship.
National defence innovation bodies. Most member states operate one, with small contract instruments designed for companies that cannot survive a standard procurement timeline.
Subcontracting to a prime. Frequently the fastest route to a first defence reference. Less glamorous than a direct contract, and it supplies revenue, integration experience and a name the next customer recognises.
Defence and sensitive security procurement in the EU falls under Directive 2009/81/EC, which provides more flexibility than ordinary public procurement, including negotiated procedures and specific provisions on security of supply and security of information.
Separately, Article 346 of the Treaty on the Functioning of the European Union permits a member state to set the rules aside where essential security interests are engaged. In practice this means a proportion of defence contracting happens nationally, without open competition, on grounds a supplier cannot contest.
Establish which regime an opportunity sits under before investing in a bid. The effort required and the probability of success differ enormously between the two, and the information is usually available in the notice.
This is a summary rather than legal advice.
Classified work requires facility security clearance for the company and personnel clearance for named individuals, granted by a national authority, taking months at best and frequently longer.
Three consequences follow. Clearance cannot be arranged after a bid opens, so a company without it is ineligible rather than uncompetitive. Nationality requirements can restrict which employees may work on a programme, which affects hiring and sometimes ownership. And the timeline should be started well before it is needed, because it is one of the few things in this sector that can be advanced without a customer.
The EU dual-use regulation covers a wide range of defence-adjacent technology, and the 2021 recast extended attention to cyber-surveillance items in particular. Where US-origin components are involved, the US regimes apply regardless of where the company is established.
The commercial consequences arrive before the compliance ones: classification constrains which customers can be sold to, which suppliers can be used, who can be employed and sometimes who can invest. Establishing the position early is considerably cheaper than discovering it during due diligence.
Defence contracting is slow at both ends. A year from award to first delivery is unremarkable, milestone payments lag delivery, and public buyers pay against documentation that takes time to produce and approve.
A company financing that gap from equity is using expensive capital as working capital. This is the strongest practical argument for a dual-use product line: commercial revenue while the defence sale takes its course. Dual-use does not shorten procurement or exempt anyone from export control, and it does determine whether the company is still trading when the contract arrives.
Three questions, settled in the contract rather than afterwards.
Who owns the results of publicly funded development. What licence the buyer receives. And whether that licence permits the buyer to have the design manufactured by somebody else.
Government use rights are common and frequently reasonable. Terms allowing transfer of the design to another supplier are also encountered, and they determine whether the company has built a product or performed development work for hire. Read them before signing, because they are close to impossible to renegotiate later.
Software and data. The barrier is accreditation rather than manufacturing capital, which is a barrier a small company can actually clear.
Secure communications and infrastructure resilience. Commercial and defence requirements overlap heavily, which makes dual-use genuine rather than nominal.
Training and simulation. Ordinary software economics, lower classification burden, recurring budgets.
Sensing and components supplied into prime programmes, where the qualification burden is real and bounded.
Sustainment and logistics software. Unglamorous, persistently underserved, and budgeted every year rather than programme by programme.
What is not realistically open from a standing start is anything requiring platform-scale capital or deep national classification. Those markets are held by primes and national laboratories for structural reasons: the capital requirements, the classification barriers and the integration relationships are all beyond what a new company can assemble. Guidance that lists them as opportunities for startups is describing a technology roadmap rather than a market.
The sector is prime-dominated: large integrators hold the customer relationships, the programme contracts and the systems knowledge.
That is not necessarily a disadvantage. A subcontract provides revenue, a defence reference and integration experience, all of which are hard to obtain otherwise.
It becomes a problem where the prime holds the customer relationship entirely and the supplier has no independent route to a contract. Plan against that from the start: keep a direct relationship with the end user where the contract permits it, and avoid a position where a single integrator can decide the company's future.
The defence market is not difficult because requirements are hard to identify. It is difficult because the buying process is slow, the decision is distributed, eligibility is gated by clearance and export control, and a successful demonstration carries no obligation on anyone to purchase anything.
A company that plans around the budget cycle rather than the requirement, funds itself commercially through the gap, and settles clearance and IP before they become urgent has removed most of the reasons companies fail here.

The gap between a successful pilot or demonstration and a programme of record with recurring budget. Innovation funds are designed to award pilots, and pilots are relatively easy to win. Converting one into sustained procurement requires a budget line that was planned years earlier, an operational sponsor prepared to argue for it, and usually a route through an existing prime contract. Many startups win several pilots, treat the run of wins as traction, and discover that none of them was ever going to become a purchase.
Rarely one person. There is a requirement owner in the armed service who wants the capability, an acquisition authority who runs the process, a budget holder whose planning cycle determines when money exists, a security authority who decides whether the supplier is eligible, and often a prime contractor who controls integration. A supplier who has convinced only the operational user has convinced the one participant who cannot buy anything.
Commercial revenue while the defence sale takes years, which is the difference between surviving the cycle and not. It also broadens the investor pool, since many funds have mandates that exclude weapons but permit dual-use technology. What it does not do is shorten defence procurement or exempt a company from export control. Treat it as cash-flow architecture rather than as a route to the defence customer.
The European Defence Fund co-finances collaborative development, usually through consortia rather than single companies. NATO's innovation programmes run accelerators and a dedicated fund. The NATO Support and Procurement Agency handles common procurement for member states. Most member states operate their own defence innovation body with small contract instruments. And subcontracting to a prime on an existing programme is frequently the fastest way to a first defence reference, if the least glamorous.
Directive 2009/81/EC governs defence and sensitive security procurement, with more flexibility than ordinary public procurement, including negotiated procedures and provisions for security of supply and information. Separately, Article 346 of the Treaty allows a member state to disapply the rules where essential security interests are at stake, which in practice means some contracts are awarded nationally without open competition. A supplier should establish which regime a given opportunity sits under before investing in a bid.
It determines eligibility rather than score. Classified work requires facility clearance for the company and personnel clearance for named individuals, both granted by a national authority, both taking months to years. Clearance cannot be arranged retrospectively once a bid is live, and nationality requirements can restrict which employees may work on a programme. Where a company intends to pursue classified work, starting the process early is the single highest-value administrative decision available.
Because the contracting cycle and the payment cycle are both long, and neither is negotiable by a small supplier. A programme can take a year from award to first delivery, milestone payments can lag delivery by months, and public buyers pay against documentation that takes time to produce and approve. A company financing that gap from equity is spending expensive capital on working capital, which is why an earlier commercial revenue line matters so much.
Who owns the results, what licence the buyer receives, and whether that licence permits them to have someone else manufacture the design. Publicly funded development frequently carries government use rights, which can be reasonable, and occasionally carries terms that let the buyer transfer the design to another supplier. Those clauses determine whether the company has built a product or performed development work for hire, and they are settled in the contract rather than afterwards.
Software and data, where the barrier is accreditation rather than manufacturing capital. Secure communications and infrastructure resilience, where commercial and defence requirements overlap heavily. Training and simulation, which has ordinary software economics and a lower classification burden. Sensing and components supplied into prime programmes. Sustainment and logistics software, which is unglamorous, persistently underserved and budgeted every year. What is not realistically open is anything requiring platform-scale capital or deep national classification from a standing start.
That the large integrators hold the customer relationship, the programme contracts and the systems knowledge, so a new supplier usually reaches the end customer through them rather than around them. That is not always a disadvantage, since a subcontract provides revenue, a reference and integration experience. It becomes a problem when the prime controls the customer relationship entirely and the supplier has no route to a direct contract, which is a dependency worth planning against from the beginning.