Choose your version
Browser (free). Open app.getcmmc.consulting in any modern browser — nothing to install, no account to create. It works fully offline and can be installed as a PWA using the install icon in your browser's address bar. The free version covers full editing for the 17 CMMC Level 1 practices (FAR 52.204-21) and their Rev 3 equivalents; the remaining requirements are visible but read-only.
Desktop (licensed). The native app for Windows, macOS, and Linux unlocks editing for all 110 NIST SP 800-171 requirements plus SPRS scoring — the full Level 2 assessment. It requires a license key; every subscription starts with a 14-day free trial.
The browser and desktop versions each keep their own local data. To move work between them, use Export / Import Database from the upper-right menu — see Reports & Exports.
Install the desktop app
Download the installer for your platform from the download page (installers are also published on GitHub Releases):
| Platform | File |
|---|---|
| macOS — Apple Silicon | CMMC_<version>_aarch64.dmg |
| macOS — Intel | CMMC_<version>_x64.dmg |
| Windows | CMMC_<version>_x64-setup.exe or .msi |
| Linux — Debian / Ubuntu | CMMC_<version>_amd64.deb |
| Linux — Fedora / RHEL | CMMC-<version>-1.x86_64.rpm |
All installers are signed and built from the source repository by CI.
First launch: enter your license key
The desktop app shows an activation screen until a license key is entered. Your key is emailed to you when you start a trial or purchase — enter it once, and the app registers this machine and verifies the license locally from then on, so day-to-day use needs no network connection. See Licensing, Trial & Billing for details, or Offline & Air-Gapped Use if this machine can't go online at all.
Take the guided tour
On first visit the app offers an interactive tour that walks through the family list, the revision switch, the SPRS score, evidence, and report generation. You can restart it anytime from the upper-right menu (Take a Tour).
Your first assessment, in five steps
- Pick a revision. CMMC assesses against NIST SP 800-171 Rev 2 today, so start there; the revision switch in the top navigation lets you toggle to Rev 3 at any time. See Working Through an Assessment.
- Open a family — for example Access Control — and work through its requirements.
- Set a status and add notes on each security requirement: Implemented, Partially Implemented, Not Implemented, Not Applicable, or Not Started, with free-form markdown notes.
- Attach evidence — drag in a file, paste an image, or add a URL — to back up your statuses. See Evidence Management.
- Generate your reports. The upper-right menu produces a markdown SSP and a CSV POA&M from everything you've recorded, and your SPRS score has been updating live the whole time.
