Pittsburgh, PAVeteran owned and operated
The CMMC rule is in effect. A growing number of DoD solicitations already ask for a self assessment and an annual affirmation to bid. Know where you stand.
By the regulations, in minutes

See where your business stands on CMMC, so you can win and keep the federal contracts you are eligible for.

A free check built on the official rules. Find out whether you need Level 1 or Level 2, get your gap report and the real federal money in your industry, and a clear path to bid ready.

Free. No card. No login to start.
1
Find your business

We pull your real federal profile from SAM. No typing your whole life story.

2
Answer a few questions

Plain English, one tap each. A few minutes.

3
Get your readiness report

Your gaps, your score, and the federal money in your lane.

15
Safeguards checked at Level 1
110
Requirements checked at Level 2
SAM
Your real federal profile, pulled in
$0
Free, no login to start
Why check here

Anyone can send you a quiz. This one is built on the regulations and your real numbers.

We are a CMMC compliance firm with our own platform. The check is the front door to it, so it is honest about where you stand, not a trap to book a call.

01

Scored against the official rules, not a sales quiz

We check you against the real requirements: the 15 FAR 52.204-21 safeguards for Level 1, or the 110 NIST 800-171 requirements for Level 2. The same list a prime or an assessor reads. Most online checkers are just a form that emails you a call.

02

It tells you which level you actually need

Answer one plain question about the information you handle and the check routes you to Level 1 for basic contract info (FCI) or Level 2 for controlled info (CUI). No guessing, no wrong turn, no jargon.

03

Tied to your real federal profile

We look your business up in SAM, the government system of record, so your report opens with your real set asides, your state, and the actual federal money in your industry. Not a generic PDF that could belong to anyone.

04

A real gap report and a path, for free

You leave knowing your gaps, where you stand, and a clear path to bid ready. No login, no card. And when you want the gaps closed, the same platform does it with you, so you never start over somewhere else.

The one key

CMMC is easier than it sounds. There are two levels, and one question tells you which.

Which one you need comes down to a simple thing: what kind of government information do you handle?

Most businesses · Level 1

You handle FCI

FCI is basic federal contract information, the emails, orders, and drawings for a job. If you work on federal contracts, you almost certainly handle it. Level 1 is 15 safeguards, you attest to it yourself, and most businesses finish in about 30 days.

Handling sensitive info · Level 2

You handle CUI

CUI is controlled unclassified information, the sensitive material marked CUI or covered by DFARS 252.204-7012. Level 2 covers all 110 NIST 800-171 requirements, and the 15 Level 1 safeguards are already inside them. The check walks you through the right list for you.

The prize

The government already buys what you sell. CMMC is the key to a slice of it.

Your check shows the real dollars in your own industry. Here is the lay of the land.

Construction and trades

Renovations, roofing, electrical, plumbing, HVAC.

$32B+
FY2025

Manufacturing and machining

Parts, fabrication, assemblies, repairs, tooling.

$21B+
FY2025

IT and software

Software, cloud, cybersecurity, help desk, hardware.

$67B+
FY2025

Professional services

Consulting, training, staffing, logistics, admin.

$13B+
FY2025

Products and supplies

Equipment, tools, furniture, safety gear, parts.

$6.4B+
FY2025

Facilities and operations

Janitorial, grounds, security, food, warehousing.

$46B+
FY2025

Source: USAspending.gov, FY2025. This work runs through everyday businesses in all 50 states, not just the big primes.

Why now

The rule is not coming. It is here.

FCI safeguarding under FAR 52.204-21 is written into nearly every federal contract, and a growing number of DoD solicitations already ask for a CMMC self assessment and an annual affirmation in SPRS before they award the work. The businesses that know where they stand stay eligible. The ones that guess find out at the worst possible moment, in the middle of a bid.

See where you stand
Straight answers

The questions owners actually ask

Is this an official CMMC assessment?+
No. It is a free readiness check that estimates where you stand against the official requirements. Your official record is the self assessment and affirmation your senior official files in SPRS, the government system. This check gets you ready for that filing.
Do I even need CMMC?+
If you handle Federal Contract Information (FCI) on a DoD contract, you must meet the 15 FAR 52.204-21 safeguards and file a Level 1 affirmation in SPRS every year. If you handle Controlled Unclassified Information (CUI) under DFARS 252.204-7012, you need Level 2, which covers all 110 NIST 800-171 requirements, and those already include the 15 Level 1 safeguards.
Level 1 or Level 2, how do I know which?+
It comes down to the information you handle. Basic contract information is Level 1. Marked or controlled information (CUI) is Level 2. The check asks you one question and routes you to the right one, so you never work the wrong list.
Is it really free?+
Yes. No card, and no login to start. Add your email only if you want CMMC updates and a reminder before your affirmation lapses. You can see your report without giving an email at all.
What do I walk away with?+
Your gaps, your readiness, and the real federal dollars in your industry, plus a clear next step. If you want the gaps closed, the Custodia platform walks every requirement in plain English and does it with you.

Stop guessing about CMMC. Get a real read in minutes.

Free, by the regulations, and tied to your real federal profile. No card, no login to start.

Start the free check