Open-source reference implementations and tooling for CMMC Level 2 compliance on on-premise IT/OT environments. Covers CUI handling, USB controls, and audit logging.
-
Updated
Apr 20, 2026 - Go
#
cmmc-level-2
Here are 20 public repositories matching this topic...
Free CMMC Level 2 diagnostic for defense contractors; endpoint checks, network discovery, SBOM, and evidence artifacts for FY2026 C3PAO readiness.
-
Updated
May 14, 2026 - Python
CMMC 2.0 Level 2 compliance guide with all 110 NIST 800-171 controls mapped, C3PAO assessment prep, and gap analysis templates for defense contractors.
cybersecurity compliance cmmc nist-800-171 defense-contractors cmmc-level-2 cmmc-compliance cui-protection
-
Updated
Apr 14, 2026
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
compliance grc cui information-security-management cmmc cybersecurity-tools infosec-tools export-controlled compliance-tool defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance itar-controlled cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
grc information-security-management cmmc poam cybersecurity-tools infosec-tools compliance-tool nist-800-171 defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance audit-prep cmmc-poam cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
CMMC Level 2 compliance checklist with all 110 NIST SP 800-171 security requirements. Free self-assessment guide for defense contractors.
checklist nist cybersecurity compliance dod defense cui security-checklist self-assessment dfars cmmc nist-800-171 cmmc-level-2 cmmc-compliance defense-contractor sprs
-
Updated
Mar 23, 2026
My Consulting Services Portfolio | Personal Cyber Security Profile
personal-site personal-website portfolio-website cybersecurity portfolio-site cyber-security portfolio-project cmmc cybersecurity-tools cmmc-level-2 cmmc-compliance cmmc-poam cmmc-level-1 cmmc-assessment
-
Updated
Jul 23, 2026 - HTML
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
cybersecurity compliance grc cui dfars cmmc cybersecurity-tools infosec-tools compliance-tool nist-800-171 defense-contractors cmmc-level-2 cmmc-compliance
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
compliance grc cui fci information-security-management cmmc cybersecurity-tools compliance-tool defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance gap-assessment cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
ssp grc information-security-management cmmc system-security-plan cybersecurity-tools infosec-tools compliance-tool nist-800-171 defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
cybersecurity compliance grc cui dfars cmmc cybersecurity-tools compliance-tool nist-800-171 defense-contractors cmmc-level-2 cmmc-compliance sprs gap-assessment
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
compliance grc cui dfars fci information-security-management cmmc cybersecurity-tools infosec-tools compliance-tool defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance audit-prep cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
cybersecurity compliance grc information-security defense cui dfars fci cmmc dib cybersecurity-tools compliance-tool nist-800-171 defense-contractors controlled-unclassified-information cmmc-level-2 federal-contracting cmmc-compliance cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
Automated Compliance-as-Docs engine. Bridging the gap between engineering and audit.
formal-verification security-automation devsecops soc2 compliance-as-code iac-terraform cmmc-level-2
-
Updated
Feb 14, 2026 - Go
Resume
consulting personal-website experience expert-services cmmc cmmc-level-2 cmmc-compliance cmmc-poam cmmc-level-1 cmmc-assessment
-
Updated
Jul 23, 2026 - HTML
Production-grade IAM governance evidence packs for Microsoft Entra ID — JML, Access Reviews, PIM, Conditional Access, SoD, PowerShell automation. NIST 800-53 + CMMC Level 2 aligned. Built by a Navy-trained IAM architect.
powershell iam pim sod governance zero-trust iga conditional-access identity-governance sdvosb cmmc privileged-access-management access-reviews segregation-of-duties nist-800-53 microsoft-entra entra-id audit-ready cmmc-level-2 defense-industrial-base
-
Updated
May 13, 2026 - PowerShell
Prioritized 22-phase Kill Chain model for achieving NIST 800-171 R3 compliance and CMMC Level 2 certification.
scf cmmc nist-800-171 secure-controls-framework cmmc-2-0 cmmc-level-2 cmmc-compliance cmmc-assessment
-
Updated
Aug 12, 2026
End to end Azure DevSecOps CI/CD pipeline demonstrating Docker containerization, Azure App Service deployment, Azure Container Registry, SAST (Semgrep), container image scanning (Trivy), and CMMC Level 2 security control alignment.
docker security azure ci-cd cicd dod openvas azure-app-service azure-container-registry devsecops cloud-security dast nist800-171 azure-pipelines trivy cmmc semgrep cmmc-level-2
-
Updated
Jan 26, 2026 - PowerShell
Assessment Objective (AO)-level analysis and implementation tracker for transitioning from NIST 800-171 R2 to NIST 800-171 R3.
-
Updated
Aug 12, 2026
AI Cybersecurity and Compliance Assistant for Organizational Use.
-
Updated
Aug 1, 2024
Improve this page
Add a description, image, and links to the cmmc-level-2 topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cmmc-level-2 topic, visit your repo's landing page and select "manage topics."