Directory of CMMC Certified Managed Service Providers and Managed Security Service Providers

This directory of CMMC certified managed service providers and managed security service providers is maintained by MSPs for the Protection of Critical Infrastructure as a service to the community. This directory is open to all qualified companies and no fees are charged. This directory provides Organizations Seeking Assessment with a reliable way to identify companies providing managed services aligned with CMMC and NIST SP 800-171, as evidenced by their CMMC certification status.

This listing has been validated by the MSPs for the Protection of Critical Infrastructure with the C3PAO that assessed the ESP and awarded the CMMC Level 2 Assessment Certification. Please contact each provider directly to obtain their Shared Responsibility Matrix, which will demonstrate the scope of services that have been assessed for NIST 800-171 compliance.

ESP DBA Name	ESP Legal Name	Date CMMC L2 Assessment Certified	Website URL
Aethon Security	Aethon Security Consulting, LLC	3/07/2025	www.aethonsecurity.com
Atomus	Atomus Corporation	4/14/2025	www.atomuscyber.com
Axiom	Innovative Technology Team	3/12/2025	www.axiom.tech
C3 Integrated Solutions	C3 Integrated Solutions, LLC	3/08/2025	www.c3isit.com
CorpInfoTech	Corporate Information Technologies	3/07/2025	www.corp-infotech.com
Cuick Trac by Beryllium InfoSec	Beryllium InfoSec, Inc.	4/18/2025	www.CuickTrac.com
ISI	ISI Enterprises	3/11/2025	www.isidefense.com
KAMIND IT	KAMIND IT., INC.	3/07/2025	www.kamind.com
KTL Solutions	KTL Solutions, Inc.	4/02/2025	www.ktlsolutions.com
MAD Security	MAD Security, LLC	3/28/2025	www.madsecurity.com
MNS Group	MNSG Acquisition Company LLC	3/07/2025	www.mnsgroup.com
MX2 Technology	MX2 Technology, Inc.	4/24/2025	www.mx2technology.com
NeoSystems	NeoSystems LLC	3/21/2025	www.neosystemscorp.com
OSIbeyond	OSIbeyond LLC	4/9/2025	www.osibeyond.com
Point North Networks	Point North Networks	6/20/2025	www.pointnorthnetworks.com
Resilient IT	Resilient IT	3/07/2025	www.resilientit.us
Sentinel Blue	Sentinel Blue	3/07/2025	www.sentinelblue.com
SNC	Sierra Nevada Company, LLC	3/07/2025	www.sncorp.com
SoundWay	SoundWay Consulting, Inc.	4/21/2025	www.soundwayconsulting.com
Summit 7	Summit 7 Systems	3/07/2025	www.summit7.us
TechAxia	TechAxia LLC	5/25/2025	www.techaxia.com

Criteria for inclusion:
MSP Collective will independently validate that each of the listed companies has met the following criteria:
-The company must offer IT and/or cybersecurity services that (a) meet the definition of an External Service Provider (ESP) in the CMMC Final Rule AND (b) do not meet the definition of a Cloud Service Provider (CSP) that processes, stores, or transmits CUI.
-The company must have achieved a CMMC status of Final Level 2 (C3PAO) or Final Level 3 (DIBCAC) for a CMMC Assessment Scope that includes these services, as evidenced by a service description and customer responsibility matrix (CRM) confirmed by the assessing C3PAO.
New Application Data:

-CMMC Status (Level 2 or Level 3 certified), description of managed services included in the assessment scope, attestation that the services meet the above criteria, and that the CRM and service description are included in the assessment scope. MSP Collective will validate the above with the C3PAO.