Loudoun County, Virginia
CMMC Level 2, based where your suppliers already are.
We are based in Leesburg, the county seat. We work with Loudoun County defense contractors on-site, not over a screen-share from another state.
Loudoun sits inside the Dulles Technology Corridor. The DFARS clause that arrives with a contract does not scale to the size of the company that signs it, and small suppliers here carry it without anyone whose job is compliance.
Why location matters here
A gap assessment often means someone physically walking your floor: where hardware sits, who has a badge, how a visitor is logged. That is faster and cheaper to do without travel time eating the engagement, and it is why we scope Loudoun and the immediately surrounding counties for on-site work first.
What we do and do not touch
We assess CMMC Level 2 against NIST SP 800-171, on unclassified systems that handle Controlled Unclassified Information. That is the work. We are not an Authorized C3PAO, we do not certify anyone, and nothing on this site should be read as a claim about classified environments.
If your scope is genuinely more complicated than a gap assessment, we will tell you that in the first conversation rather than after invoicing you for one.
Case Study: Iron Lift
IRON LIFTIron Lift, our named CMMC Level 2 case study, is a construction company in Massachusetts. Read the full story on Case Studies, or see what the full managed program looks like on CMMC In A Container™. Also nearby: Chantilly, Fairfax County, Prince William County and Arlington, or the full list on Locations.
Already know you want to talk?
BOOK A CALLSkip the form. Pick a time and talk to us directly.
What happens in 30 minutes
- We read your contract's CMMC and DFARS clauses with you.
- We confirm which level applies and how it will be assessed.
- We tell you the first step, whether or not it involves us. No slides.
Ready to see where you actually stand?
A CMMC Level 2 gap assessment scores all 110 controls against your real environment, on-site in Loudoun County when it matters. You keep the findings, your SPRS score and a broad POA&M, written for your environment, whether or not you carry on with us.
Defense supplier under 25 people? Start with the grant.
Cyber Grants Alliance, a nonprofit, awards in-kind cybersecurity grants. It provides the gap assessment itself, not cash. It costs you nothing, and you are under no obligation to buy anything afterward, from us or from anyone.