Plans & pricing
Every plan is preparation tooling for CMMC / NIST SP 800-171 — it does not submit to SPRS. Upgrade to unlock additional organizations, C3PAO-ready deliverables, and team collaboration.
Free
$0
Get oriented and run your first Level 2 self-assessment.
- 1 organization with its Level 2 self-assessment
- Score, status & gap summary (with POA&M-eligibility preview)
- Level-determination wizard & Level 1 (FAR 52.204-21) self-check
- SPRS entry helper
- Validity & reaffirmation calendar
- Free public tools: Control Mapper, DFARS Reference, Incident Timer, Timeline Calculator, CUI Checklist
- Guest score calculator — full 110-requirement self-assessment, no account
Assess
$199/yr
Your Level 2 assessment plus remediation, evidence, and exports.
- Everything in Free
- Delete saved assessments
- POA&M tracker (owner · milestone · 180-day clock)
- Remediation intelligence + plan
- Evidence capture (per objective)
Secure
$799/yr
C3PAO-ready deliverables and collaboration for your whole team.
- Everything in Assess
- Level 3 (DIBCAC) readiness track (24 SP 800-172 enhanced requirements)
- SSP Generator (.docx)
- C3PAO Evidence Workbook (.xlsx)
- Shared Responsibility Matrix builder (.xlsx)
Advance
$1,999/yr
Manage up to 10 client organizations with white-label exports and a featured listing.
- Everything in Secure
- Create additional organizations — up to 10 client orgs that inherit your plan (one subscription)
- Nexus command center — multi-organization portfolio + single-org executive overview
- Family roll-up reporting across every client org — branded PDF & Excel export
Upgrade or change your plan anytime — checkout and billing are handled securely by Stripe, and you can manage or cancel from your billing settings. All tiers share the same regulatory engine; paid tiers add deliverables, automation, and collaboration, never different scoring.