Foxx Cyber / Security software
Bedrock CMMC
CMMC compliance software for defense contractors and the firms that serve them.
Overview
Author the System Security Plan, work every NIST SP 800-171 objective, manage POA&Ms and build the evidence package, for one organization or a whole client portfolio. One chain of custody from control narrative to the affirmation you sign in SPRS.
Who it is for
Defense contractors preparing for CMMC Level 1 or Level 2, and the MSPs, MSSPs and RP firms that support them.
What it does
- The SSPWritten control by control, with the narrative beside the requirement.
- Every objectiveAll 110 NIST SP 800-171 requirements, worked objective by objective.
- POA&Ms and evidenceOpen items tracked to closure, evidence kept with its review dates.
- Continuous monitoringThe package stays current between assessments instead of starting over.
More security software
| Sheet | Title | Scope | Status |
|---|---|---|---|
| FC-201 | vCISO | A personal AI security advisor for small businesses. | |
| FC-202 | Bedrock GRC | The governance, risk and compliance console behind our fractional-CISO practice. | |
| FC-204 | Bedrock Flowdown | CMMC flow-down tracking for prime contractors. | |
| FC-205 | Bedrock C3PAO | The containerized assessment client for CMMC assessors. | |
| FC-206 | Bedrock RMF | An open-source alternative to eMASS and Xacta for NIST SP 800-53 packages. | Open source |
| FC-207 | Bedrock AFT | Assured File Transfer: cross-domain transfer requests without the paper form. | Open source |
Talk to us about Bedrock CMMC.
A person reads every message and answers, usually within one business day. No pricing page and no sales script: a conversation about your work.
FOXX CYBER LLCCOLORADO SPRINGS, CO
Drawn byJ. P. Price, CISSP, CISM
OwnershipVeteran-owned
FC-203
Contact sales