FAQ
Readyline vs KCMX questions
What evaluators ask when shopping CMMC platforms.
Three steps: (1) Use a must-haves checklist: SSP generation, NIST 800-171 R2 from OSCAL, POA&M with evidence linkage, SPRS scoring per DoD v1.2.1, C3PAO read-only mode, deployment model match. (2) Schedule a demo from each, walking the SAME scenario (e.g., "show me a new L2 control assessment closing"). (3) Validate with a reference customer in your sector.
Hosted: same-day tenant setup after the demo, L1 Auto-Pilot Wizard gets you to first SSP PDF in 20 minutes. Self-hosted: 1–2 weeks depending on environment (network, IdP, storage). Air-gapped: scoped per contract.
Yes, if your existing platform supports a data export. Bring your control assessments, POA&M items, evidence files, and SSP narratives. We help with the migration; you provide the export. Talk to us on the demo call for specifics tied to your current platform contract.
Custom per contract, scoped on the demo call and invoiced. Hosted (Starter / Pro) is sized to your team with optional extra seats. Self-hosted (Enterprise) is contract-based with no per-user limit. Most DoD subcontractors end up well below horizontal SaaS enterprise pricing.
If the design choices listed above match your team's needs (modern stack, OSCAL-native, bilingual, on-prem capable, SPRS-correct, audit-grade) Readyline likely fits. If you prefer a longer-established player with a different design philosophy, that's a valid choice too. Honest evaluation beats vendor marketing every time.
