A Shield Running on Borrowed Time
Space Force Gen. Michael Guetlein told the Space and Missile Defense Symposium in Huntsville, Alabama, on August 11, 2026, that the Golden Dome homeland missile-defense program could grind to a halt as early as October without more money from Congress. "If they don't figure it out, there is no Golden Dome because there is no funding," he said, according to Breaking Defense. The Pentagon's fiscal 2027 request puts 17.5 billion dollars toward the program, but less than 400 million dollars of that sits in the base budget. The rest depends on a reconciliation package that lawmakers have shown little appetite to pass. Guetlein's office has already obligated roughly 90 percent of the 22.5 billion dollars Congress appropriated in March.
The numbers involved are large by any measure. Guetlein has testified the system will cost 185 billion dollars through 2035, while the Congressional Budget Office puts the 20-year bill at 1.2 trillion dollars. On September 17, at the Ohio Space Forum, Guetlein said the program's first phase, due by 2028, would integrate existing missile-warning and tracking satellites to prioritize defense against "a coercive decapitation or rogue nation attack against the homeland," remarks reported by Aviation Week and summarized by the Arms Control Association. A second phase, running through 2035, would add directed energy weapons, quantum sensing and new communications links.
Cybersecurity Bolted On, Not Built In
While lawmakers argue over the budget top line, a separate warning has built among people responsible for keeping the system's software trustworthy: that Golden Dome's cyber protections are following the same pattern as past Pentagon programs, arriving late, bolted onto an architecture that is already fixed.
In a January 28, 2026 essay for DefenseScoop, Jack Wilmer, the Pentagon's chief information security officer from 2019 to 2020 and now CEO of the cybersecurity firm SIXGEN, and retired Lt. Gen. Charlie Moore, a former deputy commander of U.S. Cyber Command, wrote that encryption, access controls and compliance checks are typically layered onto systems whose architectures are already fixed. A missile-defense system, they argued, can perform flawlessly in testing and still fail in conflict if its infrastructure can be manipulated, degraded or denied. As evidence, they pointed to STARPWN, a 2025 capture-the-flag exercise held at DEF CON's Aerospace Village, in which competitors seized control of a simulated government satellite.
A companion piece in Washington Technology the same month framed the problem as one of scale. Guetlein has compared Golden Dome's complexity to the Manhattan Project, and the article argued that a system built from that many interconnected contractors, sensors and ground nodes introduces new cyber risks that have to be designed for from the outset, not patched in later.
The warnings predate January. In an October 30, 2025 guest essay, also published by DefenseScoop, Rep. Pat Fallon argued that Golden Dome's success hinges on protecting the operational technology, the programmable logic controllers and sensor networks that will run its counter-drone and tracking functions, and called for zero-trust principles to be applied to those systems rather than treating IT and OT security as separate problems. Fallon's essay noted the tools to build such a framework already exist; what is missing, he wrote, is funding and attention directed at the OT layer specifically, rather than at the networks surrounding it.
What the Exercises Found
STARPWN has run since 2022 under the Aerospace Village, with sponsors including SIXGEN, The Aerospace Corporation and Cal Poly, and is built to simulate the kind of access a real adversary might get. Its 2025 challenges, according to pre-event descriptions from the organizers, included a wireless task built around disrupting the link between a ground antenna and a simulated spacecraft, and an operational-technology task centered on the programmable logic controller that physically moves a satellite antenna. A separate, in-person Aerospace Village contest the same week at DEF CON 33 gave teams access to a simulated ground station and satellite environment running commercial satellite command-and-control software alongside NASA's open-source core Flight System; Viasat's internal red team won that session.
None of this means Golden Dome's actual satellites or ground systems have been breached. It does mean the people building these exercises, several of whom now advise on the program's cyber posture, keep demonstrating how quickly a capable team can move from network access to physical control of hardware, inside environments designed to mirror real space systems.
An Oversight Gap of Its Own
Congress has written reporting requirements into law, but not ones that single out cybersecurity. Section 1652 of the fiscal 2026 National Defense Authorization Act, Public Law 119-60, requires the Pentagon to file an annual report on Golden Dome covering a threat assessment, system architecture and a cost and schedule estimate, but the publicly described requirement does not call out cyber resilience as its own line item. Lawmakers say they remain short on detail about the program more broadly, and the Arms Control Association reports the Pentagon has declined Congressional Budget Office requests for briefings that would inform an independent cost estimate, the same estimate that puts the program's price tag nearly seven times higher than Guetlein's own figure.
The hardware keeps moving ahead of that paperwork. On July 14, 2026, the Space Development Agency awarded L3Harris and Sierra Space a combined 1.75 billion dollars to build 36 additional missile-tracking satellites for Golden Dome's Tranche 3 layer, bringing the tracking constellation to 104 spacecraft, all due for launch by the end of 2028, according to DefenseScoop. Those satellites, and the ground systems that will command them, are exactly the kind of infrastructure Fallon's essay argued needs zero-trust protection designed in before the network goes live, not added once it is already in orbit.
Reporting on the STARPWN exercise and its implications for Golden Dome was first compiled by DefenseScoop.
