# C3PAO List: Find Authorized CMMC Assessors [2026] > Browse accredited C3PAOs listed on The Cyber AB Marketplace, with a one-sentence overview of each firm to help you find the right assessor. canonical: https://secureframe.com/hub/cmmc/c3pao-list ***Editor's note:** On July 13, 2026, the Department of War paused the transition to Phase 2, which would have expanded the DoW's rollout of third-party (C3PAO) assessment requirements, pending a 60-day program review. Since prime contractors may continue requiring or organizations may continue voluntarily seeking out this higher level of assurance in the interim period, we've kept this list intact. Read [the Phase 2 pause update](https://secureframe.com/blog/cmmc-news-2026-phase-2-pause) for more information.* [C3PAOs](https://secureframe.com/hub/cmmc/c3pao) are the entities that have been authorized by the [Cybersecurity Maturity Model Certification Accreditation Body](https://cyberab.org/) (The Cyber AB) to conduct formal CMMC Level 2 certification assessments on behalf of [organizations seeking certification](https://secureframe.com/glossary/organization-seeking-certification). Each is listed below with a brief description. For more information on any C3PAO, browse the [Cyber AB’s marketplace](https://cyberab.org/Catalog#!/c/s/Results/Format/list/Page/1/Size/9/Sort/NameAscending?typeId=7). ## A-LIGN [A-LIGN](https://www.a-lign.com/) specializes in cybersecurity and compliance services, providing tailored assessments and certifications for various frameworks, including CMMC. ## ABS Quality Evaluations [ABS Quality Evaluations](https://www.abs-group.com/) is a global leader in certification and auditing services, offering CMMC assessments through a rigorous and systematic approach. ## Arcybr [Arcybr](https://www.arcybr.com/) focuses on cybersecurity and compliance solutions, delivering comprehensive CMMC assessments for defense contractors. ## Ariento Inc. [Ariento Inc.](https://www.ariento.com/) provides cybersecurity, IT, and CMMC compliance services with a focus on small to medium-sized defense contractors. ## Auria Space [Auria Space](https://www.auria.space/solutions/mission-assurance/) delivers cybersecurity assessments and solutions with expertise in compliance frameworks, including CMMC. ## Booz Allen Hamilton, Inc. [Booz Allen Hamilton, Inc.](https://www.boozallen.com/expertise/cybersecurity/cmmc.html) is a prominent consulting firm offering strategic CMMC assessments, cybersecurity services, and compliance solutions. ## Boston Government Services, LLC [Boston Government Services, LLC](https://www.bgs-llc.com/) specializes in IT and cybersecurity solutions, offering expert CMMC certification services. ## Business Transformation Institute, Inc. [Business Transformation Institute, Inc.](https://www.biztransform.net/) provides consulting services focused on business transformation, including CMMC compliance and assessments. ## C.H. Guernsey & Company [C.H. Guernsey & Company](https://www.guernsey.us/) is a multidisciplinary firm offering engineering and consulting services, including CMMC assessments for defense contractors. ## Cask Government Services [Cask Government Services](https://www.caskgov.com/) delivers consulting and compliance services, including CMMC certification for government contractors. ## Cherry Bekaert [Cherry Bekaert](https://www.cbh.com/services/advisory/cybersecurity/cybersecurity-maturity-model-certification/) is a CPA and advisory firm offering CMMC certification services alongside other compliance and cybersecurity solutions. ## CISEVE [CISEVE](https://www.ciseve.com/) specializes in cybersecurity and CMMC assessments, providing expert evaluation and certification services. ## Coalfire Federal [Coalfire Federal](https://coalfire.com/industries/tech-software) is a leading cybersecurity firm providing CMMC assessments and advisory services to federal agencies and contractors. As a Secureframe partner, their familiarity with the Secureframe platform allows them to conduct streamlined and faster assessments.  ## CohnReznick LLP [CohnReznick LLP](https://www.cohnreznick.com/) offers advisory and compliance services, including CMMC assessments, with a focus on helping organizations meet regulatory requirements. ## CyberNINES LLC [CyberNINES LLC](https://cybernines.com/) provides cybersecurity services with a focus on helping defense contractors achieve and maintain CMMC compliance. ## CyberRx [CyberRx](https://www.cyber-rx.com/) specializes in cybersecurity risk management and compliance, offering CMMC assessment and certification services. ## Cybersec Investments [Cybersec Investments](https://cybersecinvestments.com/) delivers cybersecurity solutions and CMMC certification services, focusing on small and mid-sized businesses. ## DataSoftNow, Inc. [DataSoftNow, Inc.](https://www.datasoftnow.com/) offers IT and cybersecurity services, including CMMC assessments and compliance consulting. ## DTC [DTC](https://www.dtcnm.com/) provides comprehensive cybersecurity and compliance services, including CMMC assessments for defense contractors. ## ECFirst [ECFirst](https://www.ecfirst.com/) specializes in cybersecurity and compliance, offering CMMC certification services to ensure organizations meet regulatory standards. ## Edwards Performance Solutions [Edwards Performance Solutions](https://www.edwps.com/) provides project management and cybersecurity services, including CMMC assessments and compliance solutions. ## Fortreum [Fortreum](https://fortreum.com) is an independent firm specializing in audit, advisory, and technical testing services, delivering cybersecurity expertise in highly regulated industries. Their mission is to simplify cloud and cybersecurity challenges for clients.  ## Forvis Mazars [Forvis Mazars](https://www.mazars.us/) offers auditing and advisory services, including CMMC assessments, with a focus on cybersecurity and compliance. ## GMS Registrar Ltd [GMS Registrar Ltd](https://gmsaudit.com/) is an accredited certification body providing CMMC assessments and other compliance services. ## Gray Analytics Inc. [Gray Analytics Inc.](https://grayanalytics.com/cybersecurity-regulatory-compliance-support/) specializes in cybersecurity services, including CMMC assessments, with expertise in protecting critical infrastructure. ## HORNE LLP [HORNE LLP](https://horne.com/) is a professional services firm offering CMMC certification and compliance consulting services. ## iPower LLC [iPower LLC](https://ipowerllc.com/) provides IT and cybersecurity services with a focus on CMMC certification for defense contractors. ## Kieri Solutions LLC [Kieri Solutions LLC](https://www.kieri.com/) specializes in cybersecurity and compliance, offering CMMC assessments and certification services. ## KLC Consulting, Inc [KLC Consulting, Inc](https://klcconsulting.net/) provides cybersecurity services, including CMMC assessments, with a focus on protecting sensitive information. ## KNC Strategic Services [KNC Strategic Services](https://www.kncss.com/) offers cybersecurity and compliance consulting, including CMMC certification services. ## Kompleye [Kompleye](https://www.kompleye.com/cmmc/) specializes in compliance and cybersecurity solutions, providing CMMC assessments for organizations in the defense sector. ## Kratos Technology & Training Solutions [Kratos Technology & Training Solutions](https://www.kratoscyber.com/) provides CMMC certification services along with a wide range of cybersecurity solutions. ## Lazarus Alliance, Inc. [Lazarus Alliance, Inc.](https://lazarusalliance.com/) specializes in cybersecurity audits and compliance services, offering CMMC assessments and advisory solutions. ## MNS Group [MNS Group](https://mnsgroup.com/) provides IT and cybersecurity services, including CMMC assessments and compliance consulting for defense contractors. ## Monarch ISC [Monarch ISC](https://monarchisc.com/) offers cybersecurity and compliance services, including CMMC assessments, with a focus on protecting sensitive information. ## NSF INTERNATIONAL STRATEGIC REGISTRATION LTD [NSF INTERNATIONAL STRATEGIC REGISTRATION LTD](https://www.nsf.org/management-systems/information-security) provides certification and assessment services, including CMMC, with a focus on regulatory compliance. ## Paragon Cyber Solutions LLC [Paragon Cyber Solutions LLC](https://paragoncybersolutions.com/) specializes in cybersecurity and compliance, offering CMMC assessments and consulting services. ## Peak InfoSec LLC [Peak InfoSec LLC](https://www.peakinfosec.com/) focuses on cybersecurity and compliance solutions, providing CMMC certification services for defense contractors. ## Penacity, LLC [Penacity, LLC](https://www.penacity.us/) offers cybersecurity services, including CMMC assessments and compliance consulting. ## Provincia Government Solutions [Provincia Government Solutions](https://provincia.io/) specializes in compliance and IT services, providing CMMC assessments for government contractors. ## Redspin [Redspin](https://redspin.com/) is a leading cybersecurity firm providing comprehensive CMMC certification and advisory services. ## Reef Systems [Reef Systems](https://www.reef-sys.com/) delivers IT and cybersecurity solutions, including CMMC assessments and compliance consulting. ## Regola Cyber [Regola Cyber](https://www.regolacyber.com/) provides cybersecurity and compliance services with a focus on CMMC certification for defense contractors. ## RSI Security [RSI Security](https://www.rsisecurity.com/) specializes in cybersecurity and compliance, offering CMMC assessments and advisory services. ## RSM US LLP [RSM US LLP](https://rsmus.com/services/risk-fraud-cybersecurity/cybersecurity-business-vulnerability/cybersecurity-risk-compliance.html) offers auditing, consulting, and compliance services, including CMMC certification for defense contractors. As a Secureframe partner, their familiarity with the Secureframe platform allows them to conduct streamlined and faster assessments.  ## Schellman & Company, LLC [Schellman & Company, LLC](https://www.schellman.com/services/federal-compliance/cmmc) is a leading provider of attestation and compliance services, including CMMC certification. As a Secureframe partner, their familiarity with the Secureframe platform allows them to conduct streamlined and faster assessments.  ## SecureStrux, LLC [SecureStrux, LLC](https://www.securestrux.com/) specializes in cybersecurity services, providing CMMC assessments and compliance solutions. ## Securitybricks, Inc. [Securitybricks, Inc.](https://securitybricks.io/) offers cybersecurity and compliance services, including CMMC certification for small and mid-sized businesses. ## Sentar, Inc. [Sentar, Inc.](https://sentar.com/) provides cybersecurity and compliance services, including CMMC assessments, with a focus on government contracts. ## Sentinel Blue [Sentinel Blue](https://www.sentinelblue.com/) specializes in cybersecurity and compliance solutions, offering CMMC certification services for defense contractors. ## SoundWay [SoundWay](https://soundwayconsulting.com/capabilities/cmmc2/cmmc-guide/) provides IT and cybersecurity solutions, including CMMC assessments and compliance consulting. ## SteelToad [SteelToad](https://www.steeltoad.com/) offers cybersecurity services with a focus on CMMC certification and compliance solutions. ## StrategicIT Solutions LLC [StrategicIT Solutions LLC](https://www.strategicit-solutions.com/) specializes in IT and cybersecurity services, providing CMMC assessments and consulting for defense contractors. ## SysAudits [SysAudits](https://sysaudits.com/) offers compliance and cybersecurity services, including CMMC certification and assessments. ## The CMMC Team [The CMMC Team](https://www.thecmmcteam.com/) focuses on providing comprehensive CMMC certification services, ensuring organizations meet necessary compliance standards. ## Vaultes [Vaultes](https://vaultes.com/) specializes in cybersecurity and compliance, offering CMMC assessments and consulting services for defense contractors. ## Get assessment-ready before you pick a C3PAO Download the checklist to work through the NIST 800-171 controls you'll need in place and calculate your readiness score before a C3PAO looks at your environment.