What Totem Tech does

Totem Technologies, LLC (dba Totem Tech) is a privately held, veteran-owned small business founded in 2005 and headquartered in West Haven, Utah, that builds cybersecurity compliance management software and provides consulting services for organizations navigating CMMC, NIST 800-171, DFARS, and adjacent frameworks. The company's core product, the Totem CMMC Compliance Software, is a cloud-based platform for control status tracking, POA&M management, System Security Plan (SSP) development, incident response planning, CUI and hardware inventory, and roadmap tracking, with continuous feature releases since at least 2021 and the most recent v5.3 release adding NIST 800-171 Revision 3 support and a self-assessment questionnaire module.

In July 2025, Totem launched HRDN-IT, an on-premise Single PC CMMC Enclave available in three tiers ($6,495-$19,995/year) targeted at micro and small business defense contractors pursuing CMMC Level 2 compliance, replacing the now-sunsetted ZCaaS cloud enclave offering. The company monetizes through a diversified mix of annual software subscriptions, hardware-inclusive enclave contracts, one-time professional services (gap assessments, readiness reviews, policy development), and training/workshops, with publicly disclosed pricing ranging from $360 one-hour consultations to $21,200 full NIST 800-171/CMMC L2 gap assessments.

Totem sells primarily to small and mid-sized DoD contractors in the Defense Industrial Base that must comply with DFARS 252.204-7012, while also serving healthcare, education, federal and local government, utilities/critical infrastructure, and Canadian government contractor segments. Distribution is multi-channel: direct e-commerce via Stripe-enabled website checkout, a Trusted Partner Program for MSPs/MSSPs/vCISOs/consultants, an APEX Accelerator partnership for CMMC Level 1 Readiness Workshops, and online workshops delivered throughout the United States. The company operates additional offices in the Salt Lake City area and Juneau, Alaska, with documented reach into the Eastern Seaboard.

Name

Totem Tech

Legal name

Totem Technologies, LLC

Website

https://totem.tech

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

11–50 employees

Short description

Totem Tech is a veteran-owned small business that builds CMMC and NIST 800-171 compliance software (Totem CCM), on-premise CUI enclave hardware (HRDN-IT), and consulting services for small and micro-business DoD contractors required to comply with DFARS cybersecurity regulations.

Ownership category

akta.pro rank

Product category

Cybersecurity Compliance Software

NAICS

Computer Systems Design Services (541512), Custom Computer Programming Services (541511), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)

akta.pro primary industry

Continuous Controls Monitoring (CCM) (HDADAHAE)

Keywords

• CMMC compliance software
• NIST 800-171 compliance
• Cybersecurity consulting
• CUI enclave solutions
• DoD contractor compliance

Headquarters

HQ city

Ogden

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Supply Chain, Operations

Revenue model

1. Software Subscriptions (Totem™ CCM Tool): Annual subscription to Totem™ Cybersecurity Compliance Management tool with tiered levels (Essentials, Enhanced, Engaged) providing compliance documentation, assessment tracking, and artifact management capabilities.
2. HRDN-IT™ Hardware and Enclave Solutions: One-time hardware purchase plus annual subscription for single PC CMMC enclave solutions. Three tiers: Roll Your Own ($6,495/yr), Self-Managed ($9,995/yr), and Managed ($19,995/yr).
3. ZCaaS™ Secure CUI Enclave (Sunsetted): Monthly subscription cloud-based secure enclave for handling CUI. Single-User ($400/mo), Business Self-Managed ($1,300/mo), Business Compliance+ ($1,700/mo). Being discontinued in favor of HRDN-IT.
4. Professional Services - Gap Assessments: NIST SP 800-171/CMMC L2 Gap Assessment ($21,200), Readiness Review ($9,200), FAR 52.204-21/CMMC L1 Gap Assessment ($6,100), Totem Top 10 Gap Assessment ($17,500).
5. Training Services: CMMC Level 1 Readiness Workshop (variable pricing), User Cybersecurity Awareness Training ($1,620), Phishing Simulation ($1,000).
6. Consultation Services: One-Hour Consultation ($360), Half-Day Consultation ($1,500), Full-Day Consultation ($3,600).
7. CMMC Compliance Packages: CMMC Level 1 Compliance Package for mobile devices ($5,000/yr for 10 users), mobile and workstations ($7,000/yr for 10 users).

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels9 records

Core offering

Totem Tech develops and sells the Totem™ CMMC Compliance Software, a cloud-based documentation and planning platform for defense contractors pursuing NIST 800-171 and CMMC certification, along with the HRDN-IT™ Single PC CMMC Enclave hardware solution for secure on-premise CUI handling. The company also delivers cybersecurity consulting services including gap assessments, readiness reviews, policy development, and CMMC training workshops for small business DoD contractors, healthcare, education, and government organizations.

Product overview

Totem Tech offers a comprehensive portfolio of cybersecurity compliance products and services focused on CMMC, NIST 800-171, and DoD contractor requirements. The core product is the Totem™ CMMC Compliance Software—a cloud-based compliance documentation and planning platform that enables organizations to track control status, manage POA&Ms, build incident response plans, and perform self-assessments. This is complemented by the HRDN-IT™ Single PC CMMC Enclave (an on-premise CUI handling solution available in self-managed and fully managed tiers) and CMMC Level 1 compliance packages for mobile devices and workstations. The portfolio also includes consulting services (gap assessments, readiness reviews, policy development), training offerings (CMMC workshops, phishing simulations, cybersecurity awareness training), and the Totem Top 10™ methodology—a simplified subset of NIST 800-171 safeguards for organizations beginning their compliance journey. A Trusted Partner Program provides discounts for MSPs, MSSPs, and consultants serving defense contractors.

Differentiator

Problem solved

Functional benefit

Brands

• Totem™ CMMC Compliance Software: Trusted CMMC and NIST 800-171 compliance documentation and planning solution for defense contractors and their external service providers.
• HRDN-IT™ Single PC CMMC Enclave
• ZCaaS™ (Zero Client as a Service)
• Totem Top 10™
• Totem Top 10™ Gap Assessment

Products and services

• Totem™ CMMC Compliance Software Cloud-based CMMC and NIST 800-171 compliance documentation and planning solution for defense contractors and their external service providers. Includes control status tracking, POA&M management, incident response planning, roadmap module, CUI inventory, hardware inventory, risk assessment, and questionnaire-based self-assessment against CMMC Level 1 or Level 2 requirements.
• HRDN-IT™ Single PC CMMC Enclave On-premise CUI enclave solution for small business defense contractors pursuing NIST 800-171 and CMMC Level 2 compliance. Includes hardened PC, hardened router, FIPS 140-2 validated backup drive, and management options including fully managed day-to-day IT support, cybersecurity monitoring, incident response assistance, and C3PAO certification assessment support.
• NIST 800-171 / CMMC Gap Assessment and Policy Development Full security gap assessment service against NIST SP 800-171 and CMMC Level 2 standards, delivering a Security Assessment Report, System Security Plan (SSP), Plan of Actions and Milestones (POA&M), Risk Assessment, and other compliance artifacts.
• CMMC Readiness Training / Workshop Online three-week CMMC Level 1 or Level 2 Readiness Workshop delivered in cooperation with APEX Accelerator partners, covering FAR 52.204-21 basic protections, cybersecurity self-assessment, and CMMC reporting. Designed for small business Federal government contractors and their MSPs.
• NIST SP 800-171 rev 2 / CMMC L2 Gap Assessment Fixed-fee $21,200 full gap assessment against NIST SP 800-171 and CMMC Level 2 standards, including Security Assessment Report, SSP, POA&M, Risk Assessment, and other compliance artifacts, plus a Totem™ Enhanced annual subscription.
• NIST SP 800-171 rev 2 / CMMC L2 Readiness Review Fixed-fee $9,200 expert review of an organization's existing SSP, POA&M, and Incident Response Plan for coherency and artifact completeness, with identification of deficiencies for POA&M inclusion, plus a Totem™ Enhanced annual subscription.
• FAR 52.204-21 / CMMC L1 Gap Assessment Fixed-fee $6,100 full gap assessment against FAR 52.204-21 controls associated with CMMC Level 1, including Security Assessment Report, SSP, POA&M, and an Acceptable Use Policy, plus a Totem™ Essentials annual subscription.
• Totem Top 10™ Gap Assessment Fixed-fee $17,500 security assessment using the Totem Top 10 (TT10) foundational cybersecurity safeguards methodology that maps to CMMC L1 and L2, including a Totem™ Enhanced annual subscription.
• CMMC Level 1 Compliance Package (Mobile Devices Only) Annual $5,000 package for up to 10 users establishing a secure environment for handling Federal Contract Information on mobile devices, including mobile endpoint container/protection/scanning, Totem™ CCM subscription with CMMC Level 1 security plan, annual assessment and reporting support, and annual training.
• CMMC Level 1 Compliance Package (Mobile Devices and Workstations) Annual $7,000 package for up to 10 users establishing a secure FCI-handling environment across mobile devices and workstations, including endpoint container/protection/scanning, Totem™ CCM subscription, annual assessment support, and annual training.
• User Cybersecurity Awareness Training Fixed-fee $1,620 custom cybersecurity awareness training for staff with CUI access, including a live 1.5-hour training session, a recorded session for future use, and insider threat coverage.
• Phishing Simulation Fixed-fee $1,000 custom targeted email phishing simulation on up to 50 users, tracking click rate and time-to-click metrics, plus up to two live follow-up training sessions.
• Cybersecurity Consultation Services Cybersecurity consultation services priced at $360 for one hour, $1,500 for half-day, and $3,600 for full-day engagements to address unique organizational cybersecurity challenges.
• Facility-Related Control Systems (FRCS) Cybersecurity Services Cybersecurity services for Facility-Related Control Systems addressing FRCS cybersecurity requirements for organizations operating industrial control and building automation environments.

Quantifiable outcome

• Micro-businesses can achieve CMMC Level 2 compliance for under $1,000 per year using Totem's hardening guide approach
• +2 more outcomes

Named customers2 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature5 records

Partnerships

Four partnerships are on record, tiered core and minor.

• APEX AcceleratorscoreChannel Partner/ Reseller/ DistributorAPEX Accelerator partners collaborate with Totem to deliver CMMC Level 1 Readiness Workshops. Classes are held Monday with Q&A sessions on Friday over the course of 3 weeks, providing small business DoD contractors with foundational cybersecurity compliance training.
• MSPs, MSSPs, vCISOs, and ConsultantscoreChannel Partner/ Reseller/ DistributorTrusted Partner Program for managed service providers, managed security service providers, virtual CISOs, and cybersecurity consultants who help clients implement NIST 800-171/CMMC requirements. Partners receive discounts on Totem's CMMC tooling and training solutions.
• Reddit Community (r/TotemKnowledgeBase)minorOthersTotem hosts a Reddit community for knowledge sharing and support on CMMC compliance questions. Community members can access Q&A, best practices, and Totem product discussions.
• Keeper SecuritycoreTechnology or IntegrationKeeper Security's FIPS Validated, FedRAMP Moderate CUI SafeShare product is integrated into Totem's ZCaaS offerings for secure file sharing. Totem administers, supports, and monitors SafeShare tenants for up to 10 users. Also available as standalone 10-pack at $280/month.

Scale indicators4 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Pivot Point Security: CMMC and NIST 800-171 consulting practice focused on defense contractors, with recurring managed compliance support. Comparable to Totem's gap-assessment-and-policy offering and small-business DoD ICP orientation.
• Edwards Performance Solutions: CMMC Level 2 assessment prep, NIST 800-171 gap assessments, and managed compliance for the DIB. Closely aligned with Totem in customer (small defense contractors), regulatory scope, and services-led delivery.
• Kieri Solutions: Specialty CMMC/NIST 800-171 readiness consulting and software for small defense contractors. Direct overlap with Totem's niche SMB DoD focus and methodology-led service model.
• Summit 7 Systems: Specialty CMMC/NIST 800-171 managed services and compliance SaaS for the Defense Industrial Base. Closest comparable to Totem—both serve SMB and mid-market DoD contractors with consulting plus proprietary tooling and a Microsoft-heavy enclave/on-prem stack.
• Exostar: Secure collaboration platform purpose-built for the aerospace and defense supply chain, including CMMC-aligned offerings. Overlaps with Totem on DIB-targeted CUI/collab tooling and identity services.
• Redspin: One of the early CMMC-focused consultancies, providing assessments, advisory, and managed services to defense contractors. Comparable offering mix and regulatory framework alignment as Totem.
• PreVeil: Encrypted email and file sharing built specifically for CMMC and CUI handling in the Defense Industrial Base. Direct competitor in the secure CUI enclave and collaboration layer where Totem has HRDN-IT and ZCaaS.

Emerging players

• Vanta: Leading automated compliance/GRC platform that has added CMMC and NIST 800-171 support. Threatens to commoditize the self-assessment and control-monitoring layers where Totem competes, though with less deep DIB specialization.

Broad incumbents

• Schellman: Top-tier compliance advisory (CMMC, SOC 2, ISO 27001, HITRUST) covering defense, healthcare, and tech. Competes with Totem's professional services line for NIST 800-171 gap assessments and CMMC readiness engagements.
• Coalfire: Large cybersecurity advisory with an established CMMC practice serving defense contractors and federal agencies. Broader portfolio than Totem, but directly competes for CMMC assessment, advisory, and gap assessment engagements.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/totem_tech
• YouTubeyoutube.com/channel/UCYKT-JYV0jqkvxFp-yUTjwg
• Facebookfacebook.com/TotemTechnology
• LinkedInlinkedin.com/company/totem-tech

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Totem Tech