Updated 12 Aug 2026 CMMC Phase 2 was suspended on July 13. Your SPRS self-assessment was not. What this means →
Pricing

The assessment is free. The paperwork is $149.

You shouldn't have to pay to find out where you stand. Walk all 110 controls, get your SPRS score, see your gaps — free, no card, no clock. Pay only when you need the documents an assessor asks for.

Free
$0 forever
  • Scoping wizard — 15 minutes, plain English
  • All 110 NIST 800-171 controls explained for a small business
  • Live SPRS score, recalculated as you work
  • Gap list and per-control evidence checklists
  • Your work saved, no time limit
  • No credit card
Start free
CMMC Map
$149 /month
  • Everything in Free
  • System Security Plan (SSP) generated from your answers
  • POA&M with owners, milestones and dates
  • All 14 required policies as editable Word documents
  • Audit bundle, readiness report and exports
  • AI assistant on every control
  • Security awareness training with per-employee records
  • Microsoft 365 and Google Workspace evidence readers, MCP connector
  • Consultants: client workspaces at $75 each
Unlock documents
Why it's split this way

Diagnosis free, treatment paid.

Roughly 70% of this work is documentation — that's the part that takes weeks and the part a consultant charges you for. Finding out your score shouldn't cost anything, and it shouldn't come with a seven-day clock forcing a decision before you've even read your gaps. So it doesn't.

A formal C3PAO assessment runs $50,000 and up. A mock assessment runs $29,000. This is $149 a month and you can cancel the moment your documents are done.

Common questions

About the price

Is the free tier a trial?
No. There's no clock on it and no card required. Run the wizard, work through all 110 controls, keep your SPRS score as long as you like. If you never need the generated documents, you never need to pay.
What exactly do I get for $149?
Document generation — the System Security Plan, the POA&M and all 14 required policies, filled in from your control answers and formatted for assessor review — plus the audit bundle, exports, the AI assistant, and the built-in security awareness training with completion records.
Do I lose my work if I don't pay?
No. Your assessment, your answers and your score stay yours on the free tier. The paid plan adds the documents; it doesn't hold your data hostage.
Competitors sell a one-time licence. Why monthly?
Because the rules move. July 13, 2026 is the proof — the entire Phase 2 certification timeline was suspended with no notice. A document set bought once goes stale the first time DoD changes something, and compliance is an annual obligation anyway: SPRS scores expire after three years and affirmations are yearly. You're paying for the documents to stay current, not for a one-time download.
Can I cancel?
Any time, from Settings → Billing. No contract and no cancellation call. You drop back to the free tier and keep your assessment.
Is there a plan for teams or consultants?
Team members are included; invite them from Settings → Team. Consultants and MSPs run each client as its own workspace for $75 a month per client, billed on the same invoice and prorated as clients come and go.