13 Jul 2026CMMC Phase II suspended: no C3PAO assessments can be designated. DFARS 7012 and Rev 2 still apply.What changed, and what did not →

Free · no sign-in · verified in your browser

Check a supplier's CMMC posture, and that its history was never rewritten.

Open the link a contractor gave you, or paste it below. The posture document is checked here, in your browser, against MacTech's public key and the public checkpoint record. Nothing on this page asks you to trust MacTech's servers.

What a result means

What does a passing check prove?
That the document was signed by MacTech and not altered, and that each checkpointed score in its history is the one recorded in an append-only witness ledger whose state was signed and published at a known time. Once a checkpoint is in the public mirror, a rewritten history would be visible to anyone holding a copy.
What does it not prove?
That the evidence behind the findings is accurate. The posture comes from MacTech adjudicating evidence collected from the organization's environment; whether that evidence is true is what an assessment establishes, and in time a C3PAO. It is also not a CMMC certification: Phase II assessments cannot currently be designated.
Why is the company not named?
An organization is named on a link only when it has consented to being named on that link. Otherwise the document identifies an opaque witness log, which is enough to verify the history and reveals nothing about who it belongs to.
What does revoked mean?
The organization no longer endorses the link as current. A document fetched before revocation keeps a valid signature; it simply stops being a statement about today.