Certification is a point in time. Your environment is not. Between your assessment and your reassessment, people change roles, a policy gets relaxed for a project, a bucket gets opened for a vendor, and the evidence from your last assessment stops describing the environment you are actually running. Sentinel is the tier for the already-affirmed or already-certified contractor: it keeps measuring what your connected sources can observe, keeps the evidence current and records drift, so reassessment starts from a known posture.
What Sentinel delivers each cycle
- Read-only re-scans of every connected cloud about every seven days. AWS, Azure, Microsoft 365, Google Workspace, Okta or CrowdStrike, pulled with read-only permissions. Commercial tenants only. Configuration metadata only. No file contents, no CUI ingestion. You can revoke any connector at any time by removing the role, app or token.
- Connected-cloud evidence refreshed every cycle, mapped to the NIST 800-171A assessment objectives, each measured finding stored with an excerpt of the API response behind it and its SHA-256 hash, and an append-only audit trail enforced at the database.
- A Level 2 readiness report PDF every 30 days for your board or your prime, showing the posture recorded that cycle rather than where it stood on assessment day.
- The base document set every 30 days: System Security Plan, POA&M, CUI scoping package, Customer Responsibility Matrix and Evidence Library Index, regenerated from what is recorded that cycle.
- Drift flagged between assessments. Each re-scan of your connected sources is compared with the prior posture snapshot, and any control that regressed is listed in your workspace, so a change shows up between cycles instead of at reassessment.
Sentinel or a readiness tier?
Sentinel assumes the work is already done. If you have not been assessed yet, the readiness tiers are the right starting point.
- Sentinel, $11,940 a year. You already hold a Level 2 status, Self or C3PAO, and want the evidence refreshed until the next affirmation or reassessment.
- Standing, $8,340 a year: refreshed every 90 days for a small contractor with no external clock forcing the pace.
- Garrison, $17,940 a year: the same six-document base set every 60 days when a prime is asking questions.
- Standard, $29,940 a year: refreshed every 30 days on a roughly 90-day path to a C3PAO date.
Where the boundary sits
Sentinel is readiness Agent-as-a-Service. It measures your connected sources, regenerates your documentation each cycle, and indexes your recorded evidence against the assessment objectives. It does not assess you, and the SPRS figure it computes is a directional estimate against the DoD Assessment Methodology weights, not a score anyone else certifies. A Level 2 (Self) reassessment is your own, and you submit that score in SPRS. A Level 2 (C3PAO) reassessment is conducted by an authorized C3PAO, which submits the results through CMMC eMASS (32 CFR 170.17(a)(1)). Either way, your Affirming Official submits the affirmation in SPRS (32 CFR 170.22).
Start Sentinel
$11,940 per year, or $995 per month month-to-month. The $999 you paid for a CMMC Level 2 Readiness Snapshot credits toward your first Level 2 subscription invoice if you subscribe within 30 days after receiving its PDF, using the same billing email (Refund Policy).