Know where you stand on CMMC before your prime asks.

Start with the information in your contract. Level 1 covers Federal Contract Information (FCI). Firms handling Controlled Unclassified Information (CUI) generally need Level 2. Your contract and the information you receive determine the scope, not your employee count. We help identify questions to resolve with your prime or contracting officer.

FCI is nonpublic information provided by or generated for the government under a contract. CUI is information that requires safeguarding or dissemination controls under applicable law, regulation or government-wide policy. Not every drawing is CUI. Confirm markings and handling requirements with the information owner before choosing a level.

No. This is a readiness review, not a CMMC certification or C3PAO assessment. GBTech.ai is not a C3PAO, and this isn't legal advice. A Snapshot does not create a CMMC status or submit an SPRS affirmation on your behalf.

You receive your Top 10 fixes with effort, rough cost and who can do each one. You can use the report with your existing IT team or buy implementation through GBTech.ai. The full $1,500 is credited toward any implementation bought through GBTech.ai within 90 days. A full Level 2 gap assessment covering 110 controls is quoted separately after your Snapshot.

Yes. We compare specific government offerings, including Cloudflare for Government and Cisco Duo Federal, where appropriate. We can also compare Akamai Enterprise Application Access, but do not represent it as FedRAMP-authorized without a matching current listing. Authorization applies to a particular service and boundary, not every product from a vendor. We verify current authorization and the contract's required baseline before recommending a tool. GBTech.ai is an advisor, not a FedRAMP-authorized service. FedRAMP authorization alone does not establish CMMC compliance.

The Snapshot is delivered in 5 business days after your completed questionnaire and intake call. The 35-question intake takes about 20 to 30 minutes. We include a 30-minute intake call and a 30-minute report readout. We will email your questionnaire within 1 business day of your request.

That is a fit too. We review the controls on your renewal questionnaire, including MFA, EDR, immutable backups, email security and an incident response plan. The report helps you give evidence-based answers to your broker. It does not guarantee coverage, a premium reduction or acceptance by an insurer.

We provide SPRS score help by identifying scope and evidence gaps. Level 1 uses an annual self-assessment of all 17 practices and a separate affirmation in SPRS. A NIST SP 800-171 DoD assessment score is a different assessment result. The Snapshot does not replace a full NIST 800-171 gap assessment or calculate an official score from a short questionnaire.