CMMC 2.0 Level 2 · NIST SP 800-171

Web boundary evidence your C3PAO will accept

Defense contractors need to show public-facing systems protect communications at the boundary. Scan your domains and get a header report mapped to SC.L2-3.13.x controls.

Which controls do headers support?

SC.L2-3.13.1 Boundary protection

CSP, frame-ancestors and Permissions-Policy control what crosses your web boundary.

SC.L2-3.13.8 Transmission confidentiality

HSTS and HTTP→HTTPS redirects enforce encryption for CUI in transit.

SC.L2-3.13.11 FIPS cryptography

HTTPS enforcement is the web-layer prerequisite for FIPS-validated TLS.

Get your report as SSP-ready evidence