Open-source reference implementations and tooling for CMMC Level 2 compliance on on-premise IT/OT environments. Covers CUI handling, USB controls, and audit logging.
-
Updated
Sep 21, 2026 - Go
#
cmmc-level-2
Here are 18 public repositories matching this topic...
Free CMMC Level 2 diagnostic for defense contractors; endpoint checks, network discovery, SBOM, and evidence artifacts for FY2026 C3PAO readiness.
-
Updated
May 14, 2026 - Python
CMMC 2.0 Level 2 compliance guide with all 110 NIST 800-171 controls mapped, C3PAO assessment prep, and gap analysis templates for defense contractors.
cybersecurity compliance cmmc nist-800-171 defense-contractors cmmc-level-2 cmmc-compliance cui-protection
-
Updated
Apr 14, 2026
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
compliance grc cui information-security-management cmmc cybersecurity-tools infosec-tools export-controlled compliance-tool defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance itar-controlled cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
grc information-security-management cmmc poam cybersecurity-tools infosec-tools compliance-tool nist-800-171 defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance audit-prep cmmc-poam cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
compliance grc cui fci information-security-management cmmc cybersecurity-tools compliance-tool defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance gap-assessment cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
CMMC Level 2 compliance checklist with all 110 NIST SP 800-171 security requirements. Free self-assessment guide for defense contractors.
checklist nist cybersecurity compliance dod defense cui security-checklist self-assessment dfars cmmc nist-800-171 cmmc-level-2 cmmc-compliance defense-contractor sprs
-
Updated
Mar 23, 2026
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
cybersecurity compliance grc cui dfars cmmc cybersecurity-tools infosec-tools compliance-tool nist-800-171 defense-contractors cmmc-level-2 cmmc-compliance
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
cybersecurity compliance grc cui dfars cmmc cybersecurity-tools compliance-tool nist-800-171 defense-contractors cmmc-level-2 cmmc-compliance sprs gap-assessment
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
ssp grc information-security-management cmmc system-security-plan cybersecurity-tools infosec-tools compliance-tool nist-800-171 defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
compliance grc cui dfars fci information-security-management cmmc cybersecurity-tools infosec-tools compliance-tool defense-contractors controlled-unclassified-information cmmc-2-0 cmmc-level-2 cmmc-compliance audit-prep cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
This tool is one of eight free CMMC tools published by APT Security Management for the defense industrial base. All tools run entirely client-side with no signup and no tracking. Full list: https://github.com/Apt-Security-Management. Questions and issues welcome.
cybersecurity compliance grc information-security defense cui dfars fci cmmc dib cybersecurity-tools compliance-tool nist-800-171 defense-contractors controlled-unclassified-information cmmc-level-2 federal-contracting cmmc-compliance cmmc-level-1
-
Updated
Jun 5, 2026 - TypeScript
Deterministic runtime engine and physical air-gap verification sentinel exposing fake air-gaps, hidden basebands, telemetry queues, and Big 4 / C3PAO CMMC compliance theater.
aerospace ipmi baseband zero-trust cmmc sovereignty air-gap local-ai nist-800-171 cmmc-level-2 c3pao a2zsoc defense-security telemetry-quarantine audit-theater
-
Updated
Oct 3, 2026 - Python
Automated Compliance-as-Docs engine. Bridging the gap between engineering and audit.
formal-verification security-automation devsecops soc2 compliance-as-code iac-terraform cmmc-level-2
-
Updated
Feb 14, 2026 - Go
Prioritized 22-phase Kill Chain model for achieving NIST 800-171 R3 compliance and CMMC Level 2 certification.
scf cmmc nist-800-171 secure-controls-framework cmmc-2-0 cmmc-level-2 cmmc-compliance cmmc-assessment
-
Updated
Aug 12, 2026
AI Cybersecurity and Compliance Assistant for Organizational Use.
-
Updated
Aug 1, 2024
End to end Azure DevSecOps CI/CD pipeline demonstrating Docker containerization, Azure App Service deployment, Azure Container Registry, SAST (Semgrep), container image scanning (Trivy), and CMMC Level 2 security control alignment.
docker security azure ci-cd cicd dod openvas azure-app-service azure-container-registry devsecops cloud-security dast nist800-171 azure-pipelines trivy cmmc semgrep cmmc-level-2
-
Updated
Jan 26, 2026 - PowerShell
Assessment Objective (AO)-level analysis and implementation tracker for transitioning from NIST 800-171 R2 to NIST 800-171 R3.
-
Updated
Aug 12, 2026
Add this topic to your repo
To associate your repository with the cmmc-level-2 topic, visit your repo's landing page and select "manage topics."