BUILT FOR SHOPS LIKE YOURS
You make parts. You shouldn't have to become a cybersecurity department to keep making them.
FAR 52.204-21 · CMMC 2.0 LEVEL 1 · SPRS
Answer 5 quick yes/no questions and see which of the 15 CMMC Level 1 requirements you're missing, and what to fix. No email needed to start - you get your grade on the spot.
5 questions · instant grade · no email needed to start
Your report: every requirement scored, every gap explained, every fix prioritized.
Five yes/no questions, sampled from the 15 requirements. Instant grade, no email needed to see it.
AC · ACCESS CONTROL
Does every person at your company use their own individual login, with no shared accounts?
MP · MEDIA DISPOSAL
Before computers or drives leave your control - sold, donated, or trashed - is the contract information on them wiped or destroyed?
PE · PHYSICAL PROTECTION
Do all visitors to your facility get escorted and signed in - and do you track who holds keys and door codes?
SC · BOUNDARY PROTECTION
Is there a firewall between your network and the internet that someone at your company actually manages?
SI · SYSTEM INTEGRITY
Are security updates installed promptly on every machine, including the server?
Sent. Check your inbox in the next few minutes - your breakdown is on the way.
CMMC enforcement began phasing into DoD contracts in November 2025. Level 1 self-assessments are required now. Phase 2 - the third-party assessment step - was suspended in July 2026, and Level 1 wasn't touched.
Your Level 1 self-assessment score goes into SPRS, and it's a legal attestation. Guessing your way through the checkboxes is the expensive kind of shortcut.
If you work through a prime, they must flow the requirement down to you, and many now refuse subs who can't show a posture. If you hold the contract directly, the same duty runs from you to your own subcontractors.
You make parts. You shouldn't have to become a cybersecurity department to keep making them.
Policy generators sell you documents. Consultants sell you hours. This is the whole job, in the order you'll actually do it.
Plain-English questions mapped to the 15 Level 1 requirements and their published assessment objectives. Each one explains what the control actually means for a small shop - no jargon walls.
Which requirements you meet, which you don't, and what your honest posture looks like before you attest to anything. If you'd fail today, the report says so - that's the point.
For every gap: what to fix, in what order, with guidance sized for a small business - not an enterprise security team.
The written policies a Level 1 shop needs, built from your answers. Customized documents, not blank templates with your logo pasted on.
Per requirement: the artifacts, logs, and records to keep on file. This is what primes and assessors actually ask about, and it's the piece every cheap tool skips.
Exactly what to enter, where, step by step. You leave with a score submitted, not a to-do list.
Pre-order now at the founder price. Your full assessment package is delivered within 5 business days of completing the questionnaire.
14-DAY GUARANTEE: if it isn't what you expected, email us and you get a full refund. No forms, no argument.
For comparison: consultant-led Level 1 engagements typically run $5,000-15,000. Policy-only generators charge $79.99 - and policies are one of the six pieces above.
SECURE CHECKOUT VIA STRIPE · QUESTIONNAIRE LINK ARRIVES BY EMAIL AFTER PURCHASE
No, and we won't pretend to be. Level 1 doesn't involve a third-party assessor - it's a self-assessment that you attest to. Our job is making your documentation real, your gaps visible, and your submission organized. Every output maps to the published requirements in FAR 52.204-21 and the DoD's assessment guidance, and the mapping is shown in your documents so you can verify it yourself.
Yes - everything Level 1 requires is published for free by the DoD and NIST. What you're buying is the afternoon instead of the month: the requirements translated into plain English, the policies written from your answers instead of assembled from scratch, and the evidence list that tells you what a prime will actually ask for. If you have the time and the patience for federal documentation, the DIY path is real and we'd never tell you otherwise.
Then it says so, and you'll know exactly what to fix before you attest. Your SPRS submission is legally binding - a tool that softens your gaps to make you feel good would be doing you real harm. The honest gap report is the product.
Short version: if you handle Federal Contract Information but not Controlled Unclassified Information (CUI), you're Level 1. If your contracts include DFARS 252.204-7012, you're likely handling CUI and Level 2 applies - this product won't cover you, and we'll say so rather than sell to you. Email us if you're not sure and we'll help you figure it out before you spend a dollar.
Level 1 Ready is new. The first 20 customers get the founder price, direct access to us during their assessment, and delivery within 5 business days while we finish automating the pipeline. The price goes to $349 after that.
14 days, full refund, no forms to fill out. Email support@level1ready.com.
Start with the free 5-question check, or go straight to the full assessment. Either way, you'll know where you stand before you attest to anything.
FOUNDER PRICE ENDS AFTER THE FIRST 20 CUSTOMERS