↑ UPDATEStripe payments and the AI guide are now live. If you visited before and couldn't buy — welcome back.

Phase 1 Active CMMC self-assessment is now required in new DoD solicitations. What this means for you.
CMMC compliance · Small defense contractors

You can
handle this.
We'll show
you how.

CMMC doesn't have to mean a six-figure consulting bill and six months of confusion.

We built plain-language, step-by-step toolkits for small contractors — machine shops, electrical subs, logistics firms, IT service providers — who need to get compliant without shutting down the business to do it. Every control gets a plain-English translation, a list of exactly what to do, and how to document it.

See what's included Why this exists
UNIT 1
CYBER
✓ Start with a free scope triage — know which level applies to you before spending anything
✓ Every control explained in plain English — no cybersecurity background required
✓ Step-by-step AI guide walks you through enabling each control in the tools you already use
✓ Self-service, at your own pace — no consultant required to use this
UNIT 1
A Unit 1 Cyber product
Always Forward Manufacturing LLC

A cyber guy who
went into manufacturing
and couldn't look away.

I spent years in cybersecurity. Then I transitioned into manufacturing — which I love — and found a shop floor full of talented people doing real work for the DoD who had no idea what CMMC was, and no practical path to figure it out.

The guidance that exists was written for large prime contractors with dedicated IT teams and compliance budgets measured in six figures. It wasn't written for a 12-person machine shop where the owner is also the estimator, the floor supervisor, and the person who answers the phone.

"A machine shop owner shouldn't need a lawyer and a CISO to figure out if they need to turn on multi-factor authentication."

So I built Unit 1 Cyber. It's a set of workbooks that take every CMMC control and give you: what it actually says, what it means in plain English, what you need to do, and how to document that you did it.

It's not a replacement for a C3PAO assessment if your contracts require one. But it will get you from "I don't even know where to start" to "I know exactly what I have, what I need, and how to get there." That's worth something.

This is a side product of Always Forward Manufacturing — not a consulting firm, not a software platform. Just a practical toolkit from someone who's been on both sides of this.

The workbook series

Six workbooks.
One complete path.

Work through them in order, or start with WB1 free to find out which level applies to you. Each one builds on the last.

WB 01
Am I In Scope?

The starting point. Find out in 15 minutes whether you handle FCI, CUI, or both — and which CMMC level your business needs. Includes a decision-tree Excel tool.

↓ Free download
WB 02
Level 1 Compliance

All 15 FAR 52.204-21 controls, one per page. Official language, plain-English translation, action steps, evidence checklist. SPRS submission walkthrough included.

Level 1 Kit →
WB 03
Level 2 Gap Assessment

All 110 NIST SP 800-171 controls across 14 families. Current state assessment, required actions, evidence types, and prioritized remediation list.

Level 2 Kit →
WB 04
SSP Starter

A complete, fillable System Security Plan template — the most commonly missing document in Level 2 assessments. Sized for small business environments.

Level 2 Kit →
WB 05
POA&M + SPRS Calculator

Track remediation items and calculate your official SPRS score using the DoD's 110-point weighting methodology. Know your score before you submit.

Level 2 Kit →
WB 06
Pre-Assessment Checklist

Your go/no-go gate before submitting to SPRS or engaging a C3PAO. Documentation inventory, SPRS submission steps, affirmation requirements.

Level 2 Kit →
The AI implementation guide

Tell it the control.
Tell it your tools.
It walks you through it.

Enabling Conditional Access in Microsoft 365 is straightforward once you know where to look — but the first time, it's a maze. The AI guide takes a specific control and your specific setup, and gives you the exact steps to turn it on.

Available as a free downloadable prompt kit you use in your own Claude account, or as a guided experience here on the site.

Try the guide → ↓ Download prompt kit — Free

*Free to download. Requires a Claude account (claude.ai).
Full functionality recommended with a paid plan from $20/mo.

// Unit 1 Cyber — AI Implementation Guide
Optional: enter a control and your systems to pre-fill the guide.
Or just click Run guide to get started.
Control:
Systems:
Ready.
Pricing

Self-service pricing.
No consulting hours.

A Level 2 compliance engagement with a consultant runs $50,000–$150,000. These toolkits won't replace a C3PAO assessment — but they'll get you to the starting line for a fraction of that.

Always free
WB1 — Scope
Triage

Find out which CMMC level applies to your business before spending anything. Includes the Excel decision tool and plain-English definitions of FCI and CUI.

  • FCI & CUI plain-English definitions
  • Decision-tree Excel tool
  • CMMC level determination
  • What your next steps should be
Free
No account required
↓ Download WB1 — Free
FCI contractors
Level 1
Kit

Everything you need to achieve Level 1 compliance and submit your self-assessment to SPRS. Includes WB1 and WB2.

  • WB1 scope triage (included)
  • WB2 — all 15 FAR 52.204-21 controls
  • Evidence checklist per control
  • SPRS submission walkthrough
  • Excel compliance tracker
$499
$374 with qualifying discount
Buy Level 1 Kit
CUI contractors
Level 2
Full Kit

The complete 6-workbook series. Gap assessment through pre-assessment readiness checklist. Everything you need to prepare for Level 2.

  • WB1 through WB6 — complete series
  • All 110 NIST SP 800-171 controls
  • SSP starter template
  • POA&M tracker + SPRS calculator
  • Pre-assessment readiness checklist
$999
$749 with qualifying discount
Buy Level 2 Kit
Bundle: Level 1 + Level 2 Full Kit — $1,199 list / $899 with discount Buy bundle →

Also free: the AI implementation guide prompt kit* — take it to your own Claude instance and get step-by-step guidance on enabling any control.    *Requires a Claude account.

25% off
for those
who qualify.

One discount per order. Discounts don't stack. We operate on the honor system — select your category at checkout. We trust you.

Veteran-Owned Service-Disabled Veteran First Responders Woman-Owned (WOSB) Native American-Owned HUBZone Small Disadvantaged Business Fewer than 5 employees

This toolkit was built for the people who actually need it — small contractors holding up their end of the defense supply chain without the resources the big primes take for granted. The discount categories reflect that.

© 2026 Always Forward Manufacturing LLC — Unit 1 Cyber

Verify regulations for updates · Not legal advice

This toolkit is an educational and self-assessment tool. It does not constitute legal advice, cybersecurity consulting, or a guarantee of CMMC compliance. False certifications submitted to DoD may expose organizations and senior officials to False Claims Act liability. Consult qualified legal counsel before submitting any compliance certification. *AI prompt kit is free to download. Requires a Claude account (claude.ai). Full functionality recommended with a paid plan.