Use AI.Keep the secrets.
NeuroWard is a box in your rack that decides what AI traffic may carry out of a defence network. Mask it, block it, or just log it.
Defence staff use AI too.
Sample prompt · invented data · sent to a server abroad
- Engineers paste what is in front of them: programme names, part numbers, test results, supplier emails.
- Security can't see it. No record of which team sent what, to which model.
- Militaries reached for bans. A ban leaves no record of who tried anyway.
Budgets are rising.So is the data at risk.
5% of GDP by 2035
Hague summit, June 2025: at least 3.5% for core defence, plus up to 1.5% for infrastructure, resilience and cyber.
Spain and Belgium dispute the 3.5%$10.05B exports in 2025
Up about 48% on 2024, per SSB's head. Around 56% went to the EU, NATO countries and the US.
Press reports of SSB figures3,500+ companies
Over 1,400 projects and roughly 100,000 to 120,000 employees in the defence ecosystem.
Counts vary by source82% local content
Target is 84% by 2027. A security box built in Türkiye fits that direction.
The fit is our reading, not a rulefor US defence suppliers
CMMC Level 2 means all of NIST SP 800-171. Guidance treats a public AI tool that receives CUI as an external service. Phase 2 dates were suspended in July 2026 for review: check the status.
of exports go to EU, NATO and US buyers
Suppliers in those chains answer to foreign customers' security terms. An AI leak becomes their problem too.
can carry controlled data
Programme names, drawings, part numbers. NeuroWard stops them at the border and logs the decision.
One box between your networkand every AI provider.
A rule for every kind of data
Mask, block or log, per rule. The real values go back into the answer, even in streamed replies.
Your words, not just IDs
Word lists and patterns for programme codenames, part-number formats and supplier names. You edit them in the dashboard.
Only approved destinations
An egress allowlist limits where the box can connect: the AI endpoints you approve, and internal model servers by address. Anything else fails closed.
Files and images too
Uploads and the text inside images and PDFs are checked. Block all, block if data is found, or log only.
Evidence that stays inside
A hash-chained audit log that never stores the value. Export to your SIEM over syslog, CEF, LEEF or Splunk HEC.
Works without internet
Licences are verified offline. Updates are signed packages you upload yourself. Three ways in: gateway, DNS or inline behind the firewall.
Two places we can start.One we do not claim.
Defence supplier networks
Engineers and office staff use public AI tools. NeuroWard masks programme data, blocks what must not leave, and logs the rest. Ordinary corporate network, not a classified one.
Institutions with their own LLM
The model stays inside. NeuroWard sits in front of it for policy, per-team logs and an egress allowlist, and reaches the model server by address. Built for this; not yet run at a customer.
Classified or accredited networks
These need a formal security evaluation and a partner who knows the process. Nothing of ours is certified or accredited. This is the main reason to work with a defence partner.
NeuroWard stops accidental leaks. It is not built to stop a determined insider. Detection today is rules and word lists: it finds structured data and the terms you list, but not names or free text in prose yet. On-device ML for that is on the roadmap. One appliance per site today; high-availability pairs come later.
A working product.Four public buyers have a quote.
What the quotes tell us
- Public bodies want AI control now, not in two years.
- The same box, rules and process carry over to defence institutions.
- Nothing is signed yet. We call them quotes, not customers.
What is still open
- No contract and no revenue yet.
- Independent pentest and server benchmarks: planned in the first 3 months.
- No test yet inside a defence network.
Defence cybersecurity is big.Sizes depend on who counts.
Annual licence.Hardware included.
- All three modes: gateway, DNS, inline
- Türkiye and Gulf rule packs
- Dashboard, audit log, REST API
- Custom rules and word lists
- Key vault, egress list, chat-site controls
- 24/7 support, SIEM export
- High-availability pairs, multi-site
- Dedicated engineer, on-site support
- Air-gapped and custom builds
Hardware costs $3–5K per appliance, sized to the tier and included in the licence. Each licence is bound to one appliance and verified offline; protection never depends on the licence. A defence edition would use the Sovereign tier with a defence rule pack. Its price is for us to set with a partner.
What a defence partner gets.What we need back.
You get
- Control over AI use in your own network, with your first site as the reference if you want it.
- A product to offer to your suppliers and to military customers.
- A defence rule pack built with your terms and formats.
- A stake in the company.
We ask
- Introductions to defence suppliers and military institutions.
- A test environment inside a defence network.
- Guidance on evaluation and accreditation. We do not know the process well enough yet and will not guess.
- A minority stake, not control.
From quotes to a defence pilot.
PoC-ready
- PoC installs at the Turkish public buyers
- Independent pentest, server benchmarks
Defence rule pack
- Codename and part-number tooling
- Turkish and English military terms
- Bypass network card
Hardened
- High-availability pairs
- On-device ML for names and addresses
- Air-gapped build review
Evaluation
- Security evaluation path, with the partner
- Reference sites documented
Public pilots
- Quotes turn into signed PoCs
- Company formed
First defence pilot
- Pilot inside the partner's network
- Support engineer hired
First contracts
- Annual contracts with public buyers
- 2–3 defence pilots via the partner
Reference
- 3 paying customers
- Suppliers in NATO-market chains
Three engineers.One working product.
Mücahit Büyükyılmaz
Founder and CTO. Has started companies before and run engineering in them. Two master's degrees. Leads the product and the company.
Alperen Adalar
Runs the box itself: the operating system, hardening, packaging and the network setup that puts it in a customer's rack.
Berke Asmakaya
Builds the dashboard the security team works in, and the services behind it.
Pre-seed, with room for a strategic partner. 18 months of runway to three paying customers. A new company, formed where the lead investors prefer. The founders join it full time and all IP belongs to it. No former employer holds code or rights. Amount, stake and terms are open for discussion.
Contact: Mücahit Büyükyılmaz · m.buyukyilmaz@ecolarium.io
Sources
Australia, Defence devices and OpenAI.com (5,630 loads, Dec 2022 to Jun 2023): Crikey · The Mandarin via inkl
US Space Force pause on web-based generative AI (2023): Air & Space Forces Magazine
Taiwan defence ministry ban (2025): Taiwan News · Taipei Times
NATO Hague summit, 5% by 2035 (3.5% core + up to 1.5%): Defense News · Air & Space Forces Magazine
Türkiye defence exports 2025 ($10.05B, SSB): The Defense Post · Daily Sabah
Türkiye defence industry size and 82% local content: Hürriyet Daily News · Daily Sabah (84% target, 2027)
CMMC, NIST SP 800-171 and public AI tools: Secureframe · Pivot Point (Phase 2 pause) · Akamai
Aerospace and defence cybersecurity market: MarketsandMarkets
Defence cybersecurity market: Mordor Intelligence
Generative-AI cybersecurity market: $8.65B (2025) to $35.5B (2031). MarketsandMarkets