Choose Your Level

Both levels include all features listed below. The only difference is the scope of controls covered.

CMMC Level 1 / 800-53 Low

$30/month

or $300/year (save 17%)

  • 17 practices (NIST 800-171 controls) required by FAR 52.204-21
  • 59 practice assessment objectives
  • NIST 800-53 Low baseline

Best for companies handling FCI only or who only need 800-53 Low

Start Free Demo

Start the free demo trial in your own environment before purchasing.

What's Included

Every Arcana-GRC license includes the full platform

Virtual ISSO AI Assistant

AI-powered assistant that helps write and review implementation statements for your controls. Supports Anthropic Claude, OpenAI, and self-hosted models via LM Studio.

Contextual Help

Guidance for each control explaining what assessors are looking for, in plain language.

Progress Dashboard

Track completion status across all control families with tentative and reviewed scoring.

Artifact Management

Checklist of required evidence with upload capability for each control.

Assessment Prep Workflows

Guided preparation for self-assessment and C3PAO assessment with review and approval workflows.

Access Audit Tool

Compare user records against Active Directory to identify orphaned accounts and access control gaps.

Device Inventory Tracker

Track network devices and compare port baselines against nmap scans to identify unauthorized devices.

POA&M Tracking

Plan of Action & Milestones management with milestone tracking, evidence attachments, and change history.

Pre-Assessment Readiness Scoring

Automated scoring reviews your implementation status, evidence, and documentation completeness.

On-Premises VM Appliance

A ~4GB Ubuntu 24.04 VM (OVA, VHDX, or QCOW2) imports straight into VMware, Hyper-V, KVM, or Proxmox. Your data never leaves your network. No FedRAMP required, no cloud dependency.

Consulting Services

Optional expert guidance from a CMMC Registered Practitioner

CMMC RP Guidance

$175/hour

Purchase hours as needed

  • Expert Registered Practitioner guidance
  • Gap analysis review
  • Documentation assistance
  • Pre-assessment readiness checks
  • Control implementation advice
  • Artifact review and feedback
Contact Us

Select quantity during checkout

Questions Before You Buy?

We're happy to answer any questions about our tools or help you determine which level you need.

Contact Us