From “Where’s My CUI?”
to C3PAO-Ready. For $5K.
Baseplate is the only self-serve platform that takes a defense subcontractor from boundary scoping to a complete C3PAO assessment package — SSP, POA&M, SPRS score, and evidence — without a consultant.
Platform Capabilities
From Boundary Scoping to Assessment Day. One Platform.
Know Exactly What's In Scope.
The #1 reason assessments cost too much? Undefined boundaries. Baseplate walks you through your environment — CNC machines, CAD stations, file servers — and draws the boundary for you. Consultants charge $15K for this. We do it in 2 hours.
- ✓Interactive scoping wizard for shop floor environments
- ✓Auto-generates the CUI boundary diagram C3PAOs require
- ✓Calculates scope reduction opportunities to lower audit costs
The TurboTax for CMMC.
Instead of staring at a blank 110-control template, Baseplate walks you through plain-English conditional questions. Answer what applies to your environment — the engine handles the compliance logic.
- ✓Conditional Q&A covers all 110 NIST 800-171 controls
- ✓Plain language — no security certification required
- ✓Skips irrelevant controls automatically based on your answers
Your SSP Written by AI. In Hours.
Your answers become formal, auditor-ready SSP prose — translated by a secure LLM into the exact language C3PAOs expect. No templates, no blank documents, no $250/hour consultant.
- ✓AI converts your answers into formal SSP control narratives
- ✓POA&M auto-built from every gap you identify
- ✓Export a complete, assessor-ready package in one click
“The organization employs automated mechanisms to audit account creation, modification, enabling, disabling, and removal actions and notifies account managers within 24 hours of those actions...”
See Your Score Before the DoD Does.
Every defense subcontractor must report an SPRS score. Most have no idea what theirs is. Baseplate calculates it in real-time as you complete controls, with "what-if" scenarios so you can prioritize fixes that move the needle most.
- ✓Real-time SPRS calculation as you complete assessments
- ✓"What-if" simulator to prioritize the highest-impact fixes
- ✓Benchmark against the average DIB contractor score
Organize Your Evidence Before the Auditor Arrives.
Upload your screenshots, policy docs, and configuration exports. The Evidence Vault maps each piece to the exact NIST control it satisfies — so your C3PAO walks into a clean, organized package.
- ✓Upload and tag evidence against specific controls
- ✓Track what's covered and what's still missing
- ✓Share a secure, auditor-facing evidence package directly
Walk In Ready. Walk Out Certified.
Every other tool stops at "here's your SSP." Baseplate prepares you for the actual assessment — mock interview questions, pre-populated answers, a consistency check, and a single ZIP file your C3PAO can open on day one.
- ✓Pre-populated answers for common C3PAO interview questions
- ✓Consistency check: flags mismatches between SSP and evidence
- ✓One-click ZIP export: SSP + POA&M + evidence + boundary diagram
Your Compliance Roadmap.
Define Your CUI Boundary
1–2 hoursUse the CUI Boundary Scoping Wizard to map your environment — CNC machines, CAD stations, file servers. Baseplate identifies what's in scope, draws your boundary diagram, and calculates scope reduction opportunities to cut audit costs.
Work Through 110 Controls
2–4 daysAnswer plain-English conditional questions for all 110 NIST 800-171 controls. Baseplate's logic engine handles the branching — skipping inapplicable controls and surfacing every gap.
AI Generates Your SSP & SPRS Score
InstantYour answers are translated by a secure LLM into formal, auditor-ready SSP prose. Simultaneously, Baseplate calculates your SPRS score in real-time and shows you exactly which fixes will move the needle most.
Build Your Evidence Vault
2–4 weeksWork through your POA&M. Upload screenshots, policy docs, and configurations to the Evidence Vault. Each upload is tagged to the specific control it closes.
Assessment Day — Walk In Ready
1 dayGenerate your Assessment Day Package: SSP, POA&M, evidence index, and CUI boundary diagram — bundled into a single ZIP file. Review pre-populated assessor Q&A so you know exactly what to say and show when the C3PAO walks in.
Why Baseplate?
Purpose-Built for the Defense Industrial Base.
| Generic Compliance Platforms | Baseplate Security | |
|---|---|---|
| CUI Boundary Scoping | Not included — hire a consultant | Guided wizard + auto-generated diagram |
| Primary Focus | 50+ frameworks (SOC 2, ISO, HIPAA…) | CMMC 2.0 + NIST 800-171 only |
| Built For | Enterprise IT & compliance teams | Defense subcontractors, any size |
| SSP Generation | Template-based, manual fill-in | AI-generated from your environment |
| SSP Output Quality | Generic prose across dozens of frameworks | C3PAO-tuned narratives, DFARS language throughout |
| SPRS Score Tracking | Manual calculation in spreadsheets | Real-time simulator + what-if scenarios |
| POA&M Tracking | Manual spreadsheet workflow | Auto-populated from gap analysis |
| C3PAO Assessment Prep | Not included | Mock assessment + readiness package + ZIP export |
| CUI Scoping | Not included | Built-in scoping engine |
| SPRS Score Reporting | Not included | Auto-calculated & exportable |
| Defense Context | Generic guidance | DFARS & DoD-specific throughout |
| Getting Started | Book a demo, wait for a quote | Credit card checkout — start today |
| Pricing | Enterprise ($15K–$50K+/yr) | From $2,490/yr — no PO required |
Transparent Pricing
No Sales Call. No Enterprise PO. Just Start.
Every other compliance platform makes you book a demo and wait for a quote. Baseplate lets you sign up with a credit card and start your CMMC assessment today.
- ✓15 FAR 52.204-21 practices
- ✓Plain-English Q&A assessment
- ✓Auto-calculated SPRS score
- ✓Annual self-attestation letter
- ✓Evidence Vault (10GB)
- ✓1 admin user
- ✕AI SSP generation
- ✕POA&M dashboard
- ✕C3PAO export package
- ✓All 110 NIST 800-171 controls
- ✓Plain-English Q&A logic engine
- ✓AI-generated SSP narratives
- ✓Auto-built POA&M dashboard
- ✓CUI scoping & boundary definition
- ✓Evidence Vault (unlimited)
- ✓C3PAO assessment export package
- ✓Up to 5 users
- ✓Everything in Level 2
- ✓Multi-entity supply chain dashboard
- ✓Vendor compliance tracking
- ✓VOSB / SDVOSB certification data
- ✓Prime contractor diversity spend reports
- ✓Unlimited users & RBAC
- ✓Dedicated success manager
From “Where’s My CUI?” to Certified.
Define your boundary, pass your assessment, and keep your contracts — for $5K, with no consultant.
Have Questions?
Everything You Need to Know.
Your CUI boundary defines exactly which systems, networks, and devices handle Controlled Unclassified Information (CUI). Getting this right is critical — an overly broad boundary means more systems to secure, more controls to implement, and a more expensive C3PAO assessment. Baseplate's CUI Boundary Scoping Wizard walks you through your environment (CNC machines, CAD stations, file servers, email) and identifies what's in scope vs. what can be excluded. This can reduce your assessment scope by 30–50% and save thousands in audit costs.
Built for defense subcontractors across the DIB