CMMC built for a team of one to five.
Solopreneurs and small shops carry the same compliance obligation as a 200-person contractor — with none of the staff, budget, or time. Our Starter tier puts the full Managed Compliant Enclave within reach of the smallest teams: a compliant environment in your own cloud account, with compliance handled for you — priced per in-scope user.
CMMC doesn’t scale down on its own.
CMMC Level 2 was written with the whole Defense Industrial Base in mind — but the requirement lands the same whether you’re 500 people or just you.
The cost is brutal at your size
A full Level 2 program — tooling, a government-cloud environment, documentation, and ongoing upkeep — is priced for companies with revenue to match. Spread across one or two people, it can swallow a contract’s margin whole.
You don’t have the hours
110 controls, 320 assessment objectives, an SSP, a POA&M, evidence collection, an SPRS score. There’s no IT department to hand it to — it’s you, after the actual billable work is done.
The risk is real, not theoretical
A self-assessment or affirmation you can’t back up carries genuine consequences — and primes increasingly won’t award work to a sub that can’t show it’s compliant. “We’ll get to it” isn’t a strategy.
Most providers won’t size down for you
Enterprise-style engagements assume an IT team and an enterprise budget. Few are built to take a genuinely tiny client through Level 2 without charging like you’re a midsize firm.
One decision. One simple path.
No tangle of separate quotes and add-ons. The Starter tier is one onboarding, then one per-user monthly subscription — your compliant enclave, your documentation, and ongoing compliance all bundled and delivered through our platform, so the busywork stays off your plate.
One-time onboarding
A single onboarding stands up your Managed Compliant Enclave and gets you assessment-ready — not a stack of separate engagements.
- A real scoping check to confirm your in-scope users — never a rubber stamp
- Documentation package, SSP & policies tailored to your environment
- Your compliant enclave, built in your own cloud account and ready to use
Per-user monthly subscription
Once you’re live, a predictable per-in-scope-user fee keeps you compliant — with compliance included and the platform doing the heavy lifting.
- Documentation, SSP & POA&M kept current for you
- Compliance app with AI-powered automation — no manual scramble
- Live RPA support, with our experts on the exceptions
The same complete platform. Starter is the full Managed Compliant Enclave priced for 1–5 in-scope users — as your in-scope team grows, you simply move up a tier. Same platform, same features.
How Starter gets you compliant.
Starter isn’t a pile of tools to figure out — it’s a done-for-you path to CMMC Level 2. We stand up your compliant environment, build your documentation, and then run the ongoing work for you. One onboarding, then a predictable monthly fee per in-scope user.
We scope & build
We confirm exactly which users and systems touch CUI, then stand up your Managed Compliant Enclave in your own GCC High or Google Assured Workloads account — sized to your in-scope team.
One-time onboardingWe document everything
You get a customized documentation package — System Security Plan, policies, and POA&M — written to your environment and mapped to NIST 800-171, so you’re ready for a C3PAO assessment.
Included in onboardingWe keep you compliant
Our compliance app guides the tasks and documents the behaviors that keep you compliant — supported by AVA, our AI assistant, with real RPAs stepping in when you need a human.
Ongoing, monthlyEverything included
- Managed Compliant Enclave with full virtual desktops, in your own cloud account
- Customized documentation package, SSP & policies
- Compliance app — guides your tasks & documents the behaviors that keep you compliant
- AVA, our AI assistant, with real RPA support when you need it
- Security awareness training
- Secure backup, managed security (SIEM) & endpoint support
- Built in your own cloud account — you own it, no lock-in
Starter
1–5 in-scope users
Then, ongoing
$525 /user/moCompliance included
To get started
$3,500One-time onboarding
No hourly bills, no scope-creep charges. The price you see is the price you pay.
Get startedBilled per in-scope user, per month. Independent C3PAO assessment fees are separate. More than 5 in-scope users? See the Growth & Scale tiers →
Find your fit in ten seconds.
Starter is the entry point to the same Managed Compliant Enclave the larger tiers use — sized and priced for the smallest teams. Here’s how to know if it’s your starting place.
You’re a small shop with a real CUI obligation.
- You have 1–5 in-scope users — the people who actually touch CUI
- You need CMMC Level 2 / NIST 800-171, whether for a prime or a contract clause
- You want compliance handled for you, not another tool to run
- You’d rather have a predictable monthly cost than a big project bill
- You want a compliant environment in your own cloud account — no lock-in
Your in-scope team is bigger — Growth is built for you.
- You have 6 or more in-scope users — Growth and Scale carry lower per-user rates
- You handle ITAR or export-controlled data needing US-person controls
- You operate multiple sites or a more complex CUI environment
- You want the same complete platform — just at the right tier for your size
Not sure how many of your users are in scope? That’s the first thing we sort out together — scoping it correctly is what keeps your cost (and your assessment) small.
Get compliant without the overhead.
A short scoping conversation maps your in-scope users and your path to CMMC Level 2 — so you know exactly what Starter covers before you commit. No pressure, no rubber stamp.
