Skip to content
Discuss a project
Engineering / Delivery

Built in your environment. Handed over running.

We manufacture governance and credentialing systems and put them into production where you operate — connected, air-gapped, or in GovCloud — under an evaluation gate that blocks a release rather than flagging it afterwards.

Discuss a project
Connected · Air-gapped · GovCloudEvaluation-gated releasesOperator handover
01 / Engagement types

Four ways to engage.

Each one states what is delivered and who is accountable for the result.

01

CMMC readiness program

Level 2 gap analysis across all 110 practices, SPRS scoring, and POA&M generation, plus a mock assessment run against C3PAO methodology. Deliverable: a gap register, an SPRS score with its calculation shown, a POA&M, and the evidence artifacts behind each item. This is readiness work; certification is issued by your C3PAO, not by us.

02

ISACA preparation program

CISA, CISM, CRISC, and CDPSE curricula built for training organizations and enterprise L&D. The credential is gated on demonstrated judgment rather than seat time. Deliverable: a curriculum, the diagnostics that gate it, and instructor materials.

03

CubeletCore deployment

The knowledge system running inside your environment, connected or air-gapped. Every cubelet is a versioned, scored artifact, so a standard update propagates without anyone re-keying content. Deliverable: a running deployment, an update path, and operator documentation.

04

Custom domain development

Your regulatory domain built into the same manufacturing pipeline: SCF-mapped, evaluation-gated against the same quality floor we hold everywhere. Deliverable: a cubelet library for your domain and the evaluation record for each unit.

02 / Operating environments

Where it runs.

The system is built to run in restricted environments. Timelines below are planning estimates; the statement of work sets the committed dates.

01

Connected

Cloud-hosted, with updates delivered continuously.

02

Air-gapped

Self-contained on-premises deployment with no external network dependency. Updates ship as signed offline bundles.

03

GovCloud

Designed to run in AWS GovCloud. Ask us during scoping about current deployments and references.

Deployment evidence is not yet published. Air-gapped and GovCloud capability describes how the system is built and tested, not a public list of customer deployments. Named references and deployment detail are available under NDA during scoping. Treat the capability statements above as engineering claims we will substantiate on request.
03 / Who we work with

Two starting points.

Defense industrial base

DIB contractors preparing for CMMC assessment or contract award.

Start a conversation

Training organizations

Training providers and corporate L&D programs adding judgment diagnostics to their curriculum.

Start a conversation
FREQUENTLY ASKED QUESTIONS
What deployment options are available?
Connected (cloud-hosted) or air-gapped (on-premises). CubeletCore is designed to run as a self-contained deployment with no external network dependencies, including in GovCloud environments. Deployment references are available under NDA during scoping.
What is the typical engagement timeline?
These are planning estimates, not commitments: CMMC readiness programs 8-16 weeks depending on current posture; ISACA prep program setup 2-4 weeks; CubeletCore deployment 1-2 weeks connected, 2-4 weeks air-gapped. Your actual timeline is fixed in the statement of work.
Can you work with our existing C3PAO?
Yes. We provide a mock assessment mode and evidence artifacts structured to align with C3PAO assessment methodology. We work with your assessor, not against them. Mock assessment output is readiness evidence and is not a certification result.
How does engagement pricing work?
CMMC and ISACA programs are scoped per engagement. Published plan pricing lives on the pricing page. CubeletCore licensing is per-domain annual — contact us to scope it.
Scoped to your regulatory calendar

What has to be running, and by when?

Tell us the outcome, the environment, and the deadline. We will scope the engagement to that, or tell you we are not the right fit.

Discuss a project