An assessment score and an affirmation are each made on a date. Your environment keeps changing after that date. Between one affirmation and the next, people change roles, a policy gets relaxed for a project, a bucket gets opened for a vendor, and the evidence from your last assessment stops describing the environment you are actually running. Sentinel is the tier for the already-affirmed or already-certified contractor: it keeps measuring what your connected sources can observe, keeps the evidence current and records drift, so reassessment starts from a known posture.
What your company represents to the government. Your NIST SP 800-171 assessment score is posted in SPRS under DFARS 252.204-7019 and 252.204-7020, and where a contract requires a CMMC status, your Affirming Official affirms in SPRS that your company “has implemented and will maintain implementation” of the applicable security requirements (32 CFR 170.22). Both are representations your company makes to the federal government. An offer needs a current assessment in SPRS (DFARS 252.204-7019(b)) and the affirmation recurs annually, so the need to know that the compliance state behind them is accurate does not start or end with an assessment. Sentinel keeps that compliance state measured and evidenced on a stated schedule, so your Affirming Official decides from the latest measured record; where a C3PAO assessment is required, the same record is there for your assessor, on your grant.
What Sentinel delivers each cycle
- Read-only re-scans of every connected cloud about every seven days. AWS, Azure, Microsoft 365, Google Workspace, Okta or CrowdStrike, pulled with read-only permissions. Commercial tenants only. Configuration metadata only. No file contents, no CUI ingestion. You can revoke any connector at any time by removing the role, app or token.
- Connected-cloud evidence refreshed every cycle, mapped to the NIST 800-171A assessment objectives, each measured finding stored with an excerpt of the API response behind it and its SHA-256 hash, and an append-only audit trail enforced at the database.
- A Level 2 readiness report PDF every 30 days for your board or your prime, showing the posture recorded that cycle rather than where it stood on assessment day.
- The base document set every 30 days: System Security Plan, POA&M, CUI scoping package, Customer Responsibility Matrix and Evidence Library Index, regenerated from what is recorded that cycle.
- Drift flagged between assessments. Each re-scan of your connected sources is compared with the prior posture snapshot, and any control that regressed is listed in your workspace, so a change shows up between cycles instead of at reassessment.
Sentinel or another tier?
Sentinel assumes the work is already done and your Level 2 status is on record in SPRS. If it is not yet, start with one of the other tiers.
- Sentinel, $11,940 a year. You already hold a Level 2 status, Self or C3PAO, and want the evidence refreshed until the next affirmation or reassessment.
- Standing, $8,340 a year: refreshed every 90 days for a small contractor with no external clock forcing the pace.
- Garrison, $17,940 a year: the same six-document base set every 60 days when a prime is asking questions.
- Standard, $29,940 a year: refreshed every 30 days when your environment changes month to month.
Where the boundary sits
Sentinel runs on Enclave AI™, AI-operated assurance infrastructure for the defense supply chain, delivered as Agent-as-a-Service. It measures your connected sources, regenerates your documentation each cycle, and indexes your recorded evidence against the assessment objectives. It does not assess you, and the SPRS figure it computes is a directional estimate against the DoD Assessment Methodology weights, not a score anyone else certifies. A Level 2 (Self) reassessment is your own, and you submit that score in SPRS. A Level 2 (C3PAO) reassessment is conducted by an authorized C3PAO, which submits the results through CMMC eMASS (32 CFR 170.17(a)(1)). Either way, your Affirming Official submits the affirmation in SPRS (32 CFR 170.22).
Start Sentinel
$11,940 per year, or $995 per month month-to-month. The $999 you paid for a CMMC Level 2 Readiness Snapshot credits toward your first Level 2 subscription invoice if you subscribe within 30 days after receiving its PDF, using the same billing email (Refund Policy).