Free and open-source CMMC assessment tools for small and medium-sized businesses.

Air-gapped compliance AI for CMMC 2.0, NIST SP 800-171/172/53, HIPAA, DFARS. Gemma 4 31B flagship tied with Claude Opus 4.6 on CMMC claim verification across 1,273 questions. Apache 2.0, runs on Ollama with zero cloud dependency.

Production-grade IAM governance evidence packs for Microsoft Entra ID — JML, Access Reviews, PIM, Conditional Access, SoD, PowerShell automation. NIST 800-53 + CMMC Level 2 aligned. Built by a Navy-trained IAM architect.