CMMC Level 2 · Defense Industrial Base · Leesburg, VA+1 571 410-3066
Capital Cyber Compliance

Chantilly, Virginia

CMMC Level 2 where the customer does not advertise.

Chantilly is the headquarters of the National Reconnaissance Office. If a contract flows Controlled Unclassified Information down to you, the 110 controls follow, whatever the customer is willing to discuss.

The NRO's Chantilly headquarters was publicly disclosed in August 1994, and the organization has been headquartered here openly since.

NRO HQ
headquartered in ChantillySource: sgp.fas.org/bulletin/sec39.html, read 2026-09-20.
110 of 110
controls met on our most recent Level 2 engagementIron Lift. As of 2026-09-15, per Iron Lift's self-assessment.
$5,000
CMMC Level 2 gap assessmentFor most small and mid-sized contractors. How that number compares

What we do and do not touch

We assess CMMC Level 2 against NIST SP 800-171, on unclassified systems that handle Controlled Unclassified Information. That is the work. We are not an Authorized C3PAO, we do not certify anyone, and nothing on this site should be read as a claim about classified environments.

If your scope is genuinely more complicated than a gap assessment, we will tell you that in the first conversation rather than after invoicing you for one.

Case Study: Iron Lift

IRON LIFT

Iron Lift, our named CMMC Level 2 case study, is a construction company in Massachusetts. Read it on Case Studies, or see the managed program on CMMC In A Container™. Also nearby: Fairfax County, Loudoun County, Prince William County and Arlington, or the full list on Locations.

Already know you want to talk?

BOOK A CALL

Skip the form. Pick a time and talk to us directly.

What happens in 30 minutes

  1. We read your contract's CMMC and DFARS clauses with you.
  2. We confirm which level applies and how it will be assessed.
  3. We tell you the first step, whether or not it involves us. No slides.

Ready to see where you actually stand?

A CMMC Level 2 gap assessment scores all 110 controls against your real environment, on-site in Chantilly when it matters. You keep the findings, your SPRS score and a broad POA&M, written for your environment, whether or not you carry on with us.

Book a 30-minute call

Defense supplier under 25 people? Start with the grant.

Cyber Grants Alliance, a nonprofit, awards in-kind cybersecurity grants. It provides the gap assessment itself, not cash. It costs you nothing, and you are under no obligation to buy anything afterward, from us or from anyone.

Apply for a CGA grant