Instantly scan your Google Workspace configuration against CMMC Level 2 controls. Get an audit-ready PDF report with technical attestation — no screenshots needed.
🔒 Read-only access · No data leaves your domain · SOC 2 compliant
Three steps from install to audit-ready evidence
Admin installs from Google Workspace Marketplace. OAuth consent grants read-only access to your Admin SDK.
Our scanner checks 10+ GWS apps against 22 CMMC controls — MFA, Drive sharing, Gmail, Chrome, session management, and more.
Download a branded PDF with configuration attestation tables, per-user breakdowns, raw API evidence, and SHA-256 integrity verification.
Comprehensive coverage of CMMC-relevant GWS configurations
2-Step Verification enrollment, admin enforcement, per-user audit
IA.L2-3.5.3 IA.L2-3.5.7External sharing, link access, DLP rule enforcement
AC.L2-3.1.3 MP.L2-3.8.7Forwarding rules, IMAP/POP, TLS enforcement
SC.L1-3.13.1 SC.L2-3.13.8Device policies, Context-Aware Access, profile separation
CM.L2-3.4.1 AC.L2-3.1.18Session timeout verification, re-authentication patterns
SC.L2-3.13.9 AC.L2-3.1.10Legal holds, retention rules, audit log preservation
AU.L2-3.3.1 AU.L2-3.3.9Full CMMC L2 compliance requires Enterprise Plus features (DLP, Context-Aware Access, Chrome Policy API). Our scanner auto-detects your edition and clearly identifies which controls are blocked by plan limitations vs. misconfiguration.
Start free. Pro scales with your organization — commit annually and save 20%.
Volume Discounts
Includes 1 admin seat · Additional admins $25/mo each · User counts auto-reconciled after each scan · Single-session enforcement prevents credential sharing
This scanner provides point-in-time assessments. For continuous monitoring, automated POA&M tracking, and fleet-wide compliance visibility across all infrastructure layers, get early access to Aegis.
Get Early Adopter Pricing →