What is SpadeWRK?

SpadeWRK is a self-guided compliance readiness platform built for small and midsize organizations in the Defense Industrial Base (DIB). It walks a business through the requirements of a compliance framework in plain English, control by control, instead of leaving them to interpret official guidance or hire a consultant to do it for them.

Today, SpadeWRK covers CMMC Level 1 and Level 2, based on NIST SP 800-171. Support for SOC 2 and ISO 27001 is planned but not yet available.

How it works

Organizations move through five stages inside SpadeWRK: intake and scoping, gap assessment and evidence collection, remediation, document and audit-package preparation, and ongoing maintenance. Work done in each stage feeds directly into the documentation a business needs, including a System Security Plan (SSP) and Plan of Action and Milestones (POA&M) for CMMC and NIST SP 800-171.

Who it's for

SpadeWRK is built for DIB contractors and subcontractors who need to prepare for CMMC but don't have an in-house compliance team and can't justify the cost of a traditional consulting engagement.

What SpadeWRK is not

SpadeWRK is not a C3PAO (Certified Third-Party Assessment Organization) and does not perform CMMC certification or assessments. It helps an organization prepare its environment, documentation, and evidence for CMMC Level 1 self-assessment or CMMC Level 2 assessment. CMMC Level 2's third-party assessment requirement is currently paused while the Department of Defense reviews the program, so self-assessment is what's required today. Using SpadeWRK does not itself confer certification or guarantee an assessment outcome.

See pricing or frequently asked questions.