Free · no account

Where do you actually stand?

Most readiness quizzes score you against every control family equally. That is not how the Department of Defense scores you, and it is not how FedRAMP works either. This one is weighted against the real point values, so a strong result here means something.

Nine questions to find your path. Fourteen more if you want a real gap read. Your result appears on screen, free. We only ask for an email if you want the write-up to take away.

It can tell you no: A lot of people who think they need FedRAMP do not. We would rather say so.
It shows its working: Every weight, band and rule is published. No score inflation.
It may not recommend us: Sometimes the honest answer is a consultant, a managed provider, or waiting.

This check runs entirely in your browser and needs JavaScript enabled. Nothing you answer is sent anywhere unless you ask for the write-up by email.

Regulatory content current as of 2026-08-16. This is a planning tool, not a compliance determination. Your CMMC level is set by the contracting officer in the solicitation (DFARS 252.204-7025), and your FedRAMP obligations come from your agency agreement. Verify against your contract and the primary sources before making decisions. Cost bands are published market ranges from third parties, not quotes.