CMMC is in the contract now. Know your level before your customer asks.
Since November 10, 2025, DoD contracts can require a CMMC level as a condition of award, and primes flow that requirement down to their subs. For most small shops that means Level 1: fifteen requirements, self-assessed, with a senior official affirming it in SPRS. Cybertitans gets you there and keeps the IT running underneath it.
Shops that make parts, not IT departments.
- A prime sent a questionnaire or a flowdown clause and you’re not sure what level you are.
- The network grew one machine and one vendor at a time.
- The office runs on a mix of personal email, shared logins and an old server.
- Nobody has written down where drawings and specs actually live.
The level comes from the data, not your size.
If you only handle Federal Contract Information, it’s Level 1: the 15 basic safeguarding requirements in FAR 52.204-21, self-assessed every year. If controlled unclassified information (controlled drawings, export-controlled specs) lands in your systems, it’s Level 2: the 110 requirements of NIST SP 800-171, and for many contracts an outside assessment. Keeping that information in one defined place is the cheapest decision you’ll make.
Open the CMMC Level MapWe implement. Somebody else certifies.
Scoping, then the gap work, then the controls in Microsoft 365 and on every device, then the policies and evidence an assessor will actually read. We’re not a C3PAO and we don’t do assessments, so there’s no conflict in telling you exactly where you stand.
How compliance work runsThe price is on the page.
Managed IT runs on TiTAN, and the price is published. TiTAN Core starts at $897 a month for up to ten people. Pro, where most firms belong, is $1,790 a month for up to ten and includes unlimited support. Every tier runs the same security stack: Huntress 24/7 detection, Microsoft 365 locked down properly, backup and patching. CMMC readiness is scoped as a project once we know your level and where your data lives.
See TiTAN and pricingFind your level first. Free.
The CMMC Level Map asks three questions to find your level, then walks through all 15 Level 1 requirements in plain language. No sign-up, and nothing leaves your browser. Want to talk it through after? It’s 20 minutes, or call (651) 300-7030.
Run the Level 1 self-check Book 20 minutesWhat manufacturers ask first.
We’re a small sub. Does this apply to us?
If your contract or your prime’s flowdown includes the CMMC clause, yes. The level depends on the information you receive, not the size of your shop.
Can we affirm Level 1 now and fix the gaps later?
No. Level 1 doesn’t allow a plan of action. All fifteen requirements have to be met on the day a senior official affirms.
Do we need GCC High?
Not for Level 1. For controlled unclassified information it depends on what kind you handle, and we’ll tell you before you buy any licensing.
Are you local?
Yes. Cybertitans is based in Woodbury, MN, and works with firms across the Twin Cities. Support is remote first; onsite visits are by appointment, with no travel charge within 30 miles of Woodbury.