Kieri Solutions

What Kieri Solutions does

Kieri Solutions LLC is a privately held, Woman-Owned Small Business founded in 2015 by Amira Armond, a former U.S. Navy and DISA cybersecurity professional. The firm, headquartered in Woodbine, Maryland, specializes in CMMC (Cybersecurity Maturity Model Certification) Level 2 compliance consulting and assessment services for U.S. defense contractors. It is one of only a handful of organizations nationally authorized by the Cyber-AB as a Certified Third Party Assessment Organization (C3PAO) permitted to issue official CMMC Level 2 certifications.

The company's core offering is a four-part product suite: (1) Kieri Compliance Documentation (KCD), pre-written policies, procedures, System Security Plans, and training content covering all 110 NIST SP 800-171 controls and 320 assessment objectives; (2) Kieri Reference Architecture (KRA), a Microsoft 365 GCC-High network blueprint including PowerShell scripts, baseline configurations, and technician implementation procedures; (3) CMMC Gap Analysis against all 110 controls; and (4) formal CMMC Level 2 assessment services delivered by W-2 certified assessors (not subcontractors) averaging 21 years of cybersecurity experience. All four products were battle-tested through Kieri's own successful DIBCAC assessment and have produced multiple perfect 110-score client certifications.

Kieri's business model combines productized one-time license revenue (KCD and KRA, with 12 months of free regulatory updates) with firm fixed-price professional services for gap analyses and assessments. Customers are predominantly small and mid-sized defense contractors (50-1,000 users) across defense, manufacturing, construction, AEC, and research sectors, with the company maintaining strict ethical separation between its consulting and assessment practices. As of 2026, 600+ organizations use the KCD product and 50+ CMMC assessments have been completed since CMMC went live; revenue is not publicly disclosed. The company navigated the July 2026 suspension of CMMC Phase 2 by the Department of War, continuing service delivery under the existing 32 CFR Part 170 framework.

Name

Kieri Solutions

Legal name

Kieri Solutions LLC

Website

https://www.kieri.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

Kieri Solutions is a Woman-Owned Small Business and Cyber-AB authorized C3PAO that provides CMMC Level 2 compliance documentation, reference architecture, gap analysis, and certification assessment services to U.S. defense contractors, primarily small and mid-sized organizations with 50-1,000 users.

Ownership category

akta.pro rank

Headquarters

HQ city

Woodbine

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Kieri Compliance Documentation (KCD) Licensing: One-time license fee for lifetime usage of documentation with 12 months of free regulatory updates. Includes complete policy and procedure library, System Security Plan with examples, 40+ hours of training videos, implementation templates and forms, and three expert consultation sessions. No recurring fees, no per-user charges.
2. Kieri Reference Architecture (KRA) Licensing: Lifetime access to all architecture documentation and implementation procedures with future updates included. One-time licensing fee for network architecture diagrams, security baseline configurations, PowerShell scripts, technician implementation procedures, system documentation templates, and validation checklists.
3. CMMC Assessment Services: Firm fixed-price quotes for formal CMMC Level 2 assessment. Custom pricing based on organization size, system architecture, and implementation maturity. Includes pre-assessment readiness verification, technical validation, staff interviews, post-assessment remediation close-out, and certification issuance.
4. Gap Analysis and Consulting Services: Fixed-fee gap analysis quotes scoped to environment size and complexity. Consulting engagements optionally offered as a 25-hour package where certified assessors work through each document line-by-line with clients. Remediation roadmap and timeline estimates included.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels8 records

Core offering

Kieri Solutions provides CMMC Level 2 compliance solutions for U.S. defense contractors, including pre-written compliance documentation (KCD), reference architecture blueprints for Microsoft 365 GCC-High environments (KRA), gap analysis services, and official CMMC Level 2 certification assessments as an authorized C3PAO. The company is one of only a handful of organizations nationwide authorized to conduct formal CMMC assessments and issue certifications.

Product overview

Kieri Solutions offers a suite of CMMC Level 2 compliance solutions for defense contractors. The core portfolio consists of four interconnected products: Kieri Compliance Documentation (KCD) providing pre-written policies and procedures; Kieri Reference Architecture (KRA) offering technical blueprints for Microsoft 365 GCC-High environments; CMMC Gap Analysis for evaluating compliance status; and Assessment Services for official CMMC Level 2 certification. The company also provides compliance consulting services. All solutions are designed for organizations with 50-1,000 users and are battle-tested through Kieri's own successful CMMC Level 2 assessment with DIBCAC.

Differentiator

Problem solved

Functional benefit

Brands

• Kieri Compliance Documentation (KCD): Pre-written compliance documentation covering all 110 NIST SP 800-171 controls, based on documentation that passed CMMC Level 2 assessment. Includes policy library, System Security Plan, training videos, procedures, and implementation templates.
• Kieri Reference Architecture (KRA)

Products and services

• Kieri Compliance Documentation (KCD) Pre-written policies, procedures, and System Security Plans (SSPs) covering all 110 NIST SP 800-171 controls and 320 assessment objectives. Based on documentation that passed Kieri's own CMMC Level 2 assessment with DIBCAC. Includes a complete policy and procedure library, SSP with real implementation examples, 40+ hours of training videos, implementation templates, and three expert consultation sessions. Sold as a one-time license with lifetime usage and 12 months of free regulatory updates. Designed for U.S. defense contractors with 50-1,000 users needing CMMC Level 2 certification.
• Kieri Reference Architecture (KRA) Complete Microsoft 365 GCC-High architecture blueprint with network diagrams, security baseline configurations, PowerShell configuration scripts, step-by-step technician implementation procedures, system documentation templates, and validation checklists. Designed for CUI, ITAR, and CMMC Level 2 compliance, and built on infrastructure that passed Kieri's own CMMC Level 2 assessment with DIBCAC. Targeted at organizations with 50-500 users that can be managed with part-time IT support. Sold as a one-time license with lifetime access and future updates included.
• CMMC Gap Analysis Comprehensive evaluation of compliance status against all 110 NIST SP 800-171 requirements, including documentation review, technical review, process evaluation, evidence analysis, scoping guidance, cloud vendor evaluation, CUI data flow review, and prioritized findings. Delivered with a formal assessment-ready report listing every assessment objective and whether each is met or other than met, with detailed assessor notes. Sold as a fixed-fee professional service scoped to environment size and complexity, with optional follow-up consulting, including a 25-hour customization package.
• CMMC Assessment Services Official CMMC Level 2 certification assessment conducted by an authorized C3PAO (Kieri Solutions). Includes pre-assessment readiness verification, mock assessment, formal four-day on-site assessment, evidence review, technical testing, staff interviews, post-assessment remediation close-out (up to 4 hours), and official certification issuance with Letter of Attestation. Assessment teams are Kieri employees with 21 years of average cybersecurity experience. Sold as a firm fixed-price custom quote based on organization size, system architecture, and implementation maturity. Kieri maintains strict separation between consulting and assessment services to avoid conflicts of interest.
• Compliance Consulting Expert consulting from certified CMMC assessors for building CMMC compliance programs, training teams, and guiding organizations through the CMMC certification process. Includes consulting engagements offered as a 25-hour package where certified assessors work through each document line-by-line with clients, and remediation roadmap and timeline estimates. For defense contractors seeking CMMC Level 2 certification.

Quantifiable outcome

• 50+ CMMC assessments completed since CMMC went live
• +8 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Three partnerships are on record, tiered supporting.

• SentinelEdge (MSP for Crux Solutions)supportingImplementation/ SI/ Consulting PartnerSentinelEdge served as the MSP partner for Crux Solutions (a Kieri KCD client), providing day-to-day IT support while Crux built and owned its own compliance program. Crux strategically kept SentinelEdge in a supporting role outside the audit scope.
• PreveilsupportingTechnology or IntegrationPreveil (a FedRAMP Moderate equivalent platform) was used by Crux Solutions as part of their custom compliant enclave built alongside the KCD. KRA and KCD are technology-agnostic and support custom architectures.
• Autodesk for Government (AFG)supportingTechnology or IntegrationCrux Solutions used Autodesk for Government (AFG) for Revit workflows as part of their custom compliant enclave. KCD's technology-agnostic design allowed Crux to adapt documentation to this non-standard Microsoft 365 GCC-High architecture.

Scale indicators13 records

Recent moves6 records

Expansion highlights6 records

Others

• Microsoft (GCC-High / Defender for Government): Underlying infrastructure provider for Kieri's KRA product; Microsoft 365 GCC-High is the platform of choice for CMMC Level 2 environments Kieri designs and documents. Indirect relationship — Microsoft sets the platform while Kieri provides the CMMC-specific reference architecture, documentation, and assessment overlay.

Direct peers

• Cybersec Investments: CMMC-focused consulting and assessment firm serving defense industrial base customers. Direct competitor with overlapping SMB/mid-market defense contractor focus and similar compliance documentation and assessment service offerings.
• Redspin: Authorized C3PAO providing CMMC Level 2 assessments and cybersecurity consulting to defense industrial base contractors. Most direct competitor in the CMMC assessment and consulting market, serving overlapping SMB and mid-market defense contractor customers with similar service lines.
• Summit 7 Systems: CMMC compliance specialist serving the Defense Industrial Base, offering managed compliance services, Microsoft 365 GCC-High implementation, and pre-assessment readiness services. Direct competitor with overlapping target customers and similar Microsoft-centric reference architectures.
• Exostar: Secure collaboration and compliance platform serving the Defense Industrial Base, including CMMC-aligned identity, access, and information-sharing solutions. Overlaps with Kieri's CMMC focus on DIB customers, though Exostar's offering is more platform-oriented than documentation/assessment-focused.
• Edafio Technology Partners: Managed IT and cybersecurity provider serving defense contractors with CMMC readiness and compliance consulting. Direct competitor in the SMB/mid-market defense contractor segment with overlapping Microsoft 365 GCC-High implementation and CMMC readiness offerings.

Broad incumbents

• Schellman: Top-tier compliance and certification firm offering CMMC assessments alongside FedRAMP, SOC, ISO, and other attestation services. Authorized C3PAO that competes with Kieri for CMMC assessment engagements while serving a broader multi-framework compliance client base.
• Coalfire: Large cybersecurity advisory firm offering FedRAMP, CMMC, PCI, and broader compliance services to enterprises and government contractors. Operates at much larger scale than Kieri with a broader portfolio, including CMMC advisory and assessment support for enterprise defense customers.
• Optiv: Broad cybersecurity solutions integrator offering advisory, managed security, and CMMC-related compliance services to enterprise customers including defense contractors. Larger and more diversified than Kieri, with CMMC as one offering among many.

Emerging players

• Preveil: FedRAMP Moderate-equivalent encrypted email and file-sharing platform commonly used in CMMC-compliant enclaves, including by Kieri customers like Crux Solutions. Technology partner and complementary rather than direct competitor — KRA/KCD are technology-agnostic and support Preveil-based architectures.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@kierilf
• LinkedInlinkedin.com/company/kieri-solutions

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kieri Solutions