CMMC module · Level 2 readiness

Run your cybersecurity compliance program like an operation.

CMMC Agent is a CMMC readiness and compliance management platform for defense contractors and the consultants who support them.

Start a self-assessment I'm a consultant

Sample SPRS summary

SPRS is the DoD score for your cybersecurity: 110 is perfect. Each missing control subtracts 1, 3 or 5 points.

74 / 110

Met: 96
Gaps: 14
POA&M: 9

Met = controls in place · Gaps = still missing · POA&M = gaps with a fix-it plan and due date.

Plans & pricing

Start free. Upgrade when you're ready to submit your SPRS score.

Starter

$0/mo

1 workspace
110-control self-assessment
Live SPRS score

Start free

Contractor

$199/mo

Autopilot readiness plan
SSP & POA&M builder
AI compliance agent
Evidence library

Start Contractor

Consultant

$599/mo

Unlimited client workspaces
Assessor access
Executive briefing exports
Priority support

Start Consultant

110-control library

Version-controlled NIST SP 800-171 Rev. 2 across all 14 families.

Official SPRS scoring

Weighted 5/3/1 deductions per the DoD Assessment Methodology, from 110 to −203.

SSP & POA&M builder

Generate a System Security Plan and Plan of Action & Milestones from live data.

Evidence with guardrails

Metadata, review history and an explicit no-CUI attestation on every upload.

Three portals

Contractors, consultants managing many clients, and read-only assessors.

AI compliance assistant

Explains controls, finds evidence gaps and drafts remediation plans.

2026 regulatory status

CMMC Phase II implementation was suspended on July 13, 2026. Phase I (Level 1 and Level 2 self-assessments with SPRS submission) remains in effect. CMMC Agent supports current self-assessment requirements.

Readiness and compliance management tool. CMMC Agent is not a C3PAO and does not certify CMMC compliance. Do not upload Controlled Unclassified Information (CUI).