Question 1

Is CMMCTrack actually free?

Accepted Answer

Level 1 self-assessment is free, with no credit card and no time limit. If you want AI-drafted POA&M plans on a Level 1 assessment, that is a $49 one-time add-on. Level 2 self-assessment is $199 one-time with AI drafting included. For consultants and MSPs, the Assessor Portfolio is $599 per month for unlimited clients.

Question 2

Do I need a credit card to start?

Accepted Answer

No. Level 1 self-assessment is free and never asks for a card. You only enter payment details if you add AI drafting to a Level 1 assessment ($49), upgrade to Level 2 ($199), or subscribe to the Assessor Portfolio ($599 per month).

Question 3

What is the difference between Level 1 and Level 2?

Accepted Answer

Level 1 (15 practices, based on FAR 52.204-21) applies to contractors handling Federal Contract Information. Level 2 (110 practices, based on NIST SP 800-171) applies to contractors handling Controlled Unclassified Information. If you don't know which applies to you, start with our free Level 1 self-assessment and we'll point you in the right direction.

Question 4

Can I store CUI in CMMCTrack?

Accepted Answer

No. CMMCTrack is for self-assessment, POA&M tracking, and SPRS scoring. If you need to actually store CUI, you need a FedRAMP-authorized environment. We're not that, and we won't pretend to be.

Question 5

Is the SPRS score accurate?

Accepted Answer

Yes. We follow the official DoD Assessment Methodology v1.2.1, including critical exclusions and partial credit for MFA and FIPS encryption. The same methodology your assessor will use.

Question 6

What if I'm not technical?

Accepted Answer

Every practice has plain-English guidance. Every gap auto-generates a starting remediation plan. You can do this without a consultant, but if you have one, they can use CMMCTrack alongside you.

Question 7

I'm a consultant or assessor. Is this for me?

Accepted Answer

Different workflow built for you. See CMMCTrack for assessors for multi-client portfolio management, branded reports, and assessor-specific features.