Products
Three ways to use Concura. Built on the same senior-assessor reference content covering all 320 NIST SP 800-171A assessment objectives. Pick the tier that fits where you are in your CMMC journey.
Concura Reference
Senior-assessor expertise as a reference while you author your own SSP.
- All 320 NIST 800-171A objectives with senior-assessor analysis
- Verbatim NIST + CMMC source text per objective
- Delta Corp example SSP as a tailoring template
- Knowledge Base — cross-control deep-dives
- CMMC Enclave Architecture decision guide
- Built-in completion tracker
- Community access
- Continuous content updates
Billed as Consultant Works, LLC, the company that produces Concura.AI.
Concura Interview
An AI assessor interviews you control-by-control, produces your SSP narrative, and gives you the build playbooks + senior-CCA hours to actually stand the environment up.
- Everything in Concura Reference
- AI assessor opens each control with the question a CCA would ask
- Voice-first authoring with a "quiet mode" for typed answers
- AI-assisted narrative cleanup + refine
- Personalized SSP
.docxgeneration - Build workflow — sequenced runbook of customer-run scripts (DSC, Bicep, Terraform, Graph PowerShell, CA JSON) for the CUI-handling environment, with verification checklists per control
- 10 hours of senior-CCA consulting time bundled — you direct how they're spent (control reviews, scoping, SSP polish, mock assessments)
- Inheritance overrides + Non-VDI / VDI architecture toggle
- Your data stored in Microsoft GCC High
Add-on for active Concura Reference subscribers. Cannot be purchased standalone.
Add Interview from your accountNeed more time with a senior CCA? Buy additional consulting at $300/hour from your account once Interview is active.
Concura Consult
Direct senior-assessor time when the tools aren't enough.
- 60-minute Zoom session with a senior assessor
- SSP review for one or more control families
- Control-interpretation questions
- Scoping decisions (CRMA vs CUI Asset, enclave boundary)
- Mock-assessment Q&A
- Pre-assessment readiness checks
- Booked through Concura, prepaid via Stripe
- 1-hour minimum; larger packs forthcoming
Available only to active Reference or Interview subscribers. Interview subscribers already have 10 hours bundled — Consult is for buying additional hours beyond the bundle. Buy in any quantity from your account once you have an active subscription. Unused hours don't expire.
Learn more before you subscribe
The prospectus is a 9-page overview of the value-vs-consulting math, tier pricing, the senior-assessor backing, and how customers actually use Concura. The live demo is a 30-minute Zoom session with a senior assessor — not a sales pitch, a working session for you to decide whether Concura fits your situation.
What's included in the Delta Corp example SSP
Both Reference and Interview subscribers get the Delta Corp example SSP — a complete, fictional-OSC system security plan that demonstrates a defensible CMMC L2 implementation in Microsoft GCC High with AVD. It covers all 14 NIST 800-171 families, all 110 controls, all 320 sub-objectives, with full implementation narratives, GCC-H inheritance citations, and per-objective supporting artifacts.
Reference customers use it as a tailoring template — read, adapt, copy what fits. Interview customers use it as the starting content their AI-assisted authoring builds from.
How the Interview 14-day trial works
The Interview add-on is available as a 14-day try-before-you-commit trial. To start the trial:
- Start with a paid Concura Reference subscription. The Interview trial is only available to existing Reference customers — we ask you to commit at the $3K Reference level first so the trial works for serious evaluators.
- Add Interview in your account settings. Enter a payment method; no charge during the 14-day trial window.
- Use Interview as a full subscriber would — author SSP narratives via voice or text, use AI Refine, work across the 320 sub-objectives — with one restriction: SSP
.docxexport is disabled during the trial. You can author your narratives; you can't extract them as a finished SSP package until your subscription converts to paid. - Transparency about the charge: we send reminders at trial start (day 0), 3 days before conversion (day 11), and 1 day before conversion (day 13). A persistent in-app banner shows the days remaining. Cancel anytime in your account settings; cancellation is one click.
- At day 14, your card is charged $5,000 (or you've canceled, in which case nothing happens). Your authored narratives stay accessible immediately, with
.docxexport now enabled.
Annual Concura subscriptions are billed in advance and non-refundable once active. You may cancel auto-renewal at any time; cancellation takes effect at the end of your current term.
Frequently asked
Where is my SSP data stored?
Concura Interview subscribers: your SSP narratives, voice transcripts, company profile, and uploaded logo live in Microsoft Azure Government — GCC High, the cloud environment used for Department of Defense Controlled Unclassified Information and Impact Level 5 data.
Concura Reference subscribers: you generate no customer-specific content; only your completion-tracker state is stored, and that's personal navigation state with no FCI or CUI implications.
The split is enforced at the routing layer: your data never transits Concura's public-content infrastructure.
What's the difference between trying Interview and subscribing to Interview?
Functionally, almost identical. During the 14-day trial you have full access to voice authoring, AI cleanup, AI Refine, the company profile, the inheritance overrides — everything you'd use as a paid Interview subscriber. The one restriction during trial is .docx export: you can author and refine narratives across as many controls as you want, but you can't generate the final personalized SSP package until your subscription converts to paid.
The reason: we want to make sure customers who use Interview for value get billed for that value. Authoring tools without the export gate would allow a customer to author their entire SSP in 14 days, export, and leave without paying for the work the platform did for them.
Can prospects try Concura Interview without paying?
No. The 14-day Interview trial is only available to existing Concura Reference subscribers ($3K/year). Prospects evaluating Concura see the canned Interview demo video (a pre-recorded walkthrough using a fictional company), not a live trial of their own.
Why this matters: the demo video shows what Interview output looks like after a customer's narrative is refined, not what it looks like after a raw first voice input. We don't want prospects judging Interview based on their own unrefined first attempt and walking away. Once you're a paying Reference subscriber, the trial lets you experience the full flow on your own data.
Can I print or download anything from Concura?
Concura's content (including the 320 control pages and the Delta Corp example SSP) is for online viewing within your subscription. Printing and bulk extraction are disabled to protect the senior-assessor expertise that makes the content valuable. Interview subscribers can generate and download their own personalized SSP .docx (this is the whole point of Interview). Reference subscribers can view the Delta Corp example SSP online but not download it as a .docx.
Code snippets (PowerShell commands, Microsoft Graph queries, etc.) within the implementation guidance remain copyable — those are operational helpers, not extractable narrative content.
Do I need a Microsoft account to sign in?
No. Concura uses Microsoft Entra's business-to-business guest authentication, which lets you sign in with your existing work email. Microsoft sends a one-time passcode to your email; you enter it; you're in. No new password to remember, no Microsoft account required.
If your organization already runs Microsoft 365 (as most CMMC-bound contractors do), the experience is even smoother — your existing Microsoft credentials work directly.
What happens if I cancel Concura Interview but keep Reference?
Your authored SSP narratives stay accessible in read-only mode — you can view and export them, just not edit further. Re-activating Interview restores full edit access. Your Reference tier continues uninterrupted.
What happens if I cancel my Concura subscription entirely?
Your data is preserved for 30 days, then moved to cold storage for 12 months. You can request export at any point during that window. After 12 months, data is purged. We'll always notify you before purge.
Can I file the SSP as my own document?
Yes. Your SSP narratives, once authored, are your work product. Concura provides the structure, the assessor-perspective starting examples, and the AI-assisted authoring tools — but the resulting SSP belongs to you, including the right to file it with assessors, customers, and authorizing officials as your own document.
Will Concura Interview work for an OSC that doesn't use VDI?
Yes. Concura's content is anchored to a hypothetical OSC (Delta Corp) that runs a VDI architecture in Microsoft GCC High, but Concura Interview includes a non-VDI architecture toggle. Customers handling CUI directly on endpoints (no VDI) get differentiated inheritance defaults and narrative starting points where the architecture difference matters.
Can I bring my own assessor to review what I've authored?
Of course. The whole point of Concura Interview is that you produce your SSP — not a template, not a generic export. Your assessor will see your authored narratives, your company profile, your inheritance choices. Concura just makes the authoring faster and the structure correct.
Who's behind Concura?
See the About page. Concura is built by a senior CMMC assessor with deep field experience. The reference content is authored or reviewed by working assessors — not generated by a generic AI. The voice cleanup uses AI, but the underlying control-by-control assessor expertise is human-validated.