CMMC100% credited to engagements
5 business days5 deliverables
$3,950 / engagement
Market
What you came for.
20 fixed-price offerings across 5 practices - kits you can download today, engagements with a date on them, and retainers where we run it. Pick what you need; we invoice through QuickBooks and kick off inside 48 hours.
- SDVOSB
- Service-Disabled Veteran-Owned
- CMMC 2.0 L2
- Self-Attested
- NAICS
- 541512 · 541519 · 541511
- PSC
- D310 · D307 · D399
- Payment
- QuickBooks · ACH · Card · PO on request
01 - Start here3
Know where you stand.
CMMC Phase II assessments are suspended; DFARS 7012 and SPRS are not. Get your real number first - every assessment credits or hands off cleanly into the work that follows it.
CMMCMost popular
2 weeks5 deliverables
$12,500 / engagement
CMMC
2 weeks4 deliverables
$9,500 / engagement
02 - Do it yourself3
Kits and tools, instant delivery.
For teams doing the work in-house: the documentation layer and the training requirement, solved today.
CMMC Level 1
Instant download4 deliverables
$295 / kit
CMMC64 documents
Instant delivery4 deliverables
$1,995 / library
TrainingSatisfies AT.L2 3.2.1–3.2.3
Active immediately4 deliverables
$19 / monthrecurring
03 - Get it built8
Fixed-scope engagements.
Defined deliverables, defined timelines, fixed prices. Order online; meet your engagement lead within two business days.
CMMC
3–4 weeks4 deliverables
$19,500 / engagement
CUI
2–3 weeks4 deliverables
$7,500 / engagement
Hardening
1 week5 deliverables
$2,950 / engagement
Incident Response
1 exercise / year4 deliverables
from$3,950 / yearrecurring
DCAA
2 weeks5 deliverables
$4,950 / engagement
AI & automationRuns in your stack
2 weeks5 deliverables
$9,500 / workflow
AI & automationNew
2 weeks5 deliverables
$7,500 / engagement
Capture
7 business days / volume4 deliverables
$6,500 / volume
04 - Offload it6
We run it, you build the business.
Recurring operations and per-bid help: compliance upkeep, a managed CUI enclave, security leadership, your automations kept running, and a BD pipeline that fills itself.
CMMCOffload your compliance to us
Continuous4 deliverables
$1,195 / monthrecurring
CUI
Provisioned in days4 deliverables
$1,995 / monthrecurring
Security leadership
Named lead in 1 week5 deliverables
$4,950 / monthrecurring
AI & automation
Continuous4 deliverables
$2,450 / monthrecurring
Capture
Weekly feed + monthly readout3 deliverables
$795 / monthrecurring
Capture
5 business days4 deliverables
$2,950 / pursuit
How buying works
From cart to kickoff in 48 hours.
Step 01
Add what you need to your cart.
Each engagement is fixed scope, fixed price. No discovery call required; the page has everything you need.
Step 02
We invoice through QuickBooks.
A QBO invoice lands in your inbox within minutes - pay by card or ACH from the same email. Net 15.
Step 03
Kickoff within 48 hours.
You meet the engagement lead, we lock dates, and the work starts. Most engagements wrap inside their stated window.
Procurement questions
What buyers ask before they click.
CMMC Phase II is suspended - do I still need any of this?
The suspension (13 July 2026) pauses the C3PAO and DIBCAC assessment mechanism, not the underlying obligation. DFARS 252.204-7012, NIST SP 800-171 Rev 2, and your SPRS score are all still contractually binding, and primes are still flowing them down. What changed is the deadline pressure, not the requirement - which is why the Readiness Scan, the policy library, and the maintenance retainer are unchanged, and why we removed nothing that was assessment-prep only.
What is the difference between the Fractional CISO and the Compliance Maintenance Retainer?
The retainer keeps evidence current - POA&M cadence, quarterly mini-assessments, SPRS upkeep. The Fractional CISO is the person deciding what the evidence should say: risk register, policy ownership, vendor and architecture calls, incident command, and the quarterly leadership readout. Many clients run both; if you only have budget for one and nobody owns security today, start with the CISO.
Are these GSA-priced?
These are commercial fixed-price packages. We hold GSA MAS pricing for custom engagements; ask us if you need a GSA-vehicle invoice for a Market package and we’ll route it through the schedule.
Can you take a PO instead of running through QuickBooks?
Yes. The cart flow defaults to QBO because it’s fastest, but reply to the invoice email with your PO number and we’ll re-issue against the PO. For new agency relationships we’re happy to start with NET 30 + PO from day one.
Do you handle the CMMC C3PAO scheduling for us?
We don’t schedule the C3PAO - we make sure you’re ready for them. We have working relationships with several authorized C3PAOs and can warm-intro you when your gap-table burndown is on track.
What happens if my engagement runs long?
The price is fixed. If a deliverable needs another pass because of new evidence or scope drift on your side, we either eat the extra time (most of the time, on small overruns) or scope a short change order before continuing. You’ll always know which it is.
Can I bundle multiple engagements?
Yes - add several to the cart and the QBO invoice consolidates them on a single line. For combinations beyond two or three packages, ping us and we’ll cut a custom quote that comes in below the cart total.
Something larger?
Multi-system, multi-quarter, or anything that doesn’t fit a card above.
Tell us about the scope and we’ll come back with a custom quote inside two business days - fixed-price wherever the work permits.
Start the conversation