Exostar

About Exostar

Financials

Dated, source-cited figures. Estimates are marked.

Products by Exostar

All products by Exostar reviewed by our AI panel of experts.

ExostarAI Compliance

Secure collaboration and compliance platform for regulated industries

Free7.2/10

Competitive Landscape

Who Exostar competes with, and how they differ.

P

PreVeil

PreVeil sells end-to-end encrypted Drive and Email plus a compliance accelerator that defense contractors use to store and share CUI for CMMC, ITAR and NIST SP 800-171 — the same buyer Exostar targets with its CMMC Ready Suite and managed Microsoft 365 enclave. PreVeil is a point product a single supplier buys for itself; Exostar additionally operates the shared prime-supplier network and partner identity federation the OEMs themselves pay for.

Drata8.0/10

Drata automates evidence collection and continuous control monitoring so one company can certify against SOC 2, ISO 27001 and NIST-family frameworks, sold largely self-serve to SaaS and mid-market IT teams. Exostar targets the aerospace, defense and life-sciences supply chain, where compliance status is published into a network that primes read from rather than kept in the supplier's own dashboard.

1 product reviewed on TopReviewed

Vanta7.2/10

Vanta covers the same compliance-automation ground as Drata with a large SMB and mid-market install base and broad framework coverage. It ships no supplier network, managed CUI enclave or external-partner identity layer — the components Exostar charges aerospace and defense primes for.

1 product reviewed on TopReviewed

M

MetricStream7.2/10

MetricStream sells enterprise GRC suites, including third-party and supplier risk modules, deployed inside a single large enterprise. Exostar pools supplier vetting and credential data across a multi-tier network instead, so a supplier is verified once and that verification is reused by every prime on the platform.

1 product reviewed on TopReviewed

Okta8.1/10

Okta is general-purpose identity and access management — SSO, MFA and lifecycle management for workforce and customer identities in any industry. It overlaps Exostar's Managed Access Gateway for federating external partner access, but carries no aerospace and defense community, supplier vetting or CMMC compliance tooling.

1 product reviewed on TopReviewed

Company Timeline

Key milestones in Exostar's history, with sources.

1. Aug 20, 2026Partnership

   Fujitsu builds Japan defense supply-chain service on Exostar technology

   Fujitsu's Trusted Supplychain Service for Japan's defense and critical infrastructure sectors runs on Exostar Managed on Microsoft 365, providing managed enclaves, identity and access management, partner onboarding and audit-ready logging. The two have collaborated since 2019.

   exostar.com
2. May 6, 2026Milestone

   Selected for U.S. Army NCODE IDIQ contract

   The Army named Exostar a Verified External Service Provider on its Next-Gen Commercial Operations in Defended Enclaves vehicle, a DoD-funded route for small defense suppliers to reach CMMC Level 2 and NIST SP 800-171 compliance via the CMMC Ready Suite.

   exostar.com
3. Apr 7, 2026Partnership

   Wins new five-year Lockheed Martin contract for supplier, risk and compliance management

   Lockheed Martin selected Exostar for supplier credential verification, continuous risk assessment (capabilities, financial health, denied-party screening) and identity and access management across roughly 20,000 suppliers, supporting its 1LMX transformation program. Contract value was not disclosed.

   exostar.com
4. Dec 17, 2025Milestone

   Achieves CMMC Level 2 certification with a perfect score

   A C3PAO assessment authorized by The Cyber AB found Exostar compliant with all 110 NIST SP 800-171 Rev. 2 controls with no POA&M items. Exostar said fewer than 1,000 organizations nationwide held the designation at the time.

   exostar.com
5. Dec 17, 2024Acquisition

   Acquires Robot Morning and ComplyUp

   Exostar bought Robot Morning, whose SupplyLine, DemandLine and AXON products cover manufacturer-supplier delivery and demand planning, and ComplyUp, which prepares suppliers for the DoD-mandated third-party CMMC audits. Terms were not disclosed.

   exostar.com
6. Oct 30, 2024Milestone

   Surpasses one million active users on The Exostar Platform

   Exostar reported more than one million active users across over 200,000 companies and agencies in 175 countries, including 98 of the top 100 U.S. defense industrial base firms and more than 25 of the top global biopharmaceutical companies.

   exostar.com
7. Nov 20, 2023Acquisition

   Arlington Capital Partners completes acquisition of Exostar from Thoma Bravo

   Arlington Capital Partners, a Washington-area private equity firm with roughly $7 billion in capital commitments, closed its purchase of Exostar after announcing it on 26 September 2023; terms were not disclosed.

   exostar.com
8. Jun 2, 2020Acquisition

   Thoma Bravo agrees to acquire Exostar from its joint-venture shareholders

   Thoma Bravo announced an agreement to buy Exostar, LLC from the joint venture of BAE Systems, Boeing, Lockheed Martin, Raytheon, Rolls-Royce and, latterly, Merck; terms were not disclosed. The platform served over 150,000 organizations at the time, and the transaction closed on 7 July 2020.

   exostar.com
9. Oct 27, 2015Funding

   Merck Global Health Innovation Fund invests an additional $10 million

   Merck GHI, which manages $500 million, added $10 million on top of its October 2014 investment. Exostar said its life-science and healthcare community had grown past 1,000 global organizations within a year.

   exostar.com
10. October 2014Funding

    Merck Global Health Innovation Fund invests $5 million

    Merck's venture arm made an initial $5 million investment to expand Exostar's healthcare and life-sciences identity business; the amount and October 2014 date are stated in Exostar's follow-on announcement a year later.

    exostar.com
11. Jul 25, 2000Founded

    Founded as an aerospace and defense B2B exchange by BAE Systems, Boeing, Lockheed Martin and Raytheon

    The four primes signed the definitive agreement forming the online trading exchange, unveiled the Exostar name, and said they planned to launch the web-based exchange by the end of September 2000.

    aviationweek.com