Typically they buy the weapons tech from contractors and then just classify the whole thing so nobody at the contractor can see it unless they have a clearance.

You can get a clearance without actually working for the military, so there's a grey area between military and private.