Clear answers before you begin.

CMMCPulsar is documentation and readiness software for organizations working toward CMMC or NIST SP 800-171 alignment. It connects scope, practices, policies, evidence, architecture, remediation, attestation, and export work in one account-scoped workspace.

No. CMMCPulsar does not perform an official assessment, issue a certification, provide legal advice, or guarantee a score. Assessment and certification decisions are made by the organizations authorized under the applicable CMMC process.

As of August 1, 2026, Phase II requirements are suspended and Phase I self-assessment requirements remain in place. Users should verify the current DoD guidance and the exact clauses in each solicitation or contract.

The Level 1 workflow covers intake and scope, all 15 FAR 52.204-21 safeguarding requirements represented across the CMMC Level 1 practices, policy drafting and adoption, evidence notes, network mapping, readiness findings, attestation details, and packet export.

The Level 2 workflow organizes all 110 NIST SP 800-171 Revision 2 requirements used by the current CMMC Level 2 model, along with objectives, implementation statements, evidence, architecture, findings, eligible POA&M work, and exports.

NIST SP 800-171 Revision 3 is the current NIST publication, but the current CMMC Level 2 model references Revision 2. Separate workspaces prevent requirements, evidence, and status from bleeding across baselines.

CMMCPulsar can draft policy and implementation language from the information entered in the workspace. Every draft must be reviewed, edited to match real operations, approved by the organization, and maintained over time.

The map connects assets, boundaries, providers, security services, data flows, controls, and evidence. Validation can identify issues such as missing owners, unprotected CUI paths, expired evidence, open findings, and boundary crossings that need review.

Saved work is scoped to the authenticated user, organization workspace, project, and program. Level 1, Level 2, NIST, and free snapshot data use separate program namespaces to prevent cross-program overlap.

No. Square hosts web checkout and processes web payment details. Apple processes eligible iOS subscriptions through In-App Purchase. CMMCPulsar does not collect or store full card numbers.

Yes. Available workflows can generate review packets that include the applicable workspace content and integrity metadata. The user remains responsible for reviewing the packet, protecting sensitive information, and deciding who may receive it.

Use the support page for account and product questions. For authoritative compliance interpretation, consult the current government source, contract professional, qualified practitioner, or authorized assessor as appropriate.