Fortline Cyber · CMMC Level 2 · NIST 800-171

Find out if you'd pass your CMMC assessment — in 20 minutes, free.

Small defense contractors must meet 110 security controls to keep their DoD contracts. Answer plain-English questions about your business and get your estimated SPRS score, your blocking gaps, and the documents you need — without the $75,000 consultant.

No signup to start. Your answers stay in your browser.

Know your score

All 110 controls across 14 families, scored the way the DoD scores you (start at 110, lose points per gap).

See what blocks you

We separate the gaps you MUST fix to certify from the ones you're allowed to put on a POA&M.

Get your documents

Generate your System Security Plan, POA&M, and policies as Word documents from your answers.

How it works

1

Check your score — free

Answer plain-English questions about your business. Get your estimated SPRS score and see exactly which gaps would block your certification. No signup to start.

2

We close the gaps with you

We build your full documentation — System Security Plan, POA&M, and policies — with you in about a week, and map the fastest path to assessment-ready.

3

Stay ready

Controls drift as your business changes. We keep your documents current, track your POA&M deadlines, and keep you ready for your assessor — month after month.

Services & pricing

Traditional consultants quote $75,000+ and months of meetings. We built software that does the heavy lifting, so a small shop pays small-shop prices.

Free Score Check

$0

Your estimated SPRS score, your blocking vs. deferrable gaps, and your draft documents — free, in about 20 minutes.

Check my score

Readiness Package

$1,500

Done with you in about a week: full guided assessment, complete SSP, POA&M, and all 14 policies — reviewed, polished, and ready for your prime or assessor.

Email us to start

Monitoring

$149/mo

We keep your documents current, track your POA&M 180-day deadlines, and re-check your score as your business changes. Cancel anytime.

Email us to start

Who's behind this

Fortline Cyber was founded by Elhadji Ndiaye — Illinois Army National Guard, then years of professional security work. We do one thing: get small defense contractors assessment-ready, honestly. We'll tell you exactly where you stand, even when the answer is "you're in good shape and don't need us."

We do readiness only — never certification. By the rules, the people who prepare you can't assess you. That separation protects you, and we'll connect you with a certified assessor (C3PAO) when you're ready.