We've refreshed our plans. New pricing is now live. See the plans →
Three plans · L1, L2, L3

Built for every CMMC level.

Start with FAR 52.204-21 self-attestation on Starter, scale to full CMMC L2 with Pro, or deploy Self-hosted on-prem for CMMC L3 and air-gapped environments.

Every plan starts with a 30-minute founder-led demo. No deck, no pressure.

Free · GCC High Setup Autopilot

Configure your Microsoft 365 GCC High environment to the CMMC L2 technical baseline, free and guided. No credit card.

  • GCC High Setup Autopilot: 26 guided steps
  • Each step mapped to NIST 800-171 controls
  • Your work imports into Pro when you upgrade
Start free

No card · guided wizard · save your progress

L1 Autopilot

CMMC L1 / FAR 52.204-21
$599 / year

Annual billing · single organization · unlimited users

For FCI contractors that only need the CMMC Level 1 self-assessment.

  • Self-assessment for CMMC Level 1 (17 practices)
  • SSP & score snapshots
  • DFARS 7020 affirmation with reminders
  • Control catalog with AI suggestions
  • Evidence vault & mandatory 2FA
  • 25 AI credits / month
Book a demo

L2 Essentials

CMMC L2 / NIST 800-171 R2 (+R3)
$249 / month · $2,988 / year

Billed annually · unlimited users

Reach and stay audit-ready for CMMC Level 2.

  • Everything in L1, plus:
  • 110 NIST 800-171 R2 controls + SPRS
  • POA&M, policies & risk (AI-assisted)
  • Asset, network & software inventory
  • Incidents (DIBNet 72h), change mgmt, audit log
  • 150 AI credits / month
Book a demo
Recommended

Advanced

CMMC L2 + SecOps, identity & integrations
$599 / month · $7,188 / year

Billed annually · unlimited users

SecOps, identity & integrations for mature teams.

  • Everything in L2, plus:
  • DR / continuity (runbooks, drills)
  • SIEM streaming (Splunk, Sentinel, Datadog)
  • SSO (SAML/OIDC), SCIM, JIT provisioning
  • Vendor risk · CISA KEV · SBOM · UniFi sync
  • 400 AI credits / month
Book a demo

Pro

Everything included: GRC + LMS + CMDB + vendor risk
$799 / month · $9,588 / year

Billed annually · unlimited users

The complete platform: GRC, LMS, CMDB & vendor risk in one.

  • Everything in Advanced, plus:
  • Full LMS (courses, quizzes, certificates)
  • Role-based training matrix + recertification
  • Simulated phishing with auto-remediation
  • LMS → GRC evidence bridge · unlimited users
  • 1,500 AI credits / month
Book a demo

Perpetual

Self-hosted Pro · CMMC L3 / NIST 800-172 · air-gapped
$35,000

One-time, all-inclusive license · self-hosted

The full Pro feature set deployed inside your own boundary (your ATO / GCC High), including air-gapped. One-time license with the first year of support and updates included.

Book a demo
  • Full Pro feature set, self-hosted
  • Deployed inside your boundary (ATO / GCC High)
  • CMMC L3 / NIST 800-172 module
  • Support & updates included
  • Bring your own AI key, or credit packs

Feature comparison

All three plans, side by side. A check means it ships today; a clock marks an item still on the L3 roadmap.

Feature

L1 Autopilot

L2 Essentials

Advanced

Pro

Perpetual
CMMC L1 self-assessment
110 NIST 800-171 R2 controls + SPRS
NIST 800-171 R3
CMMC L3 / NIST 800-172
POA&M management
Policies (AI generation)
Risk register + 800-30 cycles
Asset / network / software inventory
Removable media control
Incident management (DIBNet 72h)
Change management
Maintenance logging
Audit log
C3PAO assessor mode
Disaster recovery & continuity
SIEM export / streaming
SSO (SAML / OIDC) + SCIM
Vendor risk (customer assessments)
CISA KEV advisories
SBOM generation
UniFi integration
LMS + phishing simulation
Bring-your-own AI key
Self-hosted deployment

Pro is the recommended starting point for any contractor pursuing CMMC Level 2.

See the full capability matrix

33+ capabilities mapped to NIST 800-171 + 800-172

AI assistants

Claude-powered AI, metered by credits

Every plan includes a monthly credit grant that refreshes automatically. Self-hosted brings its own API key.

What consumes credits
  • Control implementation suggestion included
  • Questionnaire answer suggestion 1 credit
  • Question extraction (PDF / image) 5 credits
  • CMMC policy generation 10 credits
  • Software investigation (CVEs + web) 15 credits
Top-up packs
  • 100 credits $10
  • 500 credits $40
  • 2,000 credits $120

Top-ups stack on top of the monthly grant and don't expire on renewal. Bigger packs lower the per-credit price.

CMMC Level 3 · Phased rollout

Get notified when L3 opens for new tenants

The DoD CMMC Level 3 program is in phased rollout under DCMA DIBCAC. We notify you the week L3 opens to new prime contractors, with no drip emails in between.

  • First-week alert when L3 opens to new prime contractors.
  • Honest read on whether L3 is right for your CUI scope.
  • No drip emails. No follow-up sales pressure.

Join the L3 waitlist

Five fields. Single confirmation email.

Looks good.
Please enter your name.
Looks good.
Please enter your company.
Looks good.
Please enter a valid work email.
Looks good.
Please choose your DoD contract status.
Enter a number between 1 and 100,000.

We use this only to notify you about L3 availability. See our privacy policy.

Premium onboarding · Founder-led

Skip the learning curve. Spend an hour with the founder.

1-hour video call. Your tenant configured together.

Walk through tenant configuration, review your first 10 controls, and validate the SSP export. Each call is a working session, not a sales demo.

  • Tenant configuration walkthrough end-to-end
  • First 10 L1/L2 controls reviewed together
  • First SSP PDF export validated on the call
  • Personalized roadmap for the rest of the catalog
  • Direct line to the founder for 30 days post-call
Add it to your demo

Mention it on your demo call. On Self-hosted, this onboarding call is included.

Ready to talk?

30 minutes. Founder-led. No slides. Walk away with a clearer view of your CMMC posture, either way.

Book a demo

Reply within 1 business day · ES/EN · or email us directly.

Ready to talk?
FAQ

Common questions

FAQ

Self-hosted is Readyline GRC deployed inside your own infrastructure: on-prem, air-gapped, or inside a sovereign cloud. We help you stand it up, you own the data and the runtime. It's the path for prime contractors, primes-by-flow-down, and anyone whose compliance/audit posture can't tolerate a shared SaaS tenant. Comes with CMMC L1+L2+L3 (including NIST 800-172), SSO/SAML, unlimited users, and SLA + Slack support. Pricing is custom based on user count and deployment scope.

Yes. Request the upgrade to Pro from your billing page and we'll send a Stripe invoice; once it's settled, your tenant unlocks the full L2 catalog, Risk Register, C3PAO assessor mode, and every other Pro feature. Your existing L1 assessments and SSP carry over.

30 minutes with our team. No slides, we walk through your CUI scope, look at the L1 Auto-Pilot Wizard on a fresh tenant, and answer compliance questions in plain English. If Readyline is a fit, we set up your tenant same day and you start uploading evidence. If it's not, you walk away with a clearer view of your CMMC posture either way.

No. Readyline is a compliance tracking platform, not a CUI handler. The NIST 800-171 §3.13.11 cryptography requirement applies to the tools that actually store your CUI (PreVeil, Kiteworks, Virtru), not to a compliance tracker. Upload your non-CUI artifacts: policies, procedures, screenshots, training records.

Starter includes 2 seats, Pro includes 5. Need more? Extra seats are sized on the demo call and added to your invoice. Self-hosted is unlimited users. Per-seat pricing is set to your commitment length and total team size.