For small businesses and defense contractors

Cybersecurity help near you, even when budget is the blocker

Compare providers by city, learn what CMMC asks of you, or apply for an in-kind grant where an approved provider does the work at no cost to you.

Popular:Ashburn, VAArlington, VAWashington, DCAtlanta, GANew York, NY

Start where you are

Which of these sounds like you?

  • I need a provider

    Compare providers near me

    Browse the directory by city and service. Listings are not ranked, so you compare on the same questions.

    Open the directory
  • Budget is the blocker

    Apply for an in-kind grant

    Cyber Grants Alliance matches your business to a grant. An approved provider does the work, at no cost to you.

    Start the application
  • I work in the defense supply chain

    Get a CMMC gap assessment

    See where you stand against CMMC before an assessor does, through an in-kind gap assessment grant.

    See how it works

How to choose

How do you find a cybersecurity provider near you?

Four steps, in this order. Each takes a few minutes and makes the next one easier.

Read the full guide
Four steps to find a cybersecurity provider near youStep 1, write down what needs protecting. Step 2, check which rules apply to you. Step 3, shortlist two providers near you. Step 4, ask each one the same questions.1Write downwhat needsprotectingLaptops, customerrecords, email,contracts. A shortlist is enough.2Check whichrules apply toyouA defense contractpoints to CMMC. Amedical office pointsto HIPAA.3Shortlist twoproviders nearyouStart from your citypage or the providerdirectory. Listingsare not ranked.4Ask each onethe samequestionsWhat is included, howfast they respond, whodoes the work, and whothey can name as areference.Four steps to find a cybersecurity provider near youStep 1, write down what needs protecting. Step 2, check which rules apply to you. Step 3, shortlist two providers near you. Step 4, ask each one the same questions.1Write down what needsprotectingLaptops, customer records, email,contracts. A short list is enough.2Check which rules applyto youA defense contract points to CMMC. Amedical office points to HIPAA.3Shortlist two providersnear youStart from your city page or theprovider directory. Listings are notranked.4Ask each one the samequestionsWhat is included, how fast theyrespond, who does the work, and whothey can name as a reference.

Providers

Which cybersecurity providers are featured here?

The featured providers offer CMMC compliance, managed IT and cybersecurity services. Open a profile for services, locations and contact details.

All providers
  • Featured provider

    Capital Cyber

    Full Spectrum Cybersecurity Services

    Full spectrum cybersecurity services including CMMC compliance, managed IT, penetration testing, and vCSO services.

    • CMMC Compliance
    • Managed IT Services
    • Penetration Testing
    • vCSO Services
    View profile
  • CMMC specialist

    CMMC Ready Now

    Specialized CMMC Compliance Consulting

    Specialized CMMC compliance consulting to help defense contractors meet certification requirements and win federal contracts.

    • CMMC Gap Assessment
    • CMMC Certification Prep
    • System Security Plans
    • Policy Development
    View profile
  • Managed IT

    Telco United

    Cybersecurity and CMMC Compliance for Government Contractors

    Telco United helps defense and government contractors with CMMC compliance, cyber risk assessments, penetration testing, managed security and vCSO services.

    • CMMC Compliance
    • Cyber Risk Assessments
    • Penetration Testing
    • Managed Security
    View profile

CMMC, explained

Which CMMC level applies to you?

The level follows the information you handle. Your contract's clauses make the final call.

CMMC levels guide
The three CMMC levelsLevel 1, Foundational: for companies that handle Federal Contract Information, 15 requirements from FAR 52.204-21, checked by an annual self-assessment. Level 2, Advanced: for companies that handle Controlled Unclassified Information, 110 practices from NIST SP 800-171, met through a self-assessment or a third-party assessment depending on the contract. Level 3, Expert: for the most sensitive programs, more than 110 practices based on NIST SP 800-172, assessed by the government.1LEVEL 1, FOUNDATIONALYou handle FederalContract Information15 requirements from FAR52.204-21. You check your ownwork once a year.2LEVEL 2, ADVANCEDYou handle ControlledUnclassifiedInformation110 practices from NIST SP800-171. Self-assessment or athird-party assessor, dependingon the contract.3LEVEL 3, EXPERTYou work on the mostsensitive programsMore than 110 practices, basedon NIST SP 800-172. Thegovernment runs the assessment.The three CMMC levelsLevel 1, Foundational: for companies that handle Federal Contract Information, 15 requirements from FAR 52.204-21, checked by an annual self-assessment. Level 2, Advanced: for companies that handle Controlled Unclassified Information, 110 practices from NIST SP 800-171, met through a self-assessment or a third-party assessment depending on the contract. Level 3, Expert: for the most sensitive programs, more than 110 practices based on NIST SP 800-172, assessed by the government.1LEVEL 1, FOUNDATIONALYou handle FederalContract Information15 requirements from FAR 52.204-21.You check your own work once a year.2LEVEL 2, ADVANCEDYou handle ControlledUnclassified Information110 practices from NIST SP 800-171.Self-assessment or a third-partyassessor, depending on the contract.3LEVEL 3, EXPERTYou work on the mostsensitive programsMore than 110 practices, based on NISTSP 800-172. The government runs theassessment.
On July 13, 2026 the Department of Defense suspended CMMC Phase II. Source: DoD CIO, About CMMC.

In-kind grants

How does an in-kind cybersecurity grant work?

An in-kind grant is a service, not a payment to you. An approved provider does the work and you pay nothing for it.

Both grant paths
How an in-kind cybersecurity grant worksStep 1, you apply online. Step 2, Cyber Grants Alliance matches you to a grant. Step 3, an approved provider does the work. Step 4, you receive the results at no cost to you.1You applyonlineOne application withCyber Grants Alliance.It asks about yourbusiness and what youneed.2CGA matchesyou to a grantA reviewer fits yourbusiness to the grantthat suits it, such asa CMMC gap assessment.3An approvedprovider doesthe workThe service isdelivered in-kind, soa sponsor partnercovers the work andyou do not pay for it.4You receivethe resultsYou get what the grantcovers, such as aprioritized list ofgaps, at no cost toyou.How an in-kind cybersecurity grant worksStep 1, you apply online. Step 2, Cyber Grants Alliance matches you to a grant. Step 3, an approved provider does the work. Step 4, you receive the results at no cost to you.1You apply onlineOne application with Cyber GrantsAlliance. It asks about your businessand what you need.2CGA matches you to agrantA reviewer fits your business to thegrant that suits it, such as a CMMCgap assessment.3An approved providerdoes the workThe service is delivered in-kind, so asponsor partner covers the work andyou do not pay for it.4You receive the resultsYou get what the grant covers, such asa prioritized list of gaps, at no costto you.
Apply for an in-kind grant

Grants are delivered by Cyber Grants Alliance and its sponsor partners.

Learn

Read before you buy

Plain-language guides and dated posts. Every claim names its source.

All posts

Questions

What do people ask first?

How do I find a cybersecurity provider near me?

Open your city page or search the provider directory, shortlist two providers that serve your area, and ask each the same questions: what is included, how fast they respond to an incident, who does the work, and who they can name as a reference. Listings are not ranked.

Can a small business get cybersecurity help at no cost?

Yes, some options cost nothing. CISA offers no-cost Cyber Hygiene vulnerability scanning to U.S. public and private sector critical infrastructure organizations and keeps a list of no-cost services and tools. Eligible small businesses and defense contractors can also apply for Cyber Grants Alliance in-kind grants, delivered at no cost to them.

What does in-kind mean in a cybersecurity grant?

In-kind means the grant is a service, not a payment to you. An approved provider does the work, such as a CMMC gap assessment, and you do not pay for it.

Who needs CMMC?

Companies that handle Federal Contract Information or Controlled Unclassified Information under a Department of Defense contract. On July 13, 2026 DoD suspended CMMC Phase II, and Phase I self-assessments remain in place. Your contract's clauses decide what applies to you.

Does CybersecurityNearMe.ai rank or endorse providers?

No. Listings are not ranked, and we do not describe any provider as CMMC certified, because CMMC is a Department of Defense program that assesses defense contractors.

Ready to buy help

Talk to the team behind this directory

This directory is run by the Capital Cyber team. If you would rather skip the comparison, these two doors go straight to a person.

  • CMMC

    Capital Cyber Compliance

    A CMMC Level 2 gap assessment that scores all 110 NIST SP 800-171 controls against your environment and calculates your SPRS score.

    Book a CMMC gap assessment
  • Managed IT and security

    Capital Cyber

    Managed IT and managed security for commercial and government clients, from Leesburg, Virginia.

    Talk to Capital Cyber

Last reviewed:

Ready to close your cybersecurity gap?

Start with a grant application if budget is the blocker, or talk to a specialist if you are ready to buy.