Anduril and Palantir battlefield communication system has deep flaws, Army memo says

An internal U.S. Army memo has flagged the new NGC2 battlefield communications network prototype, developed by Anduril, Palantir, and partners, as "very high risk" due to "fundamental security" problems, despite Anduril's $100 million contract for the system. The memo details critical vulnerabilities, including uncontrolled data access regardless of clearance, untracked user actions, and numerous high-severity flaws in third-party applications, raising significant concerns about the execution risk and security posture of these defense tech providers and their ability to deliver reliable solutions for critical military infrastructure, though the Army CIO characterized the report as part of a routine mitigation process.

Analysis

An internal U.S. Army memo has designated the NGC2 battlefield communications network prototype as a "very high risk" project, citing "fundamental security" problems that challenge the core value proposition of its key developers, Anduril and Palantir (PLTR). Despite a $100 million contract awarded to Anduril and its partners, the memo from the Army's chief technology officer details critical failures, including an inability to control data access by clearance level, a complete lack of user activity logging, and the hosting of third-party applications with numerous unassessed vulnerabilities, one of which contained 25 high-severity flaws. This assessment, which warns of a "likelihood of an adversary gaining persistent undetectable access," stands in stark contrast to both a prior successful field test described by Anduril and the official statement from the Army's CIO, who framed the report as a routine part of mitigating vulnerabilities. The lack of comment from either Palantir or Anduril amplifies concerns about execution risk and the viability of their solution for a critical defense modernization program, creating significant reputational and contractual uncertainty for the firms.

Key Decisions for Investors

• This news represents a material headwind for Palantir (PLTR), as the memo directly undermines its reputation for providing secure, sophisticated data platforms for government clients and could jeopardize its role in the $100 million NGC2 project and future defense-related opportunities.
• Investors should monitor for any formal response from Palantir or subsequent announcements from the U.S. Army regarding the project's status, as a contract review, delay, or cancellation would be a significant negative catalyst.
• The severe security flaws highlighted in this prototype may temper market enthusiasm for the rapid-deployment model of new defense tech entrants, potentially creating an opening for incumbent defense contractors to re-emphasize their more rigorous, albeit slower, development and security protocols.