Secure email, file sharing, and compliance tracking for defense contractors that handle Controlled Unclassified Information. 19 tools are listed in name order. This page is not a ranking.
Want quotes? Choose who may contact you
CMMC Phase 2 · POA&M rules · Scoping CUI · SPRS scores · System security plan · Before you hire a C3PAO
Listed in name order. This page is not a ranking.
CMMC tools
ATX Defense offers CMMC Space, a CUI environment for defense contractors that includes a Google Workspace, a virtualized environment, and documentation, with a published starting price per user.
$299 per user per month, starting price, minimum 5 users, starting
View listingCMMC tools
Cuick Trac Managed Enclave is a managed secure enclave in Microsoft GCC-H for federal contractors that handle CUI, ITAR, and FCI. The page says it is for DFARS 252.204-7012, CMMC Level 2, and NIST SP 800-171.
By quote
View listingCMMC tools
Exostar sells secure collaboration products for aerospace, defense, and life sciences, including a CMMC Ready Suite and a Certification Assistant for CMMC and NIST SP 800-171 self-assessments.
By quote
View listingCMMC tools
FutureFeed is a CMMC and NIST 800-171 compliance platform for the defense industrial base, used to manage the system security plan, plan of action and milestones, and evidence. Rates on the pricing page depend on the term and the FTE band.
$88 per month on a 3-year term, for 25 or fewer FTEs, starting
View listingCMMC tools
Hyperproof offers CMMC compliance management software for Defense Industrial Base contractors that handle CUI and for organizations pursuing CMMC Level 1 or Level 2.
By quote
View listingCMMC tools
Ignyte is a compliance platform plus consulting for CMMC, FedRAMP, and ISO 27001, aimed at organizations preparing for those assessments.
By quote
View listingCMMC tools
Kiteworks is a platform for governed data exchange across email, file sharing, and other channels. Its site lists CMMC, FedRAMP, NIST 800-171, and ITAR among the frameworks it addresses.
By quote
View listingCMMC tools
Microsoft 365 GCC High is a US government cloud for the Department of Defense and for contractors that hold or process DoD controlled unclassified information or that are subject to ITAR. The page says eligibility is validated before an environment is established, and that trials are not available.
By quote
View listingCMMC tools
MotherBear is a CMMC platform for defense contractors, managed service providers, and consultants, with requirements tracking, an SSP and policy builder, and an evidence repository.
By quote
View listingCMMC tools
Ostendio is a GRC platform that lists more than 300 frameworks, including NIST, CMMC, and FedRAMP. The main page is written for MSPs and security programs.
$2,994 per year, starting price, starting
View listingCMMC tools
Paramify is a compliance platform whose CMMC page says it guides users through NIST 800-171 and CMMC, including small-business defense suppliers and registered practitioner organizations. The pricing page publishes CMMC ranges and separate amounts for other frameworks.
$2,000 per year, starting
View listingCMMC tools
PreVeil encrypts email and files. Basic is free, Individual is $25 per month and requires annual payment, Business is $30 per user per month, and PreVeil Pass is $450 per month. Gov Community is custom.
$25 per month, starting
View listingCMMC tools
Project Spectrum offers cybersecurity self-assessments against NIST 800-171 and CMMC Level 1 and Level 2, plus readiness training, and describes itself as a Defense Industrial Base resource.
Free
View listingCMMC tools
Securden Unified PAM is privileged access management software, and Securden publishes a page on using it against CMMC access-control practices.
Free
View listingCMMC tools
SMPL-C is CMMC documentation software for defense contractors, managed service providers, registered practitioner organizations, and C3PAOs. The pricing page names Level 1 and Level 2 plans and sends each plan to a quote.
By quote
View listingGovernment tools · CMMC tools
SPRS is the Defense Department system for supplier and product performance information. Its CMMC page says vendors certify CMMC Level 1 and Level 2 there for the defense acquisition community to review.
Government site
View listingCMMC tools
SteelCloud ConfigOS automates STIG compliance and CIS Benchmarks for organizations the page describes as federal, SLED, and regulated enterprise. The company's own site asks you to schedule a demo.
By quote
View listingCMMC tools
Totem is CMMC and NIST 800-171 software for defense contractors and their service providers. The pricing page lists Essentials, Enhanced, and Engaged subscriptions, plus enclave packages and separate assessment prices.
$95 per month if billed month to month, or the yearly total when billed annually, starting
View listingCMMC tools
Virtru sells data protection packages for email, files, and applications. The Compliance package is described for regulated industries and government contractors and the page says it helps meet CMMC, DFARS 7012, and ITAR.
$119 per month, billed annually, includes 5 users, starting
View listingNewsletter
A short email when CMMC status or a tracked price changes. At most one a week. We send a confirm link first, and every email has an unsubscribe link.