Directory
Authorized C3PAOs
The organizations authorized to conduct CMMC Level 2 certification assessments. Capacity and service data is shown
where assessors have provided it — everything else is honestly marked unknown. Ordering is alphabetical;
sponsorship never affects it.
All states CA FL GA MA MD PA TX VA WI Any capacity Accepting clients Waitlist At capacity Unknown 82 shown
112Cyber — authorized self-reported
● Capacity unknown
A-LIGN FL authorized self-reported
● Capacity unknown
Aprio, LLP GA authorized self-reported
● Capacity unknown
Arcybr — authorized self-reported
● Capacity unknown
CISEVE — authorized self-reported
● Capacity unknown
CyberRx — authorized self-reported
● Capacity unknown
Cybexa VA authorized self-reported
● Capacity unknown
ECFirst — authorized self-reported
● Capacity unknown
Fortreum — authorized self-reported
● Capacity unknown
HORNE LLP — authorized self-reported
● Capacity unknown
iPower LLC — authorized self-reported
● Capacity unknown
Kompleye — authorized self-reported
● Capacity unknown
MNS Group — authorized self-reported
● Capacity unknown
Redspin — authorized self-reported
● Capacity unknown
RSM US LLP — authorized self-reported
● Capacity unknown
Sera-Brynn — authorized self-reported
● Capacity unknown
SteelToad — authorized self-reported
● Capacity unknown
SysAudits — authorized self-reported
● Capacity unknown
Vaultes — authorized self-reported
● Capacity unknown