One licence covers the whole CMMC Level 2 workflow — the L1/L2-self/L2-C3PAO level selector, the guided 110-control assessment, your live DoD SPRS score, the SSP and POA&M generators, the C3PAO handoff package, evidence vault, assessment versioning, and integrations. Pick the plan that matches how your team works.
◆Built for primes, MSPs & multi-entity organizations
All plans run entirely in your browser — your assessment, evidence, and CUI never leave your machine. Prices shown are representative; reach out for a quote tailored to your organization.
Compare plans
Every plan includes the full guided assessment, live SPRS scoring, and audit-ready artifact generation. The tiers differ in scale.
Bastion is priced per organization by size, not per seat, and billed annually. Solo ($79/mo) covers a single small supplier of about 25 employees or fewer. Team ($299/mo) is for a growing supplier of about 26–250 employees, with multiple users sharing the compliance workload. Enterprise is custom-priced for 250+ employee suppliers, primes, MSPs, and multi-entity organizations.
Where's my data?
On your device. Bastion runs entirely in your browser — your assessment, evidence, and CUI never leave your machine. That's true on every plan; there's no server holding your sensitive data.
What's the C3PAO handoff package, and which plan has it?
It's a single bundle — SPRS Basic-assessment worksheet, validated SSP, POA&M, evidence index, and annual Affirming-Official affirmation — assembled locally and stamped with a SHA-256 integrity hash, with an optional redacted export for sharing outside your CUI boundary. It's part of the Team and Enterprise plans (it builds on SSP/POA&M generation). Handing an assessor a complete package is how you cut the assessment bill. It's preparation, not a CMMC certification.
Do I need this if I already use a consultant?
It helps either way. Bastion lets you walk into the engagement already scored and organized, so you spend consultant hours on remediation instead of data entry — and lets you maintain your SSP, POA&M, and evidence between engagements instead of paying for a fresh snapshot each time.
What's the difference between Team and Enterprise?
Team is for a single growing supplier (about 26–250 employees) whose staff share the work. Enterprise is for 250+ employee suppliers, primes, MSPs, and multi-entity organizations, adding multi-entity management, white-label exports, and bulk reporting across many entities from one place.
Can I switch plans later?
Yes. Your assessment, evidence, and artifacts carry over when you move between plans — upgrading just unlocks more capacity and capabilities on top of the work you've already done.
How do I get a quote?
Get in touch through the contact form with your organization size and how many entities you manage, and we'll put together pricing that fits.
Get audit-ready, on your terms.
Pick the plan that matches your team and produce an accurate SPRS score and audit-ready artifacts — without a six-figure consulting engagement.