Our SBIR Journey:
From Concept to Commercialization

parallax image

The Small Business Innovation Research (SBIR) program has been a powerful force in helping small companies like ours develop innovative solutions for national security and commercial markets. Our path with CSAR® (Cybersecurity Assurance Readiness) is a shining example of what’s possible when innovation meets opportunity.

Late 2020

Where It All Began: Lightweight Simulator Pitch Day

In late 2020, we introduced the concept for CSAR® at the Air Force Lifecycle Management Center and AFWERX Lightweight Simulator Pitch Day. Our idea? A modular, cybersecurity-focused simulation and training tool designed for DevSecOps environments.

The pitch resonated—and we were awarded a Direct to Phase II (D2P2) SBIR contract, launching our development journey.

Phase II: Laying the Groundwork

Our Phase II efforts focused on simulation and training, with cybersecurity as a core requirement. We embraced a Modular Open Systems Architecture (MOSA) to build flexibility, scalability, and secure integration into DevSecOps pipelines.

This foundation enabled CSAR to not only meet the SBIR topic goals but stand out as a modern, future-ready solution.

2022

Transition to Phase III: From Prototype to Product

In 2022, CSAR transitioned into a Phase III contract—a major milestone that validated its potential for real-world impact and opened the door to commercialization. 

As we scaled development, we recognized that CSAR’s core principles—modularity, cybersecurity integration, and DevSecOps deployment—applied far beyond simulation and training. 

2023

Finding Our First Customer

In May 2023, AETC/2AF/A6 became the first customer of CSAR. This marked the official launch of our platform, now reimagined as a tool to streamline the Risk Management Framework (RMF) “Prepare” process for Department of Defense (DoD) organizations. 

Built on MOSA and deeply integrated cybersecurity practices, CSAR helps organizations automate RMF workflows—improving compliance, reducing risk, and accelerating outcomes. 

What We’ve Learned

Our SBIR experience has been transformative. Here are the key takeaways:

  • Innovation demands adaptability. MOSA gave us the agility to evolve CSAR as needs shifted.
  • Security must be foundational. Cybersecurity was never an add-on—it was built in from day one.
  • Commercialization takes persistence. Moving from concept to product required time, iteration, and customer focus.

Ready to Start Your Own Journey?

The SBIR program was a launchpad for CSAR. If you’re a small business with a big idea, we encourage you to explore what’s possible. 

Innovation starts with a single pitch. Where will yours take you? 

 

Fill out a few details and our team will follow up with you shortly.