CMMC Level 1
What a CMMC Level 1 Self-Assessment Actually Costs
The real cost of CMMC Level 1. The DoD's own estimate, why there is no assessor fee, and why the eye-watering quotes you have seen are usually for Level 2.
Search for what CMMC costs and the numbers are terrifying. Tens of thousands of dollars, six-figure quotes, a startup watching its runway disappear. Then you remember you only need Level 1, and it is hard to tell which of those numbers apply to you. Almost none of them do. Here is what Level 1 actually costs.
The short version. There is no third-party assessor fee at Level 1, because Level 1 is a self-assessment. The DoD's own published estimate for the annual effort is $5,977, a labor estimate rather than a product fee. The huge quotes you see are almost always for Level 2, which is a different and heavier standard.
Why Level 1 Has No Assessor Fee
The single biggest cost in CMMC is usually the third-party assessment. At Level 1 there is no third party. You assess yourself, and a senior official at your company affirms the result in SPRS. No assessor books time, no C3PAO sends an invoice, and there is no certification body to pay.
That removes the largest line item before you start. What is left is your time, and whatever tooling you use to stay organized and keep the record.
The DoD's Own Estimate
You do not have to guess at the number. In its 2024 rule, the DoD published its own estimate for the burden of a Level 1 self-assessment, and it is $5,977 per year. That figure covers the assessment, reporting it to SPRS, and the affirmation, not fixing any gaps you find. It is labor, a mix of your own team's time and any outside help, not a product license.
Treat that as a planning anchor, not a bill. A supplier with basic IT already in place can do most of the work in house rather than pay an outside provider, which is how real out-of-pocket cost comes in well under the estimate.
Why the Scary Numbers Are Usually Level 2
The large quotes that circulate are real, but most of them price Level 2, which protects CUI and requires meeting 110 controls, often with a third-party assessment, remediation work, and specialized tooling. That is a different world from Level 1.
A few are Level 1 work marked up far beyond what it warrants. Suppliers have shared quotes in the tens of thousands of dollars for Level 1 and been told by the wider community that the pricing was absurd. If a Level 1 quote looks like a Level 2 quote, it is worth asking exactly what is being priced. Handling FCI only points to Level 1, and Level 1 does not carry the assessor and remediation costs that drive the larger numbers.
The One Line Item You Actually Choose
The honest tooling cost at Level 1 is what you spend to stay organized and keep a defensible record. AssessrLog is built for exactly that. It is the system of record where your Level 1 self-assessment lives, so your determinations and evidence stay in one place year over year rather than scattered across spreadsheets and drives.
Our price is public and our checkout is self-serve. There is no demo gate and no sales call to see it. The Practitioner plan is straightforward, and you can see the current number on the pricing page.
Frequently Asked Questions
How much does CMMC Level 1 cost? There is no assessor fee, because it is a self-assessment. The DoD estimates the annual effort at $5,977, covering the assessment, reporting, and affirmation. Your real out-of-pocket cost is mainly your own team's time plus tooling to stay organized.
Do I have to pay a C3PAO or assessor for Level 1? No. Third-party assessors apply to Level 2 and CUI. Level 1 is self-assessed and self-affirmed.
Why are some CMMC quotes so high? Most high quotes reflect Level 2, which requires 110 controls and often a third-party assessment. Some are Level 1 work priced far above what it warrants. Level 1 itself does not carry assessor costs.
Is there a cheaper way than a consultant? Level 1 is designed to be self-serviceable. Many suppliers do it themselves with a tool to keep the record, rather than paying a consultant to do work they can do in-house.
Does AssessrLog publish its price? Yes. The price is public and checkout is self-serve. See the pricing page for the current plan.