CMMC 2.0 compliance advisor as a Claude Code skill. All 3 levels, 14 domains, 110 practices; CUI scoping, SSP + POA&M; modern IT mapping for cloud, productivity, AI services, endpoints; contractor profiles and anti-patterns. Built from public DoD and NIST sources.

A curated list of CMMC and NIST 800-171 compliance resources, tools, templates, and guides

Comprehensive NIST SP 800-171 Rev 3 compliance toolkit: 110 control checklists, System Security Plan (SSP) templates, POA&M tracking, and CMMC Level 2 mapping. By Petronella Technology Group.

DFARS 252.204-7012 compliance guide for defense contractors. NIST SP 800-171 control mapping, self-assessment scorecard, CMMC alignment, and practical implementation steps.

Redacted governance exemplars demonstrating control structure, evidence traceability, and assessor-aligned methodology — Stella Maris Governance LLC

NIST SP 800-171 Rev 2 compliance guide - all 110 security requirements mapped to controls with implementation guidance for CUI protection

CMMC Level 2 compliance checklist with all 110 NIST SP 800-171 security requirements. Free self-assessment guide for defense contractors.

DefenseTech audit-stream Operator: per-defense-AI-decision events hash-chained for DFARS 252.204-7012 + CMMC 2.0 + NIST 800-171/172 + ITAR + EAR + DoDI 5230.24 + NISPOM + False Claims Act. First Suite vertical with 3-axis taxonomy (CUI tier + export control + foreign-person restriction).

DefenseTech state-tracker: lifecycle snapshot of 10 federal authorities regulating DIB AI / cybersecurity / export-control / CUI — DoD CIO, Cyber AB, DIBCAC, DDTC, BIS, NIST, GSA, DCMA, DCSA, NARA-ISOO. 8 distinct enforcement modes, most diverse state-tracker in the Suite.

Free CMMC Level 2 diagnostic for defense contractors; endpoint checks, network discovery, SBOM, and evidence artifacts for FY2026 C3PAO readiness.

A simple script for tracking & reminding the IT department about due maintenance items.

AGPL-3.0 reference impl of DefenseTech audit-stream + 3-axis vault contract. Runs Stratos Aerospace × VendorD GuardianAI 3.x trajectory end-to-end. Proves the design works: vault enforces 3-axis intersection, audit-stream satisfies CUI distribution-statement + ITAR us-person + DFARS 72-hour wall-clock invariants.

Open dataset of 30 most-cited DFARS clauses with NIST 800-171 cross-references — CC-BY-4.0

DefenseTech evidence-bundle: CMMC 2.0 L2/L3 readiness scaffolding under DFARS 252.204-7012/7019/7020/7021 + NIST SP 800-171 r2 + NIST SP 800-172 + SPRS scoring. 18 control families × 48 evidence kinds.