CMMC Level 2 · Defense Industrial Base · Leesburg, VA

Chantilly, Virginia

CMMC Level 2 where the customer does not advertise.

Chantilly is the headquarters of the National Reconnaissance Office. If a contract flows Controlled Unclassified Information down to you, the 110 controls follow, whatever the customer is willing to discuss.

The NRO's Chantilly headquarters was publicly disclosed in August 1994, and the organization has been headquartered here openly since.

NRO HQ
headquartered in ChantillySource: sgp.fas.org/bulletin/sec39.html, read 2026-09-20.
110 of 110
controls met on our most recent Level 2 engagementIron Lift. As of 2026-09-15, per Iron Lift's self-assessment.
$5,000
CMMC Level 2 gap assessmentFor most small and mid-sized contractors. How that number compares

What we do and do not touch

We assess CMMC Level 2 against NIST SP 800-171, on unclassified systems that handle Controlled Unclassified Information. That is the work. We are not an Authorized C3PAO, we do not certify anyone, and nothing on this site should be read as a claim about classified environments.

If your scope is genuinely more complicated than a gap assessment, we will tell you that in the first conversation rather than after invoicing you for one.

Case Study: Iron Lift

IRON LIFT

Iron Lift, our named CMMC Level 2 case study, is a construction company in Massachusetts. Read it on Case Studies, or see the managed program on CMMC In A Container™. Also nearby: Fairfax County, Loudoun County, Prince William County and Arlington, or the full list on Locations.

Already know you want to talk?

BOOK A CALL

Skip the form. Pick a time and talk to us directly.

What happens in 30 minutes

  1. We learn about your business and the defense contracts you hold or are bidding on.
  2. We walk you through a gap assessment, the first step toward CMMC, and what it covers.
  3. If you qualify, we help you apply to Cyber Grants Alliance for an in-kind grant, which provides the gap assessment itself. No slides.

Ready to see where you actually stand?

A CMMC Level 2 gap assessment scores all 110 controls against your real environment, on-site in Chantilly when it matters. You keep the findings, your SPRS score and a broad POA&M, written for your environment, whether or not you carry on with us.

Book a 30-minute call

Defense supplier under 25 people? Start with the grant.

Cyber Grants Alliance, a nonprofit, awards in-kind cybersecurity grants. It provides the work itself, including CMMC Level 1 and Level 2 gap assessments. There is no cost to you, and you are under no obligation to buy anything afterward, from us or from anyone.

Apply for In-Kind Grants