Free Windows v1.1.0 · macOS v1.1.0 BETA
CyberSure Evidence Check
Check settings on one Windows computer against the 15 CMMC Level 1 basic safeguarding requirements in FAR 52.204-21, then create a local HTML evidence report. A separate Mac BETA is also available; business practices that software cannot verify are identified for you to confirm.
Read-only · Offline · No data sent
Free to download. No email or account required.
The local report is one input to your own review, not a complete readiness determination. The CMMC Level 1 Self-Assessment Kit includes a formatted and editable workbook with requirement guidance and evidence checklists, plus nine fill-in evidence forms in editable DOCX and printable PDF formats.
The Mac release is BETA: tested on simulated macOS output, not on real Macs.
Need the previous Windows release? Windows v1.0.0 ZIP.
Mac v1.1.0 · BETA
Run the Mac BETA locally.
Tested on simulated macOS output, not on real Macs.
Unzip the Mac BETA download. To run the shell script, open Terminal, type bash (bash followed by a space), drag CyberSure-EvidenceCheck-mac.sh into Terminal, then press Return.
Or run Run-CyberSure-Evidence-Check.command. If macOS blocks the first launch, open System Settings > Privacy & Security > Open Anyway.
Several computers
Checking several computers? Combine them.
Place each v1.1.0-or-later Windows or Mac BETA report in one folder, then run Run-Company-Report.cmd from the Windows download and choose that folder. It creates one company-wide report. The Windows Company Report script accepts the supplied Mac BETA report format.
Windows v1.1.0
Run the check on Windows 10 or 11.
- 01 Unzip the download into a folder.
- 02 Double-click
Run-CyberSure-Evidence-Check.cmd. - 03 When Windows asks for permission, choose Yes for a full check. Administrator rights let the tool read a few settings that standard rights cannot access; declining still runs a limited check without changing settings.
If Microsoft SmartScreen shows “Windows protected your PC,” select More info > Run anyway to continue.
Verify the downloads
Verified SHA-256 values.
In PowerShell, run this from the unzipped Windows folder to verify the main script:
Get-FileHash .\CyberSure-EvidenceCheck.ps1 -Algorithm SHA256- CyberSure-EvidenceCheck.ps1
- 1a72bab38bd579e3e3902b8fd8c83265f4e2aed105108a9af7adfa96050d4a36
- CyberSure-Company-Report.ps1
- 7a9effe8c76ef18e61616963132741e53f3830cef60feee84cea87aa35041be3
- Run-CyberSure-Evidence-Check.cmd
- d89ea2462052eed0460ab861c37f5c3f27d2109fa6171303e0704731ad007dc1
- Run-Company-Report.cmd
- cfeeb20b9fed74aa5e7413a38942ae0ae377419934285d0839f4e97ad209626a
- Windows README.txt
- af44b1906d085882099d76f49b9115fb2486ba9b4a6547b8e1ff83ad13fd4988
- CyberSure-EvidenceCheck-mac.sh (BETA)
- 0c61ac5ab9823eeafdf264540b4f03940f0c63e95a0c44a32984a37dabcfaab1
- Run-CyberSure-Evidence-Check.command (BETA)
- 1fd937f1232392be432e0fdf658e8dc11bba8c6b4bbfe6d45c9f08268be14689
- Mac README.txt (BETA)
- 5e60737ba4709f24fdfb821e4466eaaab1246598aba098ecee40f228492f104f
Official references
Important boundary
Not legal advice, not a certification, not an official CMMC assessment; not affiliated with or endorsed by the U.S. Army, DoD or any government agency. CyberSure is not affiliated with or endorsed by the U.S. Army, the Department of Defense (DoD), or any government agency. The report is preparation support only; review your organization’s practices and evidence, and follow applicable official requirements.