cmmc2agent.toml to connect the scanner agent to this project.
{{ new_key }}
{{ new_project_id }}
Open Dashboard →
pip install cmmc2-agent
# cmmc2agent.toml
dashboard_url = "http://<this-server>:5050"
api_key = "{{ new_key }}"
project_id = "{{ new_project_id }}"
scan_path = "/path/to/your/app"
cmmc2agent scan
The Cybersecurity Maturity Model Certification (CMMC) 2.0 is a U.S. Department of Defense framework that requires contractors and subcontractors handling Controlled Unclassified Information (CUI) to demonstrate compliance with NIST SP 800-171. Level 2 covers all 110 practices across 14 domains — including Access Control, Audit & Accountability, Identification & Authentication, Configuration Management, Incident Response, and more. Non-compliance can result in loss of DoD contracts.
About This ToolThis tool inspects the source code and configuration of your web application and automatically checks it against the 26 most common CMMC 2.0 Level 2 control gaps found in Flask, Django, and FastAPI projects. It detects your platform automatically, runs programmatic checks (bcrypt usage, CSRF protection, session timeouts, security headers, secrets in environment variables, audit logging, and more), and gives you a live compliance score with a Plan of Action & Milestones (POA&M) for any gaps.
Each website you scan gets its own isolated dashboard, POA&M, and audit log. You can re-scan at any time to track remediation progress — manual overrides are always preserved.