Imprimis
Imprimis is a Colorado Springs-based cybersecurity and space technology company that provides CMMC/NIST compliance software (i2ACT), professional services, MSSP offerings, and channel programs to Defense Industrial Base contractors, government agencies, and commercial SMBs.
- Company typePrivate
- Founded2004
- HeadquartersColorado Springs, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Imprimis does
Imprimis is a private cybersecurity and space technology company headquartered in Colorado Springs, Colorado, founded in 2004 and operating as a subsidiary of i2M Corporation. The company serves the Defense Industrial Base (DIB), federal and state government agencies, commercial small and mid-sized businesses, and universities. Its primary operating focus is cybersecurity compliance, with a secondary space-technology line run through a sister subsidiary, i2 Strategic Services, LLC, which supports the U.S. Air Force Academy on space-related programs.
The company's flagship product is i2ACT (Imprimis Assessment and Compliance Tool), a software platform purpose-built for achieving and maintaining compliance with CMMC, NIST 800-171, NIST 800-53, and the NIST Cybersecurity Framework. i2ACT ships with 400+ pre-loaded Rapid Assessment Modules (RAMs), automates evidence collection and gap analysis, and produces remediation guidance. The platform is sold across multiple tiers corresponding to CMMC maturity levels. Imprimis also operates i2 Strategic Services, LLC, providing space technology capabilities to the U.S. Air Force Academy, which gives the firm a credible defense/aerospace heritage beyond pure commercial cybersecurity work.
Imprimis generates revenue through a mix of one-time software licenses (priced from $495 for Level 1 to $2,295+ for Level 2), CMMC readiness and remediation professional services, managed security service provider (MSSP) engagements, and channel sales via the i2Sentinel Partners program targeting managed service providers that serve SMB DIB contractors. The company is bootstrapped (no disclosed funding rounds), with a headcount in the 11–50 range, and has shown recent offensive activity including the i2ACT 4.0 release and a website repositioning aligned to CMMC 2.0.
Imprimis firmographics
Firmographics- Name
- Imprimis
- Legal name
- Imprimis, Inc.
- Website
- https://imprimis-inc.com
- Company type
- Private
- Founded year
- 2004
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Imprimis is a Colorado Springs-based cybersecurity and space technology company that provides CMMC/NIST compliance software (i2ACT), professional services, MSSP offerings, and channel programs to Defense Industrial Base contractors, government agencies, and commercial SMBs.
- Ownership category
- akta.pro rank
Imprimis industry classification
Industry- Product category
- Cybersecurity Compliance Services
- NAICS
- Other Scientific and Technical Consulting Services (54169), Security Systems Services (except Locksmiths) (561621)
- akta.pro primary industry
- Cybersecurity & Identity Consulting (BPAHAEAG)
Keywords
Where Imprimis is headquartered
LocationHeadquarters
- HQ city
- Colorado Springs
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Imprimis business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Supply Chain
Revenue model
- i2ACT Software Tool Licensing: Sale of proprietary on-premise cybersecurity assessment and compliance software. Version 4.0 offers three tiered editions: i2ACT FAR/FCI CMMC Level 1 ($495 annual self-assessment), i2ACT DFARS CMMC Level 2 (starting $2,295), and i2ACT DFARS CMMC Level 3 (pricing TBD). Additional upsell includes 400+ pre-built Remediation Action Milestones (RAMs) as an upgrade. The tool can reduce administrative burden by up to 50%.
- Cybersecurity Professional Services: End-to-end compliance services including initial gap analysis, in-depth assessment with SPRS scoring, network architecture design, IT remediation (practical, logical, and physical), documentation package creation, and ongoing sustainment program design. Services are delivered remotely, on customer premises, or hybrid, through the Cyber Compliance Center in Colorado Springs.
- i2Sentinel Partners Reseller Revenue: Revenue generated through the i2Sentinel Partners MSP channel program, where Managed Service Providers resell Imprimis products at a discount, expanding the company's reach into the DIB supply chain. Partners gain access to the full Imprimis product and service portfolio including the i2ACT tool, vulnerability management, MDR, incident response, and security training.
- Managed Security Services (MSSP): Imprimis operates as a Managed Security Services Provider (MSSP) offering continuous sustainment services including endpoint protection, multifactor authentication, remote monitoring and management, vulnerability scanning, GCCH maintenance, SIEM, SASE, training, and backup and recovery for DoD contractors and commercial clients.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | i2ACT FAR | FCI CMMC Level 1 — Self-Assessment Edition for organizations handling Federal Contract Information. Covers 17 basic safeguarding practices from FAR 52.204-21 with annual self-assessments and senior official affirmations. |
| One time/ perpetual license | Pay-as-you-go | i2ACT DFARS CMMC Level 2 — Full compliance assessment tool for contractors handling Controlled Unclassified Information (CUI). Includes automated mapping of all 110 NIST SP 800-171 controls to CMMC Level 2, integrated artifacts of evidence process, built-in Auditor Guides, comprehensive Resource Library, and remediation task association feature. |
| Subscription | Multi-year contract | i2ACT DFARS CMMC Level 3 — Designed for organizations supporting high-priority DoD programs. Incorporates NIST SP 800-172 enhanced requirements and prepares contractors for government-led DIBCAC assessments and APT protection. |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels7 records
Imprimis product offering
Product offeringCore offering
Imprimis sells a proprietary cybersecurity compliance software platform (i2ACT) and related professional services designed to help DoD contractors and Defense Industrial Base companies achieve and maintain NIST 800-171, NIST 800-172, and CMMC Levels 1-3 compliance. The i2ACT tool is offered in three level-specific editions and is supported by managed security services, channel partners, and a Cyber Compliance Center.
Product overview
Imprimis offers a portfolio of cybersecurity compliance products and services centered on its proprietary i2ACT Assessment and Compliance Software Tool, which is the core platform supporting NIST 800-171, NIST 800-172, and CMMC Levels 1-3 assessments. The tool is offered in three modular editions tailored to different compliance levels (FAR/FCI CMMC Level 1, DFARS CMMC Level 2, DFARS CMMC Level 3). Supporting the core tool are the IC2E cybersecurity framework, i2Portal secure customer portal, and various professional services including i2CyberStart (commercial compliance), i2CyberBuild (DoD remediation), i2Assess, i2ExpressDocs, i2Sustain, and i2Consult. The company also operates a Cyber Compliance Center in Colorado Springs and runs the Imprimis Insider educational program. The i2Sentinel Partners program enables MSPs to resell Imprimis products. The entire suite is backed by over a decade of practical assessment and compliance experience.
Differentiator
Problem solved
Functional benefit
Brands
- i2ACT: Proprietary cybersecurity assessment and compliance software tool for NIST 800-171, NIST 800-172, and CMMC Levels 1-3 assessments
- IC2E
- i2Portal
- i2Sentinel Partners
- i2CyberStart
- i2CyberBuild
- i2Assess
- i2ExpressDocs
- i2Sustain
- i2Consult
- i2Access
Products and services
- i2ACT Assessment and Compliance Software Tool A full-featured on-premise cybersecurity assessment and compliance software tool supporting NIST 800-171, NIST 800-172, and CMMC Levels 1 through 3 for organizations handling Controlled Unclassified Information (CUI). Version 4.0 offers modular level-specific editions (Level 1 at $495, Level 2 starting at $2,295, Level 3 pricing TBD), with integrated evidence management, real-time SPRS scoring, automated report generation, and 400+ pre-built Remediation Action Milestones. It can reduce administrative burden by up to 50%.
- IC2E Cybersecurity Compliance Essentials Imprimis Cybersecurity Compliance Essentials (IC2E) is a unified four-pillar cybersecurity framework (physical, procedural, logical, and transformational) that transcends piecemeal security models and is embedded across the Imprimis product suite including i2CyberStart. It is intended for organizations seeking a streamlined, holistic approach to cybersecurity governance.
- i2Portal Secure Customer Portal A secure, 2FA-protected, 256-bit encrypted online communication and collaboration space for Imprimis clients to manage tasks, track compliance progress, submit support tickets, and access documentation. Each client sees only their own data, and the portal functions as an audit-ready evidence vault for DoD contractors and MSP channel partners.
- i2CyberStart Commercial Cybersecurity Compliance solution tailored for small businesses utilizing industry standard cybersecurity frameworks (NIST or CSF). Incorporates IC2E fundamentals with customized assessment tools, best practices, and prepared documentation to help small businesses achieve baseline cybersecurity readiness.
- i2CyberBuild Comprehensive Compliance Remediation program for DoD contracting companies with FAR/FCI CMMC Level 1 or CMMC/NIST 800-171 Level 2 or 3 requirements for handling Controlled Unclassified Information. Built on NIST 800-171/172 and CMMC standards and integrated within the company's 8-Tier Solutions methodology.
- i2Assess Cybersecurity assessment service providing detailed assessment intake and NIST/CMMC scoring status for compliance evaluation. Supports the Assessment procedural step of Imprimis's 6-step Integrated Services Framework.
- i2ExpressDocs Documentation and evidence management service supporting automated documentation, reporting, and evidence gathering management for compliance deliverables such as System Security Plan (SSP) and Plan of Action and Milestones (POA&M).
- i2Sustain Managed Security Services Ongoing IT and Network Security Sustainment Services including continuous sustainment, endpoint protection, multifactor authentication, remote monitoring and management, vulnerability scanning/remediation, GCCH maintenance, SIEM, SASE, training, and backup and recovery. Delivered as a Managed Security Services Provider (MSSP) offering to DoD contractors and commercial clients.
- i2Consult Professional Consulting Progressive planning service for mission and objectives, providing strategic consulting to support cybersecurity compliance efforts. Supports the Planning procedural step of Imprimis's 6-step Integrated Services Framework for organizations seeking executive-level cybersecurity guidance.
Quantifiable outcome
- Reduces administrative burden on contractors by up to 50% through integrated NIST/CMMC requirements database, automated evidence collection, and report generation (SSP and POA&M)
- +1 more outcomes
Companies that use Imprimis
Customer profileNamed customers4 records
Segments5 records
Ideal customer profiles3 records
Imprimis technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature6 records
Imprimis partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core, flagship and minor.
- United States Air Force Academy (via i2 Strategic Services, LLC)corei2 Strategic Services, LLC, a wholly owned subsidiary of i2M Corporation and sister company of Imprimis, has supported the United States Air Force Academy's space technology and space situational awareness research programs since 2008. i2 SSL designed and built payloads and sensors flown on multiple satellites and the ISS. The partnership supports the Space Physics Atmospheric Research Center (SPARC) and the Center for Space Situational Awareness Research (CSSAR) with the Falcon Telescope Network. i2 SSL has designed, built, and operated 2 free-flyer satellite experiments and 14 hosted payload experiments since 2009.
- i2Sentinel Partners (MSP Channel Network)coreImprimis operates the i2Sentinel Partners program, a network of Managed Service Providers (MSPs) who resell Imprimis cybersecurity products and services. Partners gain access to i2ACT Assessment Tool resale, vulnerability management, MDR, incident response, security awareness training, network architecture security, and the secure 2FA-protected i2Portal. The program targets MSPs seeking to expand into the CMMC/DoD contractor market and is positioned as a strategic advantage for partners in a competitive market.
- Los Alamos National LaboratoryflagshipLos Alamos National Laboratory co-developed with USAF Academy/i2 Strategic Services the Compact Space Plasma Analyzer, which won the prestigious R&D 100 Award in 2024. The project represents a flagship research collaboration in space plasma instrumentation for the International Space Station and satellites in Low Earth Orbit and Geostationary Orbit.
- NASAflagshipi2 SSL supports NASA's Space Test Program through the DFPM/SPARC team. The Falcon Neuro experiment developed by i2 SSL and USAFA is in its second year of operations on-orbit on the ISS. Three team members received the 2022 NASA Agency Honor Awards for successful payload integration on SpaceX-24 ISS mission.
- Colorado APEX AcceleratorminorImprimis has produced selected training videos for the Colorado APEX Accelerator (formerly known for government contracting support). These videos are made available through the Imprimis Insider platform. The partnership extends Imprimis's reach into the Colorado government contracting ecosystem.
- Falcon Telescope Network (FTN) Partner InstitutionsminorThe Falcon Telescope Network is a global network of 20-inch telescopes developed by USAFA's CSSAR in collaboration with university partners including Imprimis/i2 SSL. Partner institutions include USAFA/Farish (Colorado), Penn State University, Gravity Discovery Centre (Australia), University of Western Australia, and Colorado Mesa University. Each FTN site is hosted by a partnering institution. The network focuses on undergraduate research, tracking orbital debris, and STEM outreach with 12+ sites worldwide.
Scale indicators6 records
Recent moves9 records
Expansion highlights5 records
Imprimis competitors and assessment
Company assessmentEmerging players
- RegScale: RegScale is a continuous compliance / GRC platform with CMMC-specific templates, providing an emerging software-led alternative to Imprimis's i2ACT compliance tool for mid-market DIB contractors.
- PreVeil: PreVeil offers encrypted email and file sharing built for CMMC compliance—an emerging solution targeting the same DIB buyer with a narrower product scope that complements or competes with Imprimis's compliance ecosystem.
Direct peers
- Pivot Point Security: Pivot Point Security is a CMMC consulting and assessment provider serving the DIB, with comparable professional services and methodology-based delivery that competes with Imprimis's i2CyberBuild/i2Assess services.
- CyberSheath: CyberSheath is a Managed Security Services Provider specializing in CMMC compliance for DoD contractors, offering compliance assessment, remediation, and managed security—a directly overlapping MSSP-plus-compliance model to Imprimis.
- Summit 7: Summit 7 is a CMMC/NIST 800-171 compliance software and services provider focused on the Defense Industrial Base, with proprietary compliance tooling and managed services—directly mirroring Imprimis's i2ACT-plus-services model.
Broad incumbents
- SAIC: SAIC is a large federal IT and cybersecurity services contractor with deep DIB and DoD relationships, competing with Imprimis for adjacent defense cybersecurity and compliance engagements.
- Coalfire: Coalfire is a large cybersecurity advisory and C3PAO that offers CMMC assessments and compliance services across federal and commercial clients, serving as a broader incumbent alternative to Imprimis's CMMC practice.
- Booz Allen Hamilton: Booz Allen Hamilton is a major federal consulting firm with a CMMC and DIB cybersecurity practice, offering a wide portfolio that competes with Imprimis at the larger end of the contractor market.
- ManTech International: ManTech is a large defense IT services and cybersecurity provider serving federal and DIB customers, representing the broad incumbent alternative to Imprimis's defense-domain services.
- Schellman: Schellman is a large compliance assessment and advisory firm that includes CMMC readiness in its portfolio, positioning it as a broader compliance incumbent overlapping with Imprimis's assessment work.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights7 records
Customer concentration
Imprimis social profiles
Digital presenceImprimis financial estimates
Financial estimateRevenue estimate
Valuation estimate
Imprimis leadership team
Management profileNumber of profiles
Profiles3 records
Imprimis subsidiaries and ownership
Company hierarchySubsidiaries1 record
Imprimis funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Imprimis M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Imprimis
What does Imprimis do?
Imprimis sells a proprietary cybersecurity compliance software platform (i2ACT) and related professional services designed to help DoD contractors and Defense Industrial Base companies achieve and maintain NIST 800-171, NIST 800-172, and CMMC Levels 1-3 compliance. The i2ACT tool is offered in three level-specific editions and is supported by managed security services, channel partners, and a Cyber Compliance Center.
Is Imprimis a public or private company?
Imprimis is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Imprimis founded?
Imprimis was founded in 2004. It employs 11 to 50 people.
Where is Imprimis based?
Imprimis is headquartered in Colorado Springs, United States, in the North America region.
How does Imprimis make money?
Four revenue lines are on record. i2ACT Software Tool Licensing is the primary driver. The others are cybersecurity Professional Services, i2Sentinel Partners Reseller Revenue and managed Security Services (MSSP).
Who are Imprimis's main competitors?
Emerging players on record are RegScale and PreVeil. Direct peers are Pivot Point Security, CyberSheath and Summit 7. Broad incumbents are SAIC, Coalfire, Booz Allen Hamilton, ManTech International and Schellman.
Does Imprimis have an API?
No public API is recorded for Imprimis.
What industry is Imprimis in?
Imprimis's product category is Cybersecurity Compliance Services. Its primary akta.pro industry code is BPAHAEAG, Cybersecurity & Identity Consulting. Its NAICS code is 54169.