SecurityMetrics Adds Guided Self-Assessment to its CMMC Compliance Suite for L1 and L2 Contractors

SecurityMetrics has added a guided self-assessment solution (CMMC Assess) for Level 2 Contractors to its suite of products for Primes, Level 1, and Level 2 Contractors.

Orem, Utah, United States, September 1, 2026 -- SecurityMetrics has added a guided self-assessment solution (CMMC Assess) for Level 2 Contractors to its suite of products for Primes, Level 1, and Level 2 Contractors. CMMC Assess makes CMMC less intimidating by outlining manageable compliance steps in a portal and by offering live support. CMMC Assess covers all 110 Level 2 security controls and can handle complex environments with multiple assignments and multiple CAGE codes. It provides real-time score tracking, identifies controls that qualify for POA&Ms, and auto generates a System Security Plan (SSP).

“CMMC compliance can be complicated, especially when contractors are juggling multiple assessments and CAGE codes,” said Marcus Clawson, Senior Product Manager at SecurityMetrics. “We saw a need in the market for a comprehensive guide, so we created CMMC Assess to give Level 2 Contractors confidence in their CMMC compliance process and an intuitive pathway to verification.”

Features:

• A company profile with compliance verification that is visible in real time to upper-tier contractors through SecurityMetrics CMMC Link
• A plain-language Level 2 Self-Assessment Portal covering all 110 Level 2 security controls
• Real-time SPRS scoring and progress tracking
• POA&M identification, tracking, and reporting with a summary view on the POA&M page
• Support for multiple CAGE codes & enclaves, for complex Level 2 environments
• An auto-generated System Security Plan (SSP)
• Live support from certified CMMC Registered Practitioners (RPs)
• An automated monthly compliance status email

Interested contractors can learn more about CMMC compliance and SecurityMetrics CMMC Assess by visiting the SecurityMetrics website at www.securitymetrics.com/product/cmmc.

About SecurityMetrics

SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (CMMC, PCI, HIPAA, GDPR, HITRUST).

SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), PCI Forensic Investigator (PFI), and Managed Security provider with over 26 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support.

For press inquiries, email [email protected].

Social (LinkedIn, X, FB, Instagram, YouTube): @SecurityMetrics

Contact Info:
Name: Sheharyar Khan
Email: Send Email
Organization: HackerNoon
Website: https://hackernoon.com/

Release ID: 89201881

If there are any deficiencies, problems, or concerns regarding the information presented in this press release that require attention or if you need assistance with a press release takedown, we encourage you to notify us without delay at [email protected] (it is important to note that this email is the authorized channel for such matters, sending multiple emails to multiple addresses does not necessarily help expedite your request). Our diligent team is committed to promptly addressing your concerns within 8 hours and taking necessary actions to rectify any identified issues or facilitate the removal process. Providing accurate and trustworthy information is of utmost importance.