Run a CMMC L2 gap assessment with a strategic ordering, not a blank slate
Open Gap Assessment in the Baseline phase and you'll find the Deep Fathom Playbook — a six-stage ordering across all 14 CMMC L2 families, designed to surface the foundation controls first (Identity, Access, Audit) before working out to boundary, people, and risk. Click Start playbook and the assessment materializes into six Review groups you can tackle in any order. Each review group shows live progress (5 / 95 reviewed · 12% complete), and the playbook header tracks how far you are through the full 320-objective gap assessment. Prefer to scope it yourself? Custom review group lets you pick a recipe (all objectives, random sample, POA&M-eligible), choose a control family, and set a sample size.
Navigate by compliance phase, not entity type
Your workspace sidebar follows the natural compliance lifecycle — Scope, Baseline, Implement, Document, Assess, and Maintain — instead of listing entity categories. Each phase groups the pages and actions relevant to that stage, with badge counts that surface where attention is needed. Phase items now aggregate counts from their children with hover tooltips, and new projects see an onboarding checklist that guides initial setup, then gets out of the way once your workspace has momentum. Workbenches you reach from the sidebar (Policy Authoring, Coverage Explorer, Asset Categorization, Boundary Diagramming, Assessment) keep the phase chrome — open one from a launcher card and it switches into focus mode automatically.
Author and review compliance content in one place
Policies, procedures, and implementation statements share a unified authoring experience. Your control requirements, linked entities, and scoring rubric stay visible alongside the editor as you write. AI-assisted review shows interactive diffs you can accept with a single click, and Fix mode generates targeted edits you can apply or discard inline — so review cycles move faster without losing context.
Folios track coverage across your library
Library pages for evidence, policies, assets, vendors, rosters, and inventory lists have been rebuilt with richer row displays and a Folio view that groups documents by the requirements they satisfy. Coverage tracking per folio shows which requirements have supporting material and which still need attention.
Also improved
Push evidence and artifacts from external tools via the Outpost ingest API, with API token authentication, full provenance tracking, and stable download links for the bundles you produce.
POA&M sheet now has elevated section grouping and an in-place Edit mode.
Project dashboard redesigned with real-time summary widgets for assessment readiness and evidence health.
User preferences page with dark and light theme toggle.
SSP Section 1.1 now unifies the Cover and Scoping fields into one card with proper data wiring; Section 5 family tiles no longer flash NaN% while loading.
Editor improvements — table menu opens on right-click instead of left-click, and Mention/Image attributes inherit correctly across copy/paste.
Upload reliability — stuck PROCESSING uploads now reconcile, retries clear stale errors, and image bytes reach the vision model directly so multi-page extracts don't drop pages.
96% reduction in dependency vulnerabilities, with CI now blocking high-severity regressions.
Form inputs on dark surfaces are consistently visible across all sheets and dialogs.
Recovered the missing 320th CMMC L2 objective (ca-4_obj_h) so the catalog is complete.
The dashboard, scope diagram, inventory list, and policies table got dozens of smaller polish fixes from the pre-release bug bash.
Questions or feedback? Reply on this update and tell us where the workflow still needs work.