Leesburg, Virginia · Defense Industrial Base
CMMC Level 2, from the first gap assessment to the day you pass, and every day after.
We assess, we remediate, and we stay on as your security provider. Most firms do one of those three. We work with the small and mid-size suppliers that large consultancies price out.
Iron Lift · CMMC Level 2 readiness. A customer, not an actor.
“The testing was so easy on my side, and the level of experience and service was exceptional. I am now a happy customer and feel more secure.”
“Their service was excellent and incredibly prompt in resolving the issue when my email was compromised, ensuring my security and peace of mind.”
What we do
The whole of a Level 2 program, run by the people who also run your security.
CMMC Level 2 readiness
SSP, POA&M, the full policy set and the evidence package, taken to self-assessment or to a C3PAO.
NIST SP 800-171 gap assessment
All 110 controls scored the way an assessor scores them, with implemented-but-unevidenced separated from genuinely not implemented.
Managed compliance
Evidence collected on a schedule, quarterly review, POA&M closure and annual affirmation preparation. The posture does not decay after you pass.
For very small suppliers
CMMC In A Container™
A FedRAMP Moderate Authorized environment where your CUI lives, every document an assessor asks for, and a managed program that keeps running. Fixed price, published, for shops of one to five people.
$15,000first year, solo. Against a $138,000 market average.
See how it worksWhy the price can be what it is
CMMC assesses the systems that touch CUI. Most small suppliers have never drawn that line, so CUI ends up on every laptop and the whole business is in scope. Put CUI in one box and the box gets assessed instead of the company.
We are not doing the same job cheaper. We are doing a much smaller job properly.
Find out what an assessor would find, before one arrives.
Tell us where you are. We will tell you what is genuinely open, what is already done and only unevidenced, and roughly how long the rest takes.
If you are a defense supplier under 25 people, start with the grant. Cyber Grants Alliance, a nonprofit, awards a fully funded gap assessment. It costs you nothing and you are under no obligation to buy anything afterwards, from us or from anyone.