What's included in every tier
- Self-hosted secure server installation with automatic TLS
- Signed Windows desktop application with automatic, validated updates
- Setup wizard, SSP rendering, evidence bundle, POA&M, and audit log
- Activation by signed license, validated automatically on every launch
- Ongoing security and control-mapping updates delivered through the secure update channel
What's not bundled
Hands-on consulting. We charge for that separately at our consulting rate. If you want a chunk of
dedicated hours up front (pre-audit review, full L2 walkthrough, custom evidence templates), we offer
named concierge packages - talk to us. The L2 Plus tier includes one
quarterly security review call to keep your baseline current.
How licensing works
Your license is what unlocks the value CMMC2Go is built to deliver - the bridge between the
technical complexity of compliance work and a single, approachable interface your team can
actually use.
With an active license, your IT staff and compliance admins stop spending hours navigating
deep portal menus, stitching together evidence from a dozen different tools, and translating
between back-end consoles to get one thing done. Tasks that used to span multiple sessions
and multiple admins happen from one screen. People who don't know the underlying tooling
find what they need without an escort. The license is what makes that approachability
possible - it pays for the ongoing work of keeping the experience current as the rules,
the portals, and your tenant evolve.
Activation is one signed file delivered to your team during onboarding. Renewals roll
forward automatically. If a license lapses, your existing audit library remains accessible
while the time-saving day-to-day workflows pause until you're current again.
Upgrades and add-ons
You can move tiers any time; the new license replaces the old one. Add-ons (extended retention,
custom controls, white-label branding for partners) are quoted on top of the base tier.