Skip to main content

AutoSAM™

by GovCertix

The diligence-of-record for defense supply chains

For defense primes & consultant firms

CMMC Phase 2 · Nov 2026

Required to verify.Impossible to look up.AutoSAM is proof you checked.

DoD requires you to verify each sub's CMMC status and provides no lookup to meet it. AutoSAM answers with a system of record: obligations derived from your live award portfolio, screening for every named sub with authoritative exclusion and registration data, and a defensible evidence trail that builds itself as you work.

Free exposure scan · No credit card · Independent service

Not affiliated with SAM.gov or the U.S. Government

Your award

Derived obligations

Each named sub

Proof you checked

Product preview (pre-release build)

Concept preview of the AutoSAM compliance dashboard: an A registration-health grade, a renews-in-142-days countdown ring, exclusions clear, and certification chips for 8(a), WOSB, HUBZone, and SDVOSB

We never touch your CUI. Contracts stay on your device. We record the diligence, not the artifact.

Built on authoritative SAM.gov data: exclusions, registration, FASCSA orders. Not CMMC status, which is self-attested by regulatory design (DoD CIO FAQ C-A4).

Your obligation

$45,000

covered-subcontract threshold that puts a FAR 9.405 exclusion-screening obligation on your network

Your deadline

Nov 2026

CMMC Phase 2 enforcement: the flow-down deadline your awards carry to every covered sub

Your exposure

23%

of federal contractors lapse their SAM.gov registration each year, including subs on active awards

One obligation engine

Award in. Obligations out. Evidence on file.

AutoSAM derives the exact CMMC, DFARS, FASCSA, exclusion, and small-business obligations each named sub inherits from your actual awards, then records the proof you checked.

1

Your award

2

Derived obligations

3

Each named sub

4

Proof you checked

Active awards

Early access

Assure

Catch the new exclusion, the lapsed registration, or the missing flow-down before DCMA does.

Every named sub is screened continuously against authoritative exclusion, FASCSA, and SAM registration data, and every check lands in the record as evidence.

Exclusion screen: clear

Beacon Ridge Systems LLC · logged 09:41

FASCSA order screen: clear

Crestline Avionics Corp · logged 10:15

SAM registration lapse

Harbor Point Fabrication · alert sent 12:06

CMMC L2 attestation captured

Veranda Microsystems · with provenance, 14:32

SAM registration renewal: healthy

Harbor Point Fabrication · re-checked 16:20

Illustrative record · fictional entities

Sought awards

In development

Pursue

The worst time to learn a teammate can’t meet CMMC L2 is after you’ve committed to the bid.

AutoSAM reads the solicitation, derives the real requirement set, and pre-screens which teammates can meet it while bid/no-bid is still open.

CMMC L2

DFARS 252.204-7012

FAR 52.204-25

Illustrative requirement set

The record

Early access

Prove

When someone asks for proof, it’s an export, not a project.

Every check, sub attestation, and sign-off is captured with provenance the moment it happens. Always be ready with the evidence log, audit trail, and ISR/SSR reporting at a moment’s notice.

Evidence log

Audit trail

ISR / SSR report

Export ready

Pick your starting point

Built for the people who own the obligation

Tell us who you are and jump to the section written for you.

$0

per sub

$0 per sub, always

Your subs participate for free

A compliance tool your subs have to pay for is a blocker. Every invited sub gets a free workspace for continuous attestation and registration health; the obligation owner pays, and subs never see a bill.

For consultant firms & RPOs

Take the 31st client. And the 50th.

What caps a firm’s client count is the recurring layer: screening, monitoring, and evidence upkeep, repeated for every client, every month. AutoSAM systematizes that layer, so the next client adds revenue without adding an analyst.

  • Every client’s subcontractor network, screening posture, and flow-down status on one console

  • Your monthly client report becomes “here’s what we caught for you,” with dated evidence

  • Remove the bottleneck. The 31st client is no longer the one you turn down

  • Referral-partner program for early firms, with revenue share

Concept preview of the AutoSAM multi-client console for consultant firms: 24 contractor clients with A to C registration-health grades and renewal statuses

Product preview (pre-release build)

For primes & teaming leads

Screen every sub.Prove every check.

Every covered subcontract over $45,000 carries a FAR 9.405 exclusion-screening obligation, and DFARS flow-downs add CMMC verification on top. A spreadsheet shows your conclusions. It doesn’t show your checks.

  • Authoritative FAR 9.405 exclusion and FASCSA screening, evidenced on every check

  • Sub-attested CMMC / SPRS captured with provenance across your subcontractor network

  • ISR and SSR reporting drafted from data you already collect

  • Severity-based alerts: a new debarment fires loudly

  • An audit trail organized the way DCMA inspects

Time savings are a bonus. The product is a system that turns every check into evidence.

Concept preview of AutoSAM subcontractor screening: six subcontractors with logged exclusion checks, one flagged for review, and a counter of 128 FAR 9.405 checks logged

Product preview (pre-release build)

Your subs participate free

Their C3PAO is months out. Your deadline isn’t.

Your subs pay nothing; the account that owns the obligation covers them. Invited subs attest CMMC readiness and keep their SAM registration healthy, so the posture you’re on the hook for stops living in email.

~98 authorized C3PAOs nationwide

Queues stretch into 2027

Phase 2 enforcement: November 2026

Concept preview of the AutoSAM CMMC readiness tracker for a subcontractor: 87 of 110 controls implemented, an upward SPRS score trajectory chart, a POA&M list, and a share-readiness-link button

Product preview (pre-release build)

  • Each sub’s POA&M progress across the 110 NIST 800-171 controls, self-reported with dates

  • SPRS score trajectory visible to your program team

  • A live readiness share link per sub. Retire the quarterly Word doc

AutoSAM is a CMMC readiness tracker, not a C3PAO, not an assessment, and not a compliance guarantee. It shows you where each sub stands while they wait in the assessment queue.

Network Exposure Scan

See your exposure before an auditor does.

Be among the first to scan your supply-chain exposure. Reserve your spot and your scan runs automatically at launch: your entity screened against live SAM.gov data, with flow-down exposure modeled on a representative sub network.

Early access. Reservations honored in order received. No credit card.

What your scan returns

  • Your entity screened against live SAM.gov data: exclusions, registration status, FASCSA orders

  • Flow-down exposure modeled on a representative sub network: the obligations your awards would carry to subs like yours

  • Built entirely from public data. Nothing to upload, nothing to install

Founding cohort · Pricing

Reserve now. Founding-cohort rates locked for 12 months.

No payment is collected today. The founding cohort is capped by our onboarding capacity at 12 accounts: 7 for Assure Prime I and 5 for Consultant/RPO.

7 · Assure Prime I

5 · Consultant/RPO

For small primes

Assure Prime I

7 founding seats

$299

/mo

Founding rate, locked for 12 months

or $2,997/yr, billed annually

$599/mo standard at launch

save $300/mo vs standard

Subs included

10, add more anytime

Screening

FAR 9.405 subcontractor

CMMC

Sub-attested, with provenance

Reporting

ISR / SSR-ready

No payment today. No card. Invitations go out in reservation order.

For Consultant Firms & RPOs

Consultant/RPO

5 founding seats

starts at

$749

/mo

Founding rate, locked for 12 months

or $7,497/yr, billed annually

$1,499/mo standard at launch

save $750/mo vs standard

Workspaces

Multi-client, one console

Billing

Per-client

Reporting

Branded

Evidence

Dated, ready for the prime

No payment today. No card. Invitations go out in reservation order.

Standard at launch

Assure Prime II

$1,199

/mo

Standard rate at launch. No founding allocation.

For mid-size primes. FAR 9.405 exclusion screening, sub-attested CMMC captured with provenance, severity-based alerts, and ISR/SSR-ready reporting. Includes 30 subs, with room to expand as your network grows.

No payment today. No card. Invitations go out in reservation order.

BEYOND THE TWELVE

The Design Partner Program

Up to 5 accounts

Prefer a guided pilot? We are accepting up to 5 design-partner accounts.

For invited subcontractors

Sub Access

$0

for invited subs

Your entity screened against live SAM.gov data: exclusions, registration status, FASCSA orders. No cost to subs. The obligation owner pays. Reserve the full Network Exposure Scan for your subcontractor network at the form below.

Founding rates for Assure Prime I and Consultant/RPO are locked for 12 months from account activation, then standard pricing applies. Standard rates shown take effect at general availability. Plans and features may evolve before launch. Each plan includes the number of subs shown; additional subs can be added at any time and are billed to the account owner, never to the sub.

1

Reserve your spot

Submit the form. It takes about a minute, no credit card. Your reservation sets your place in line.

2

Early access opens in waves

Invitations go out in reservation order as founding-cohort seats open. Your founding rate locks when your invitation converts to an active account.

3

Your scan runs at launch

Your scan runs automatically at launch: your entity screened against live SAM.gov data, with flow-down exposure modeled on a representative sub network. The 12-month founding-rate period begins at activation, not at reservation.

Reserve your Network Exposure Scan

Your scan runs automatically at launch. Founding-cohort invitations go out in reservation order as paid plans open.

7 prime workspaces · 5 consultant desks · invited in reservation order

Reserve your spot

Takes about a minute. Your spot is held in reservation order.

Straight answers

Questions we hear from primes and consultant firms

No catch. Reserving your Network Exposure Scan costs nothing and no credit card is collected today. After launch, a free sub tier remains and deeper features move to paid plans.

No, and neither can anyone else. There is no government lookup for a subcontractor’s CMMC status; it is self-attested by regulatory design (DoD CIO CMMC FAQ C-A4). AutoSAM captures each sub’s self-attestation with provenance and records your diligence: that you asked, what they sent, and when you evaluated it.

FAR 9.405-2 requires documented exclusion screening on covered subcontracts over $45,000, with proof that you looked. A spreadsheet shows your conclusions; it doesn’t show your checks. AutoSAM logs evidence on every screening so the audit trail exists before anyone asks for it.

No. Subs are never billed; the prime or consultant firm that owns the obligation pays. Every invited sub gets a free workspace for continuous attestation and registration health. Free participation is deliberate: a network that has to pay to comply is a network that won’t adopt.

No. Contract files are processed entirely in your browser; never transmitted to our servers. We never touch your CUI. Contracts stay on your device. We record the diligence, not the artifact.

No, and we won’t pretend it is. AutoSAM is a CMMC readiness tracker: sub-attested readiness, POA&M visibility, and SPRS score trajectory captured with provenance across your subcontractor network. It does not replace a C3PAO assessment, and it complements your consultant or GRC tooling rather than competing with it.

No. AutoSAM is an independent service and is not affiliated with or endorsed by SAM.gov, GSA, or the U.S. Government. Registering in SAM.gov is always free at sam.gov; we never charge for registration itself; we keep your network’s compliance posture provable.

Built for FAR / DFARS workflows
Section 508–minded, accessible design
SOC 2 Type II in progress
US-based
Contract files processed entirely in your browser, never transmitted to our servers
Public-record, non-CUI data only
DoD FAQ C-A4: primes must verify CMMC sub-readiness; no government lookup exists
info@autosam.iosales@autosam.ioaffiliates@autosam.ioPrivacy

AutoSAM™

by GovCertix

The diligence-of-record for defense supply chains

© 2026 AutoSAM. AutoSAM is an independent service and is not affiliated with, endorsed by, or sponsored by SAM.gov, the U.S. General Services Administration, or the U.S. Government. Registering in SAM.gov is always free at sam.gov.

AutoSAM works with public-record, non-CUI data only and is not FedRAMP authorized. AutoSAM is in pre-launch. Features, tiers, and pricing are subject to change before general availability.