Final CMMC Level 2 certification from C3PAO A-LIGN comes with a perfect 110/110 score, completed during the Phase II review period in the same GCC High environment Peerless deploys for its clients
COLLINSVILLE, Okla. (July 29, 2026) - Peerless Tech Solutions, a managed service provider and cybersecurity partner to the Defense Industrial Base, today announced it has achieved Final CMMC Level 2 certification with a perfect score of 110 out of 110. The assessment was conducted June 23 through July 9, 2026 by A-LIGN, an authorized Certified Third-Party Assessment Organization (C3PAO), under the formal CMMC program codified in 32 CFR Part 170. The certification is effective July 23, 2026 and valid through July 22, 2029. With this certification, Peerless joins a select group of managed service providers that have met the standard for protecting the Defense Industrial Base.
The certified environment is the Peerless GCC High tenant, the enclave where all Peerless end users operate. It is the same type of deployment and configuration Peerless performs for clients, whether in parallel with a NIST SP 800-171 Gap Assessment or as part of post-assessment remediation and CMMC readiness. Peerless did not certify a showcase environment built for an assessor. It certified the environment it works in every day, built the same way it builds for the contractors it serves.
The timing tells its own story. Peerless was mid-assessment on July 13, 2026, when the Department of War suspended CMMC Phase II requirements, which had been scheduled to take effect November 10, 2026, and launched a 60-day Reform Task Force review of the program. Peerless completed the assessment anyway. The review may have shifted the timeline, but it has not changed the responsibility. Organizations handling Controlled Unclassified Information remain bound by DFARS 252.204-7012 and NIST SP 800-171, and Phase 1 self-assessment and affirmation requirements remain fully in force. Peerless believes the partner guiding a contractor through that responsibility should be willing to meet the same standard itself.
"We did not pursue certification because a deadline required it. We pursued it because our clients trust us with the systems and data that keep them eligible for DoD work, and that trust deserves independent validation," said Christopher Kalbe, Chief Executive Officer of Peerless Tech Solutions. "A perfect score on a C3PAO assessment is not the product of a sprint. It is the product of operating in a compliant environment every single day. The review period changes the timeline. It does not change the threat, the contractual obligations, or our commitment."
The certification effort was led internally by Ismail McCowin, Director of Cybersecurity and Compliance at Peerless, who guided the company through readiness, evidence preparation, and the formal assessment, applying the same disciplined approach Peerless brings to every client engagement.
"Congratulations to Peerless Tech Solutions for achieving CMMC Level 2 certification. This accomplishment demonstrates a strong commitment to safeguarding valuable information to protect our nation, developing a competitive advantage, and creating a culture of security," said Petar Besalev, EVP of Compliance and Cybersecurity Services at A-LIGN. "We're proud to support this integral step in Peerless Tech Solutions' compliance journey with a high-quality assessment process and deep expertise in federal compliance."
Under the CMMC Shared Responsibility Model, an MSP's own security posture is inseparable from its clients' compliance outcomes. Assessors evaluate the services, personnel, and infrastructure a contractor relies on, which makes a certified service provider a materially stronger foundation for any organization pursuing or maintaining CMMC readiness. Peerless clients now work with a partner that has completed the full C3PAO assessment process firsthand: the evidence preparation, the documentation rigor, and the assessment itself.
The certification also validates the tools Peerless recommends. In early 2026, Peerless implemented IntelliGRC, a FedRAMP Moderate equivalent, AI-driven governance, risk, and compliance SaaS platform, applying the same vetting standard it applies to every compliant solution it recommends to clients. The platform supported the readiness and evidence management behind the perfect score, and Peerless now offers GRC as a Service built on IntelliGRC as part of its CMMC readiness and Gap Assessment offerings.
"Peerless holds its partners to the same standard it meets itself, and that is exactly the kind of company and partner we built IntelliGRC to serve," said Ozzie Saeed, Founder and CEO of IntelliGRC. "Supporting their readiness and evidence management through a formal C3PAO assessment, and seeing it end in a perfect 110 out of 110, is the strongest validation a platform can earn. Our partnership with Peerless shows what is possible when a certified provider and a purpose-built GRC platform work as one team, and we are proud to stand behind them and the contractors they serve."
For defense contractors weighing how to respond to the suspension, the Peerless guidance is consistent: continue implementing NIST SP 800-171, keep SPRS scores accurate and current, and maintain strong documentation and evidence discipline. Those obligations exist today under DFARS 252.204-7012 and Phase 1 self-assessment requirements, and they will continue to serve contractors well as the outcome of the review takes shape. The timeline may change. The commitment should not.
About Peerless Tech Solutions
Peerless Tech Solutions is a CMMC Level 2 certified managed services and managed security provider supporting Department of Defense, Defense Industrial Base, and Federal contractors. Peerless helps organizations achieve and maintain compliance with CMMC, NIST SP 800-171, and DFARS through a complete lifecycle of services that includes Gap Assessments, remediation, GCC High migrations and enclaves, GRC as a Service, managed IT, SIEM, and ongoing compliance support. Founded in 2014 and operating as a fully remote, U.S.-based team, Peerless partners with clients for the long term to turn compliance requirements into operational strength. Learn more at www.getpeerless.com.
About A-LIGN
A-LIGN is the leading cybersecurity compliance partner, trusted by over 6,400 organizations worldwide to navigate the complexities of compliance, audit, and risk. With a tech-enabled delivery model and deep domain expertise, A-LIGN delivers high-quality, efficient audits across frameworks including SOC 2, ISO 27001, FedRAMP, CMMC, ISO 42001, PCI, and HITRUST. Learn more at www.a-lign.com.
About IntelliGRC
IntelliGRC is a provider-first governance, risk, and compliance platform built by practitioners to help MSPs, MSSPs, and audit-ready teams streamline compliance with CMMC, NIST SP 800-171, SOC 2, ISO 27001, HIPAA, and other frameworks. Combining asset-centric scoping, expert-calibrated AI, and multi-tenant delivery on a security-first, FedRAMP-aligned architecture, IntelliGRC enables service providers to offer GRC as a Service with measurable, audit-ready outcomes. Headquartered in Fairfax, Va., IntelliGRC partners with providers like Peerless Tech Solutions to turn compliance complexity into a scalable service. Learn more at www.intelligrc.com.
Media Contact
Sean Meyers
Business Development Manager
Peerless Tech Solutions
sean.meyers@getpeerless.com
888.966.7337
These Stories on Compliance
