mock assessments

Aethon Security specializes in customized cybersecurity and CMMC compliance services, helping organizations meet regulatory standards and protect critical assets. Its leadership team combines cybersecurity professionals with expertise in DFARS, CMMC, and HIPAA compliance. The company offers services branded Aethon Compass, Aethon Guide, and Aethon Guard, covering mock assessments, compliance roadmaps, and managed IT with 24/7 cybersecurity.

CMMC complianceData Protectiondocumentation creationemployee traininggap analysisManaged It Servicesrisk assessmentsystem integrationthreat monitoring

ArCybr is an accredited C3PAO (Third-Party CMMC Auditing Firm) that provides auditing services and guidance to help organizations achieve DFARS and CMMC Level 2 requirements. Founded in 2021 by CEO Claudine Adams as a woman-owned business, ArCybr was certified as a C3PAO in December 2022 by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC).

CMMC assessmentDefensive Cyber Operationsgap analysisinformation security governancepatching and scanningpenetration testingpolicy creation and implementationrisk managementrisk management framework supportvulnerability management

Auditwerx specializes in security advisory, compliance and reporting services for clients throughout the United States and internationally. As a division of Carr, Riggs & Ingram (CRI), it provides assessment, readiness and reporting services across frameworks including SOC, PCI DSS, CMMC, HIPAA, HITRUST, NIST CSF, Microsoft SDPR and ISO 27001. Auditwerx is an Authorized C3PAO and offers a 'Test Once, Report Many' methodology to consolidate compliance efforts.

attestationauditcompliance reportingcontrol gap identificationGap assessmentsreadiness assessmentsremediation guidancescope validationsecurity advisoryself-assessments

Biorn Group Cyber is a veteran-owned, Cyber-AB Registered Practitioner Organization that helps Defense Industrial Base organizations achieve CMMC Level 2 compliance. Its team includes Certified CMMC Professionals and Certified CMMC Assessors, and it supports clients through the full compliance lifecycle from readiness and environment build to assessment preparation and ongoing maintenance.

CMMC advisorycompliance roadmap developmentcontinuous compliance monitoringdigital and hybrid enclave setupdocumentation reviewevidence validationGap assessmentsremediation supportScopingsecurity control implementationtool configuration

Check Azimuth is an authorized CMMC C3PAO that prepares, assesses, and certifies Defense Industrial Base companies to meet CMMC Level 2 requirements. It is a Veteran-owned and operated organization (SDVOSB) whose team of Lead CCA qualified assessors has collectively performed over 100 assessments. Founder and President Doug Kim is a Veteran with over two decades of SMU/SOF combat experience.

CMMC certificationCMMC Level 2 AssessmentsconfigurationCybersecurity consultinginfrastructure deploymentongoing management

CISEVE is a Cyber AB Accredited C3PAO specializing in cybersecurity compliance and risk management services within the Department of War (DoW) supply chain. The company is one of the first CMMC C3PAOs and has over 50 years of combined experience. CISEVE is headquartered in Las Vegas, Nevada, with an additional office in Burlington, Massachusetts.

certification preparationCMMC assessmentsdocument reviewFISMA assessmentgap analysisICS assessmentsISO consultingpenetration testingvulnerability scanning

Coalfire Federal provides public sector and private companies with cybersecurity expertise, specializing in CMMC advisory and assessment services as an authorized C3PAO, and FedRAMP and FISMA ATO services as a 3PAO. Formed in 2017 to manage federal government cybersecurity services inherited through Veris Group, it has provided cybersecurity services for nearly 20 years.

C3PAO assessmentsCMMC assessmentsCUI boundary analysiscyber automation, engineering, and orchestrationcyber program management and operationsDoD Impact Level 6 assessmentsFedRAMP 3PAO assessmentsFISMA ATOgap analysispenetration testingremediation supportrisk management and compliancesecurity compliance and advisoryvulnerability assessments

Garde1 provides CMMC readiness and mock-assessment software. It reads connected systems such as Microsoft 365, Google Workspace and AWS, grades all 320 CMMC objectives from collected evidence, computes the SPRS score, and generates the 14 domain policies, SSP and POA&M. Garde1 is not a C3PAO and does not issue certifications; it is pursuing Registered Provider Organization authorization and is hosted on FedRAMP Moderate authorized AWS services in us-east-2.

API evidence collectionaudit logsC3PAO handoff portalPOA&M generationpolicy and SSP generationremediation workflowSCIM provisioningSPRS score computationSSO

Crux Security provides cybersecurity advisory services delivered by senior security consultants and practitioners. The company builds and manages security programs tailored to a client's industry and compliance obligations, with the Crux Platform included for shared visibility. Services span fractional CISO leadership, CMMC readiness, managed application security, penetration testing, executive/VIP protection, and full managed program management.

CMMC readinessexecutive/VIP cybersecurity protectionFractional CISO leadershipmanaged application securitymanual penetration testingNIST 800-171 gap assessmentremediationsecurity program management

Custom Cybersecurity Solutions LLC provides CMMC Advisory and Mock Assessment services led by a Lead Certified CMMC Assessor, along with NIST SP 800-171 compliance services, ITAR compliance advisory, cybersecurity assessments, penetration testing, and training. The company also offers Microsoft solutions including Managed Security Services, SOC operations, Azure Virtual Desktop, and networking services such as WAN design, firewalls, VPNs, and VoIP.

Azure Virtual DesktopCMMC advisorycybersecurity auditsendpoint managementfirewall configurationITAR readiness assessmentsmanaged security servicesNIST SP 800-171 gap analysispenetration testingSOC operationsSystem Security Plan and POA&M developmenttrainingVOIP setupVPN setupWAN design

DataSoftNow is a cybersecurity consulting, compliance, and managed security services firm. It is an authorized CMMC Certified Third-Party Assessor Organization (C3PAO) providing independent CMMC Level 2 assessments, and also a CMMC-focused Managed Service Provider (MSP) and Managed Security Service Provider (MSSP). It serves the Defense Industrial Base, government agencies, manufacturers, and commercial organizations.

access control and MFA implementationaudit logging and SIEM integrationCMMC consulting and implementationCMMC Level 2 AssessmentsGap assessmentsIncident responsemanaged IT and security servicesPOA&M developmentsecure enclave architecture designsystem security plan authoring

DNA Mavens LLC is a women and minority owned small business offering forensic DNA consulting services, formed in August 2022. Its team of forensic DNA experts provides case reviews, consultations, expert witness testimony, validations, training program development, and educational services to lawyers, forensic laboratories, and others. The site also describes DNA Mavens Forensic Services Inc., a 501(C)(3) non-profit created to provide education, training, forensic DNA testing and forensic DNA related research opportunities.

autosomal STR analysisDNA case reviewexpert witness testimonyinternal audit assistancelaboratory workflow consultingprobabilistic genotyping (STRmix)SOP developmenttraining program developmentvalidation proceduresY-STR analysis

Dunlop Security Group is a Charlotte-based, family-owned Authorized C3PAO providing CMMC Level 2 Certification Assessments, Mock Assessments, and Consulting Services for Defense Industrial Base organizations. The team helps DoD contractors navigate CMMC and NIST SP 800-171 compliance with a practical, straightforward approach.

C3PAO assessmentsCMMC Level 2 Certification AssessmentsconsultingNIST SP 800-171 compliance support

Evolved Cyber, LLC is a cybersecurity consulting and training firm established in 2015 that helps small to medium-sized businesses and Defense Industrial Base organizations achieve and sustain CMMC Level 2 compliance. It offers CMMC assessments, consulting, and training led by Certified CMMC Assessors, with services aligned to 32 CFR Part 170, DFARS requirements, NIST SP 800-171, and NIST CSF 2.0.

CMMC assessmentsCMMC consultingCMMC trainingcontinuous monitoringcybersecurity program developmentdocumentation reviewGap assessmentsPOA&M developmentremediation planningSSP development

Exemplary Cyber Consultants is a veteran-owned cybersecurity firm serving the Defense Industrial Base, government agencies, and regulated industries. It provides managed security, CMMC readiness and assessment, Microsoft licensing and cloud integration, threat intelligence, and compliance advisory built on Zero Trust principles.

24/7 SOC monitoringAzure Government deploymentCMMC consultingdigital forensicsIncident responsemanaged EDR/XDRMicrosoft CSP resellingpenetration testingPOA&M managementPower Platform automationsecurity awareness trainingSPRS score reviewSSP developmentvulnerability scanningzero trust architecture

iDatapro is an Information Technology Solutions Provider based in Pearl River, NY, formed by IT professionals with combined industry experience of over 40 years. It provides technical project management, data analytics and big data solutions, and a CMMC Assessment Readiness Implementation Program helping Defense Industrial Base contractors achieve audit-ready compliance aligned to CMMC 2.0 and NIST SP 800-171.

audit loggingbig dataCMMC readinessData AnalyticsDefenderendpoint hardeninggap and risk assessmentGCC High implementationidentity and access managementIntuneNIST 800-171 compliancePurviewremediationSSP and policy developmenttechnical project management