Products
Concura is one subscription — the complete platform — with optional senior-assessor add-ons. Built on senior-assessor analysis of all 320 NIST SP 800-171A assessment objectives.
Concura Platform
The complete platform in one annual subscription — reference, AI interview, the guided build, and your exportable assessment package.
- All 320 NIST 800-171A objectives with senior-assessor analysis + verbatim NIST/CMMC source text
- AI assessor interview (voice or text) that drafts your SSP narrative control-by-control
- CWRA guided build — sequenced scripts to stand up your CMMC L2 enclave in Microsoft GCC High
- SSP auto-drafted from your build evidence, plus matching policies and procedures
- Exportable assessment package: SSP, SRM, artifact register, POA&M, evidence checklist
- Delta Corp example SSP, Knowledge Base, enclave-architecture guide, completion tracker, community
- Continuous updates as DoD guidance evolves
Billed annually as Consultant Works, LLC. Use the same email at checkout that you use to sign in.
CWRA Setup Assistance
Hands-on help standing up your enclave with the CW Reference Architecture (CWRA) — Concura's guided CMMC build.
- Kickoff, scoping, and tenant-readiness review
- Per-phase build guidance and troubleshooting across the CWRA flow
- Evidence collection and SSP review
- Assessment-package walkthrough
- 30 hours included at a discounted $250/hr
- Additional time at the standard $300/hr; GCC High licensing quoted separately
For Concura subscribers standing up a new CMMC L2 enclave.
Concura Consulting
Direct senior-assessor (CCA) time when you want a human in the loop.
- Control-interpretation questions
- SSP review for one or more control families
- Scoping decisions (CRMA vs CUI Asset, enclave boundary)
- Mock-assessment Q&A and pre-assessment readiness checks
- Prepaid via Stripe; buy any quantity; unused hours don't expire
Available to active Concura subscribers. Buy from your account once your subscription is active.
Concura Managed
Ongoing monitoring and maintenance of the CMMC environment Concura helped you build.
- Continuous monitoring across the build's telemetry — unified audit log, Defender, and Sentinel
- Config-drift detection against your established baseline
- Upkeep of policies, evidence, and continuous-monitoring artifacts
- Senior-CCA oversight of your steady-state compliance posture
- GCC High licensing quoted separately as a pass-through
In development — not yet available for purchase. Tell us you're interested and we'll reach out when it launches.
Learn more before you subscribe
The prospectus is a 9-page overview of the value-vs-consulting math, tier pricing, the senior-assessor backing, and how customers actually use Concura. The live demo is a 30-minute Zoom session with a senior assessor — not a sales pitch, a working session for you to decide whether Concura fits your situation.
What's included in the Delta Corp example SSP
Every Concura subscriber gets the Delta Corp example SSP — a complete, fictional-OSC system security plan that demonstrates a defensible CMMC L2 implementation in Microsoft GCC High with AVD. It covers all 14 NIST 800-171 families, all 110 controls, all 320 sub-objectives, with full implementation narratives, GCC-H inheritance citations, and per-objective supporting artifacts. Use it as a tailoring template — and as the starting content your AI-assisted authoring builds from.
Billing
Concura is a single $8,000 / year subscription, billed annually in advance. There is no separate trial — every subscriber has the full platform from day one. Annual subscriptions are non-refundable once active; you may cancel auto-renewal at any time, and cancellation takes effect at the end of your current term.
Frequently asked
Where is my SSP data stored?
Your SSP narratives, voice transcripts, company profile, build evidence, and uploaded artifacts live in Microsoft Azure Government — GCC High, the cloud environment used for Department of Defense Controlled Unclassified Information and Impact Level 5 data. Your data never transits Concura's public-content infrastructure.
Can I print or download anything from Concura?
Concura's reference content (the 320 control pages and the Delta Corp example SSP) is for online viewing within your subscription — printing and bulk extraction are disabled to protect the senior-assessor expertise that makes it valuable. You can generate and download your own personalized SSP .docx and assessment package — that's the whole point. Code snippets (PowerShell commands, Microsoft Graph queries, etc.) in the implementation guidance remain copyable — those are operational helpers, not extractable narrative content.
Do I need a Microsoft account to sign in?
No. Concura sign-in works with any email address — Google, Microsoft, or any work email. Choose "continue with Google," or enter your email and we'll send a one-time code. No new password to remember, no Microsoft account required.
What happens if I cancel my subscription?
Your data is preserved for 30 days, then moved to cold storage for 12 months. You can request export at any point during that window. After 12 months, data is purged. We'll always notify you before purge.
Can I file the SSP as my own document?
Yes. Your SSP narratives, once authored, are your work product. Concura provides the structure, the assessor-perspective starting examples, and the AI-assisted authoring tools — but the resulting SSP belongs to you, including the right to file it with assessors, customers, and authorizing officials as your own document.
Will Concura work for an OSC that doesn't use VDI?
Yes. Concura's content is anchored to a hypothetical OSC (Delta Corp) that runs a VDI architecture in Microsoft GCC High, but Concura includes a non-VDI architecture toggle. Customers handling CUI directly on endpoints (no VDI) get differentiated inheritance defaults and narrative starting points where the architecture difference matters.
Can I bring my own assessor to review what I've authored?
Of course. The whole point of Concura is that you produce your SSP — not a template, not a generic export. Your assessor sees your authored narratives, your company profile, your inheritance choices. Concura just makes the authoring faster and the structure correct.
Who's behind Concura?
See the About page. Concura is built by a senior CMMC assessor with deep field experience. The reference content is authored or reviewed by working assessors — not generated by a generic AI. The voice cleanup uses AI, but the underlying control-by-control assessor expertise is human-validated.