Oct 16, 2026
Welcome to the index.
Five prices you can check this week, and a Level 2 self-check you can walk through.
This is GovCon Stack, a weekly note for a small contractor who has to pick software without a research department. We keep a public index of tools and CMMC firms. Every price we print is cited and dated, and no rank is for sale (how we check a price). This week we walk through what is in the index, where CMMC stands, five prices a small shop can use, the Level 2 self-check, and a short guide for a first contract. If you handle defense work, read the status before you book an assessment. We will write again when a price or a listing changes.
The index
We list 89 tools in 9 categories and 90 CMMC firms.
New this week
Five prices worth knowing
A starting price in each category a small firm usually prices first.
- QuickBooks Online Simple Start is $38 a month for one user.
- Journyx time and attendance is $5 a month per user.
- PreVeil Individual is $25 a month.
- DemandStar County Plan is $60 a year, a supplier plan.
- Responsive Emerging Edition is $10,000 a year as a starting platform fee, with user licenses and add-ons separate.
Side by side
Procas is by quote, and QuickBooks Online publishes a price. We do not pick a winner.
Where CMMC stands
The Department of War suspended CMMC Phase 2 on July 13, 2026, and set up a reform task force to review the program (CIO memo, Department of War release). While the suspension stands, program managers and requiring activities may not designate Level 2 (C3PAO) or Level 3 (implementation memo). Your Level 2 self-assessment and your SPRS score still apply (where CMMC stands).
Worth reading
The first contract stack is a minimum set: register the entity, look for help, and keep ordinary books.
Level 2 self-check
Walk the 110 NIST SP 800-171 requirements and see an estimated score. It is an estimate, not your official SPRS score.