Case studies
A customer, on camera, not an actor.
A CMMC Level 2 engagement, named, with the numbers beside it.
We only put CMMC work on this page. Capital Cyber does other security work for other kinds of business, and it is not what you came here to read about.
Iron Lift
Iron Lift · CMMC Level 2 readiness. A customer, not an actor.
We wrote the System Security Plan and ran evidence collection.
What this looks like for a small supplier
Iron Lift is a small supplier carrying the same 110 controls a five-hundred-person prime carries. The control count does not scale down with headcount. That is the exact problem CMMC In A Container™ was built for, and it is why the price on that page is published rather than quoted.
Iron Lift is a construction company in Massachusetts. Closer to home, we work on-site across the Northern Virginia counties listed on Locations, because a gap assessment goes faster when somebody is standing in the room.
Defense supplier under 25 people? Start with the grant.
Cyber Grants Alliance, a nonprofit, awards in-kind cybersecurity grants. It provides the work itself, including CMMC Level 1 and Level 2 gap assessments. There is no cost to you, and you are under no obligation to buy anything afterward, from us or from anyone.