In 2017 DISA evaluated SFOR'S defensive software.

In 2017 DISA evaluated SFOR'S defensive software. That was the "first time". The "second time" was during the day long DoD contractors simulated cyber attack exercise held in Washington, DC. Then came the modest $50 K phase one SBIR contract in 2018 followed by the joint Air Force/Army phase two SBIR originated n 2019 held up by CRs. As far as
"4 years 0 revenue" I respectfully disagree with you since ACS did pay SFOR a very small sum for the EPL used in: DISA evaluation, the DOD try before buy contractors exercise and now for the joint Air Force & Army operational evaluation. This ""story" as you phrase it, is paused by the Continuing Resolution. If ( and that's a big if) we get a Federal Budget 12/11 when the current CR expires it will continue assuming EPL meets operational criteria. Will EPL pass final DoD muster and go on to get a profitable sole source contract? Your guess is as good as mine. What is undeniable however is that currently EPL is, as Mark put it, "in the government" (for final testing). I am very glad it is. The troop's mobile devices must be protected from keyloggers (what Ram got his patent on) the Russian GRU uses to track & geolocate them!