USA federal edition · bidpiston · measure what matters

CMMC 2.0 is enforceable. Know where you stand.

A standalone browser tool that assesses your organization against all 77 CMMC Level 1 and Level 2 practices. Produces a colour-coded domain heatmap, Level 1 and Level 2 readiness scores, and a full Plan of Action & Milestones (POA&M) — automatically. No platform, no login, no data uploaded.

77 practices assessed · auto-generated POA&M · runs in your browser — no login · Federal Capability Statement Builder included free until November 2026

Get instant access — $295 → See how it works

total CMMC practices assessed across 14 domains

Level 1 practices — all individually tracked

data uploaded — runs entirely in your browser

$295

vs $5,000–25,000 C3PAO readiness assessment

CMMC 2.0·FAR 52.204-21·NIST SP 800-171·DoD CUI Requirements·Level 1 (17 practices) · Level 2 (77 practices)

The problem

CMMC 2.0 is in your contracts right now.

CMMC 2.0 is now enforceable — not coming, not proposed

As of 2025, CMMC 2.0 is a contract requirement for DoD contractors handling Controlled Unclassified Information. Level 1 applies to all contractors handling Federal Contract Information. Level 2 applies to anyone touching CUI. Contracts are being awarded with CMMC requirements embedded in Section H. Contractors who cannot demonstrate readiness are losing work.

"The question is no longer whether CMMC applies. It is whether you can prove you meet it."

A formal CMMC readiness assessment costs $5,000–$25,000

Certified CMMC assessors (C3PAOs and Certified Assessors) charge thousands for a formal Level 2 readiness assessment before the official audit. Most small DoD contractors cannot afford this before they know where their biggest gaps are. This tool gives you the same gap analysis at a fraction of the cost — so you know exactly where to invest remediation effort before engaging a C3PAO.

"Spend $295 to find your gaps. Spend $5,000 to fix them. Not the other way around."

Without a POA&M, you cannot pursue CMMC certification

A Plan of Action and Milestones (POA&M) is a required document for CMMC Level 2 assessment. It lists every practice not yet fully implemented, with remediation actions, owners and timelines. This tool generates your POA&M automatically from your assessment answers — sorted by priority, with Level 1 gaps flagged as CRITICAL.

"A C3PAO will ask for your POA&M before any formal assessment begins. This tool produces it."

What you get

Everything you need. Nothing you don't.

Critical path

Level 1 Readiness Score — 17 Practices (FAR 52.204-21)

Every Level 1 practice individually scored and tracked. The tool shows exactly which of the 17 are fully implemented, partially implemented, planned or not in place.

All 14 domains

Level 2 Readiness Score — 77 Total Practices (NIST 800-171)

Full Level 2 readiness across all 14 CMMC domains. Score shown as percentage with colour-coded maturity level: Pre-CMMC / Foundational / Progressing / Advanced / Ready.

Visual gap analysis

Domain Heatmap — score by domain, instantly

Table showing each domain's score percentage, number of practices fully met and number of gaps. Red to green colour coding highlights your highest-priority remediation areas at a glance.

C3PAO ready

Auto-Generated POA&M — Plan of Action & Milestones

Every practice not fully implemented generates a POA&M entry — sorted by priority (Level 1 CRITICAL first), with current status, required action and FAR/NIST reference. Required for C3PAO assessment engagement.

Logged to your assessment

Organization Profile

Company name, CAGE code, NAICS, assessment date and target level (L1 or L2) captured at the start and embedded in the PDF output.

Named after your organization

Save as PDF

One-click PDF export. Full assessment, heatmap and POA&M captured in a professional format for C3PAO presentation.

Runs entirely in browser

Zero Data Transmitted

No login, no account, no server. All assessment data stays in your browser. Nothing is uploaded or stored anywhere outside your machine.

Reset and reassess anytime

Start New Assessment

Use the tool repeatedly as you remediate gaps. Track improvement across reassessments — Level 1 readiness progress tracked separately from overall Level 2 score.

How it works

Assess in under two hours. Know your gaps immediately.

The CMMC Readiness Assessment Tool runs entirely in your browser. No installation, no login, no data uploaded. Open the file, answer 77 practice questions, get your results instantly.

Open the tool — no installation needed

Download the HTML file and open it in any modern browser. The tool runs entirely locally. No account, no login, no server. Your answers never leave your machine.

Complete the organization profile

Enter your organization name, CAGE code, NAICS code, assessment date and target CMMC level (Level 1 or Level 2). This information appears in your PDF export.

Work through 7 domain sections

77 practice questions organized across 7 grouped sections: Identity & Access, Training & Audit, Config & Incident Response, Maintenance & Media, Physical & Personnel, Risk & Assessment, Systems Protection.

Score each practice honestly

Each practice scored as: Not Implemented (0) / Planned — POA&M required (1) / Partially Implemented (2) / Fully Implemented & Documented (3). The sidebar updates live as you answer.

View your results and POA&M

The Results tab shows your overall maturity score, Level 1 readiness (X/17), Level 2 readiness (X/77), domain heatmap and the full auto-generated POA&M sorted by priority.

Export as PDF

Click Save as PDF. The tool sets the document title to your organization name before printing. Your complete assessment, heatmap and POA&M are captured in one professional document for C3PAO presentation.

Pricing

Two ways to get it. Both include more than you pay for.

Buy the CMMC Tool standalone at $295, or get every USA federal product in the suite and save $387. Both options include the Federal Capability Statement Builder free until November 2026.

Free until Nov 2026

Federal Capability Statement Builder — included free until November 2026

Purchase the CMMC Readiness Assessment Tool and receive the Federal Capability Statement Builder at no extra cost. A 13-stage AI wizard producing an agency-ready capability statement, past performance reference sheet and 6 additional documents.

Standalone · 77 practices · 14 domains

CMMC Readiness Self-Assessment Tool

^$295

one-time purchase

standalone browser tool · no login required

A standalone browser tool that produces your complete CMMC Level 1 and Level 2 readiness picture — including a full POA&M — in a single session. No platform, no subscription.

All 17 Level 1 practices (FAR 52.204-21) individually tracked
All 77 practices across 14 CMMC domains assessed
Live sidebar: overall %, L1 readiness, L2 readiness
Domain heatmap — colour-coded by score
Auto-generated POA&M — sorted by priority
Level 1 CRITICAL gaps flagged separately
PDF export named after your organization
Zero data uploaded — runs entirely in your browser
Federal Capability Statement Builder — FREE until November 2026

Get instant access →

One-time purchase · Standalone HTML file — no installation · No login or account required · Nothing transmitted · CMMC self-assessment only — not a formal C3PAO assessment

Best value — save $387

All 4 products · One payment

USA Federal Suite

^$1,495

$1,882 bought separately

one-time · all 4 products · instant access

Every USA federal contracting product in one purchase. Includes this product (CMMC Readiness Self-Assessment Tool — $295 standalone value) plus all three others.

Build My Bid Manager USA Federal Edition
SME Compliance Advantage Pack
CMMC Readiness Self-Assessment Tool
Federal Capability Statement Builder
Save $387 vs buying individually
All products instantly accessible
Runs in ChatGPT Plus or Claude Pro
No subscription · No expiry · Yours forever

Get the full suite — $1,495 →

Saves $387 vs individual prices · ChatGPT Plus or Claude Pro required ($20/mo) · No new platform

Your gaps. Your POA&M. Ready now.

Federal Capability Statement Builder included free until November 2026

77 practices · 14 domains · Level 1 readiness · auto-generated POA&M

$295 one-time

Get instant access →

USA federal edition Runs in your browser No data uploaded C3PAO-ready POA&M bidpiston by ebida

Specialist product. Wider suite confidence.

The CMMC Readiness Self-Assessment Tool is a bidpiston-backed compliance product — part of the wider Build My Business ecosystem.

Visit buildmybusiness.global