SecurityMetrics Adds Guided Self-Assessment to its CMMC Compliance Suite for L1 and L2 Contractors

OREM, Utah, Sep. 1, 2026--SecurityMetrics has added a guided self-assessment solution (CMMC Assess) for Level 2 Contractors to its suite of products for Primes, Level 1, and Level 2 Contractors. CMMC Assess makes CMMC less intimidating by outlining manageable compliance steps in a portal and by offering live support. CMMC Assess covers all 110 Level 2 security controls and can handle complex environments with multiple assignments and multiple CAGE codes. It provides real-time score tracking, identifies controls that qualify for POA&Ms, and auto generates a System Security Plan (SSP). “CMMC compliance can be complicated, especially when contractors are juggling multiple assessments and CAGE codes,” said Marcus Clawson, Senior Product Manager at SecurityMetrics. “We saw a need in the market for a comprehensive guide, so we created CMMC Assess to give Level 2 Contractors confidence in their CMMC compliance process and an intuitive pathway to verification.” Features: A company profile with compliance verification that is visible in real time to upper-tier contractors through SecurityMetrics CMMC Link A plain-language Level 2 Self-Assessment Portal covering all 110 Level 2 security controls Real-time SPRS scoring and progress tracking POA&M identification, tracking, and reporting with a summary view on the POA&M page Support for multiple CAGE codes & enclaves, for complex Level 2 environments An auto-generated System Security Plan (SSP) Live support from certified CMMC Registered Practitioners (RPs) An automated monthly compliance status email Interested contractors can learn more about CMMC compliance and SecurityMetrics CMMC Assess by visiting the SecurityMetrics website at www.securitymetrics.com/product/cmmc. About SecurityMetrics SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (CMMC, PCI, HIPAA, GDPR, HITRUST). SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), PCI Forensic Investigator (PFI), and Managed Security provider with over 26 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support. For press inquiries, email pr@securitymetrics.com. Social (LinkedIn, X, FB, Instagram, YouTube): @SecurityMetrics