CMMC provider directory
An independent reference for the providers buyers commonly consider for CMMC work. Every record cites its sources with a retrieval date. Providers are not ranked, scored, or charged for listing position.
Software platforms for SSP, POA&M, evidence collection, and ongoing 800-171 / CMMC tracking.
- ApptegaCMMC / GRC softwareAtlanta, GA
GRC platform for assessments, audits, and risk across many frameworks including CMMC; pitched heavily at MSP/MSSP partners.
Last verifiedMay 14, 2026View record → - ComplyUpCMMC / GRC softwareDocumentation
Zero-trust SaaS for NIST 800-171 and CMMC self-assessments, SSP and POA&M authoring, and SPRS scoring; acquired by Exostar.
Last verifiedMay 14, 2026View record → - CytellixMSP / MSSPCMMC / GRC software
Patented SaaS platform that bundles cybersecurity monitoring, managed detection and response, and GRC for regulated frameworks like CMMC.
Last verifiedMay 14, 2026View record → - DrataCMMC / GRC software
Compliance automation and GRC platform supporting multiple frameworks; its CMMC framework page was not reachable on the date we retrieved.
Last verifiedMay 14, 2026View record → - HyperproofCMMC / GRC softwareSeattle, WA
GRC platform with CMMC-aligned controls, SSP generation, evidence collection, and a partner directory of CMMC consultancies and C3PAOs.
Last verifiedMay 14, 2026View record → - KiteworksCUI enclaveCMMC / GRC softwareEncrypted collaboration
Private Data Network platform for secure file sharing, managed file transfer, and email used in CMMC and other regulated contexts.
Last verifiedMay 14, 2026View record → - PreVeilCUI enclaveCMMC / GRC softwareEncrypted collaborationDIB-only focusBoston, MA · U.S.-wide · Founded 2015
End-to-end encrypted communications and storage marketed as a GCC High alternative for CUI.
Last verifiedMay 14, 2026View record → - RegScaleCMMC / GRC software
Continuous Controls Monitoring platform that natively supports CMMC alongside other frameworks like FedRAMP, NIST 800-53, and PCI DSS.
Last verifiedMay 14, 2026View record → - Totem TechnologiesDocumentationCMMC / GRC softwareCUI enclave
Small-business DoD contractor selling CMMC documentation software, an on-prem CUI enclave appliance, and CMMC training.
Last verifiedMay 14, 2026View record → - VantaCMMC / GRC software
GRC and trust automation platform with a CMMC product running in a FedRAMP 20x Moderate Authorized environment.
Last verifiedMay 14, 2026View record →
Inclusion is editorial. Providers cannot pay to appear, to rank higher, or to suppress a record. To request a correction, see the disclosures page.