← All frameworks
Cybersecurity Maturity Model Certification 2.0

CMMC 2.0 compliance, proven cryptographically.

CUI-handling that proves itself.

Probatum’s air-gapped desktop mode is built exactly for CMMC: controlled unclassified information never traverses a vendor cloud, and your assessor still gets cryptographic proof.

  • No credit card
  • No demo required
  • Cancel in 1 click
  • Data never leaves your machine
CMMC 2.0 chainSHA-256 · Ed25519 · W3C VC
Lost contracts

DoD prime contractors are excluding subs that can’t prove CMMC Level 2 by phased deadlines through 2028.

Source: DoD CMMC Program Rule, 32 CFR Part 170

Control coverage

110 practices (Level 2), purpose-built for CMMC 2.0.

No generic prompts. Each control is mapped to evidence shape, citation requirements, and grading thresholds.

AC

Access Control

22 practices.

IA

Identification & Authentication

11 practices.

SC

System & Communications Protection

16 practices.

SI

System & Information Integrity

7 practices.

How Probatum maps to CMMC 2.0

From clause to cryptographic artifact.

  • CUI protectionCited handling evidence, signed
  • Incident reportingHash-chained DIB CS reports
  • POA&MVerifiable plan-of-action snapshots
  • Cited evidence per control
  • Hash-chained audit log
  • Signed Verifiable Credential
  • Offline verifier CLI
W3C Verifiable Credential verified
status
Valid — Not Revoked
framework
Cybersecurity Maturity Model Certification 2.0
controls
AC, IA, SC, SI
score
0.94
signature
Ed25519 ✓ 4f8a…b9e2
issuer
did:key:z6MkpTHR8VNsBxYAAWHu…
chain_hash
a3f8b2c1d4e5f607…
issued_at
2026-05-23T14:08:42Z

CMMC 2.0 questions, answered.

Yes. The desktop bundle is designed to operate fully air-gapped. The control-plane SaaS is optional.

Start your CMMC 2.0 program today.

14-day free trial · $299/mo · no demo · cancel in 1 click