The Department of War, through OSD, is seeking a Direct to Phase II SBIR solution for secure generative AI workflow automation and compliance support. The effort focuses on a mature SaaS platform that can help generate, review, and manage Security Classification Guides, Program Protection Plans, OPSEC plans, policy and risk reviews, and insider threat analysis across unclassified and classified environments up to TS/SCI. The work calls for a demonstrable, scalable, and secure prototype built around fine-tuned LLMs, with emphasis on accuracy, explainability, data privacy, robustness against adversarial manipulation, and a roadmap for integration into DoW systems. The solicitation is in pre-release under number OSW26BZ02-DV003, opens May 27, 2026, and applications are due June 24, 2026 at 4:00 PM UTC.

## Description

The Department of War currently relies on manual, time-consuming, and resource-intensive processes for creating and managing critical documentation such as Security Classification Guides (SCGs), Program Protection Plans (PPPs), and OPSEC plans. These legacy workflows are prone to human error, leading to inconsistencies, over-classification, and potential security vulnerabilities. This administrative burden directly impacts mission agility and the speed of decision-making.The emergence of secure, fine-tuned Large Language Models (LLMs) presents a transformative opportunity to modernize these processes. The DoW seeks a mature, AI-driven Software-as-a-Service (SaaS) platform capable of operating in both unclassified and classified environments (up to Top Secret/Sensitive Compartmented Information - TS/SCI). This platform will serve as a foundational toolkit for government personnel, augmenting their ability to generate, review, and manage complex documentation with unprecedented speed and accuracy.The chosen performer will be expected to deliver a solution that is not just a theoretical model but a demonstrable, scalable, and secure platform ready for rapid prototyping and operational testing.This solicitation is for a Direct to Phase II (D2P2) award. Offerors are expected to have already achieved significant technical maturity and be prepared to demonstrate existing capabilities upon request.FEASIBILITY DOCUMENTATION: Documentation should include all relevant information including, but not limited to: technical reports, test data, prototype designs/models, and performance goals/results.

## Objective

To develop and demonstrate a secure, enterprise-grade Generative AI platform to automate and enhance critical administrative, security, and compliance workflows within the Department of War (DoW). This effort seeks to dramatically reduce manual effort, improve the quality and speed of documentation, and ensure rigorous adherence to complex regulatory and security guidelines.

## Phase I

This topic is accepting Direct to Phase II proposals only. Strong proposals should document prior experience collaborating and working with large defense contractors in many or all the following ways:<ul><li>Completion of a feasibility study or initial prototype development for an AI-driven tool related to classification, security planning, policy, or compliance.</li><li>Demonstrated expertise in fine-tuning LLMs for specialized, high-stakes domains (e.g., legal, finance, cybersecurity, or government).</li><li>Evidence of a well-defined technical approach and architecture for deploying AI solutions in secure, air-gapped, or hybrid cloud environments.</li><li>Demonstrated Capability: Proven track record in developing and deploying AI-driven solutions.</li><li>Classified Experience: Verifiable experience working with the Department of War on classified programs and systems up to the TS/SCI level. Personnel must be eligible for required clearances.</li><li>Technological Advantage: A well-articulated and defensible explanation of why their secure LLM technology represents a significant leap beyond the current state of the art.</li><li>Government Acumen: A deep and nuanced understanding of government security and administrative processes, essential for building a truly effective solution.</li></ul>&nbsp;Proposers must provide clear and compelling evidence of this prior work in their proposal.

## Phase II

The primary goal of Phase II is to develop, demonstrate, and deliver a Minimum Viable Product (MVP) of the AI-powered toolkit within an 18-month period of performance. The performer shall:&nbsp;<ol><li>Work closely with government stakeholders through detailed Q&amp;A sessions and agile development sprints to refine requirements and ensure the solution meets operational needs.</li><li>Develop and deliver a functional prototype of an integrated toolkit with priority given to the following applications:<ul><li>Security Classification Guide (SCG) Builder: Automates the generation of SCGs based on program data and existing directives.</li><li>Program Protection Plan (PPP) Builder: Assists in drafting comprehensive PPPs by integrating threat data and security controls.</li><li>OPSEC Plan Builder: Streamlines the creation of OPSEC plans.</li><li>Policy, Compliance, and Risk Review Tools: Enables rapid analysis of documents against a corpus of policies, regulations, and risk frameworks.</li><li>Insider Threat Management Module: Provides tools to assist in identifying and mitigating potential insider threats through the analysis of unstructured data.</li></ul></li><li>Demonstrate a clear and significant advantage in their fine-tuned and secure LLMs, focusing on accuracy, explainability, data privacy, and robustness against adversarial manipulation.</li><li>Develop a detailed roadmap for deploying the solution in a classified environment (up to TS/SCI) and integrating it with existing DoW systems.</li><li>Deliverables will include the MVP prototype, a final technical report, a demonstration in a relevant environment, and a roadmap for scalability and transition.</li></ol>

## Phase III: Dual Use Applications

The successful completion of Phase II is expected to result in technology that is highly sought after across the Department of War and the broader Intelligence Community. The performer will be expected to transition the technology into a sustainable Program of Record or a commercially available service on government contract vehicles. Dual-use applications include deployment in other federal agencies, as well as in highly regulated commercial industries such as finance, healthcare, and critical infrastructure, where compliance and security are paramount.

Generative AI for Secure Workflow Automation and Compliance

SBIR Opportunity Analysis

SBIR Documents

Related SBIR/STTR Opportunities

Opportunity Snapshot

Key Dates