Okay, I went onto the website and looked this over. I’ve done a lot of work for the government and continue to do so. Everything is governed by FAR (Federal Acquisition Regulation) and CFR (Code of Federal Regulations), including the RFP process and how procurements are handled.
I find this whole process very suspicious, but I would start by asking if Starfire is registered with CCR.gov (Central Contractors Registry), which is where virtually every government contractor resides. My business is registered with CCR.gov and I have a DUNS number (Dun & Bradstreet) and a CAGE code (Commercial and Government Entity code). I would ask if they do as well.
If this company is legit and providing materials and services to either government agencies and/or contractors, then they will be registered on CCR.gov and have all the requisite certifications and codes.
They will also have a list of satisfied customers and testimonials (especially after all their years in business).
My business does blast engineering and Force Protection for anti-terrorism and we use all sorts of funky parts and materials systems, and this whole set up strikes me as just wrong. It doesn’t feel right and I know quite a few specialty suppliers working for the government and NONE of them operate this way.