Ex-cia spies quit shadows to run defense-tech startups, chase trump’s $1.5 trillion war chest
They once ran black sites, forged passports, and vanished into bazaars with a bounty on their heads. Now they chase term sheets. A wave of retired CIA operators has swapped Langley’s fluorescent corridors for founder titles, timing their pivot to the exact moment Washington is rewriting the rules on who gets to eat from the Pentagon’s next $1.5 trillion trough.
The menu is public: half of the requested increase—$750 billion over the coming decade—has been earmarked for artificial intelligence, cyber payloads, and anything that promises to compress a 36-month acquisition cycle into 180 days. Trump, allergic to paperwork and legacy contractors, keeps tweeting the same instruction: buy faster, buy smaller, buy now.
The valley of spooks
Brian Carbaugh is the new template. Twenty-three years under non-official cover, living as a telecoms consultant in Herat, Kandahar, and other grid squares that never made Google Maps. He remembers the winter of 2001 when field reports arrived as wet paper scraps inside a cassette case. “We had the data, just no glue,” he says inside Andesite’s glass-walled office in Tysons Corner. His startup sells exactly that glue: a fusion layer that chews through classified and open feeds, then spits out risk scores for supply-chain managers who once trusted Excel.
Carbaugh’s seed round closed at $18 million. The cap table is laced with ex-agency angels and In-Q-Tel, the CIA’s venture arm that never really let go. Valuation doubled after the first demo showed a drone operator where to reroute when a port strike in Bandar Abbas rippled, within 14 minutes, to a chip shortage in Texas.
War as product roadmap
Iran’s shadow conflict with the U.S. has become an involuntary R&D department. Every phishing wave against Gulf shipping companies, every GPS spoof that nudges a tanker into Iranian waters, is a live A/B test for founders who once orchestrated those same attacks. Aaron Brown, former head of the agency’s Iran Mission Center, used to sign off on covert action memos. Now he signs purchase orders for Nvidia GPUs. His company, Lumbra, builds transformer models trained on Farsi Telegram channels that predict the next port the Revolutionary Guards will harass. Customers—first the Navy, then Maersk—pay per alert. Revenue run-rate: $4 million after six months.
Ryan Joyce spent the 2010s planting beacons inside humanitarian convoys to track weapons smuggling across the Syrian desert. Same beacons, smaller batteries, now ride inside 18-wheelers hauling avocados from Michoacán to Chicago. GenLogs’ pitch is simple: if a Mexican cartel can reroute a truck, so can a Russian ransomware cell. Insurance underwriters love the story; they just wrote a policy that cuts premiums by 30% if the platform is live.
Speed is the new security clearance
The old defense giants still own the factories, but the purchase orders are shrinking. Palantir’s 2023 IPO filing revealed a clause the industry calls the “120-day hammer”: if the Army can’t field a software module inside four months, the contract self-terminates. That clause is being copy-pasted into every new RFP. Startups don’t carry pension liabilities; they can pivot before the ink dries. “We ship Monday, patch Tuesday, kill feature Friday,” Carbaugh shrugs. “Try that at Lockheed and the union files a grievance.”
Trump’s impatience is measurable. The National Geospatial-Intelligence Agency canceled a $7 billion imagery program last quarter after a 28-year-old founder demonstrated a commercial constellation that refreshes every 90 minutes. The check written to that company: $60 million. The message to the rest of the beltway: adapt or evaporate.
Spycraft as moat
Raising venture capital is easier when your investor deck includes redacted kill counts. The firms that once wouldn’t take a meeting—Andreessen, Bessemer, General Catalyst—now reserve partner slots for founders with security clearances. The term sheets come with a rider: board observers from the Pentagon’s Defense Innovation Unit get a chair, cap tables must stay U.S.-domiciled, and every line of code stays on AWS GovCloud. Founders grumble, then sign. “Capital is cheap, sovereignty isn’t,” Brown notes while scrolling through a Slack channel that mixes ex-Seals with Stanford PhDs.
Market sizing slides cite the same number: $338 billion by 2033 for dual-use tech. The real math is simpler. There are 2.8 million holders of top-secret clearances in the United States. Each one is a node that can unlock a pilot contract worth anywhere from $1 million to $100 million. The first startup to map that social graph and rank who signs the tech-insertion memos wins. Guess who already built that tool? Andesite. Subscription price: $250,000 per seat.
The exit is another entrance
No one talks IPO. The dream is acquisition by the same primes they now taunt. Raytheon, L3Harris, and General Dynamics have all launched venture funds with mandates to buy inside 18 months of first revenue. The multiples are obscene: 25× forward ARR for anything labeled “zero trust” or “generative threat.” A single failed field test still kills the deal, so founders keep a retired general on retainer to whisper in the right ears when smoke rises.
Back in Tysons Corner, Carbaugh pours coffee into a mug stamped with the CIA’s shield—merchandise you will never find in the gift shop. He is already late for a classified demo with U.S. Cyber Command. The calendar invite carries no location, only a code name and a request to leave the phone in the car. Old habits die hard; new fortunes demand them alive. The Cold War ended in boardrooms. The hot one is being coded in Python, one sprint at a time, by the same people who once forged passports in back alleys. The trillion-dollar shift is not coming—it shipped last quarter, and the customer already asked for a patch.