CMMC 2.0 compliance advisor as a Claude Code skill. All 3 levels, 14 domains, 110 practices; CUI scoping, SSP + POA&M; modern IT mapping for cloud, productivity, AI services, endpoints; contractor profiles and anti-patterns. Built from public DoD and NIST sources.

A curated list of CMMC and NIST 800-171 compliance resources, tools, templates, and guides

Comprehensive NIST SP 800-171 Rev 3 compliance toolkit: 110 control checklists, System Security Plan (SSP) templates, POA&M tracking, and CMMC Level 2 mapping. By Petronella Technology Group.

DFARS 252.204-7012 compliance guide for defense contractors. NIST SP 800-171 control mapping, self-assessment scorecard, CMMC alignment, and practical implementation steps.

This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.

This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.

This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.

Redacted governance exemplars demonstrating control structure, evidence traceability, and assessor-aligned methodology — Stella Maris Governance LLC

NIST SP 800-171 Rev 2 compliance guide - all 110 security requirements mapped to controls with implementation guidance for CUI protection

CMMC Level 2 compliance checklist with all 110 NIST SP 800-171 security requirements. Free self-assessment guide for defense contractors.

Free CMMC Level 2 diagnostic for defense contractors; endpoint checks, network discovery, SBOM, and evidence artifacts for FY2026 C3PAO readiness.

A simple script for tracking & reminding the IT department about due maintenance items.

Open dataset of 30 most-cited DFARS clauses with NIST 800-171 cross-references — CC-BY-4.0

This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.

DefenseTech state-tracker: lifecycle snapshot of 10 federal authorities regulating DIB AI / cybersecurity / export-control / CUI — DoD CIO, Cyber AB, DIBCAC, DDTC, BIS, NIST, GSA, DCMA, DCSA, NARA-ISOO. 8 distinct enforcement modes, most diverse state-tracker in the Suite.

DefenseTech audit-stream Operator: per-defense-AI-decision events hash-chained for DFARS 252.204-7012 + CMMC 2.0 + NIST 800-171/172 + ITAR + EAR + DoDI 5230.24 + NISPOM + False Claims Act. First Suite vertical with 3-axis taxonomy (CUI tier + export control + foreign-person restriction).

AGPL-3.0 reference impl of DefenseTech audit-stream + 3-axis vault contract. Runs Stratos Aerospace × VendorD GuardianAI 3.x trajectory end-to-end. Proves the design works: vault enforces 3-axis intersection, audit-stream satisfies CUI distribution-statement + ITAR us-person + DFARS 72-hour wall-clock invariants.

DefenseTech evidence-bundle: CMMC 2.0 L2/L3 readiness scaffolding under DFARS 252.204-7012/7019/7020/7021 + NIST SP 800-171 r2 + NIST SP 800-172 + SPRS scoring. 18 control families × 48 evidence kinds.