Three Ways to Engage. One Standard of Delivery.

Every AeoliTech engagement is led by Leonard Esere, DoD Secret- and DoE Q-cleared, MITRE CMMC practitioner, LANL ATO engineer. Choose the model that matches your timeline and readiness position.

Tier 1

Readiness

For organizations that need to understand exactly where they stand before committing to a full program.

A comprehensive CMMC Level 2 gap assessment, delivered as an ATO-grade diagnostic, not a checkbox survey. We assess your current control implementation against all 110 NIST 800-171 Rev. 3 practices, identify gaps with severity ratings, build your initial SSP skeleton, and develop a prioritized POA&M.

Full 110-practice gap assessment (NIST 800-171 Rev. 3)
SPRS score validation and documentation
System boundary scoping and CUI data-flow mapping
SSP skeleton (assessment-ready structure)
Prioritized POA&M with remediation sequencing
Verbal and written debrief with remediation roadmap
3-5 weeks$15,000-$50,000 (scope-dependent)
Request Readiness Assessment

Tier 2

Acceleration

For organizations with a C3PAO assessment date on the horizon and a gap that needs closing.

End-to-end CMMC Level 2 readiness delivery, from current-state assessment through evidence-package completion and pre-assessment dry run. AeoliTech deploys PolicyCortex to automate evidence collection, control validation, and continuous drift monitoring. This is how we deliver in ~8 months what manual engagements take 12-18 months to complete.

Everything in Readiness tier
PolicyCortex deployment in your environment
Full 110-practice control implementation support
Automated evidence collection via PolicyCortex
SSP completion (full, assessor-ready)
POA&M management through closure
Pre-assessment readiness review (mock C3PAO walkthrough)
C3PAO selection support and handoff coordination
6-10 months$85,000-$180,000 (scope-dependent)
Request Acceleration Engagement

Tier 3

Evidence Vault

For organizations that have achieved CMMC Level 2 certification and need to maintain their posture continuously.

A post-certification continuous monitoring and evidence maintenance retainer. PolicyCortex monitors your control state, flags configuration drift, and maintains your evidence library against your next triennial assessment. AeoliTech provides quarterly control reviews, annual SSP updates, and on-call advisory for material changes to your CUI environment.

PolicyCortex continuous monitoring (24/7)
Automated drift detection with alerting
Continuous evidence collection - assessment-ready at all times
Quarterly compliance posture review with Leonard
Annual SSP and POA&M refresh
Material change advisory
On-call support for DIBCAC or C3PAO inquiries
Ongoing retainer (12-month minimum)Monthly retainer (contact for range)
Request Evidence Vault Proposal

AeoliTech is a CMMC preparation and implementation partner, not an authorized C3PAO. We do not conduct the formal CMMC assessment. We get you ready for it. We maintain working relationships with authorized C3PAOs and facilitate introductions when your evidence package is ready.

Book a CMMC Readiness Call

(469) 546-5585 | cmmcnow@aeolitech.com