Kitware Achieves CMMC Level 2 Assessment, Reinforcing Commitment to Secure Software Development

October 1, 2026
A certification badge for Kitware stating "CMMC CERTIFIED - LEVEL 2 2026–2029" set against a gray 3D hexagonal tile background.

This certification demonstrates Kitware’s commitment to protecting Controlled Unclassified Information (CUI) and supporting the cybersecurity requirements of the Defense Industrial Base.

Clifton Park, NY — October 1, 2026 — Kitware, a leader in software R&D and advanced AI, has achieved CMMC Level 2 (C3PAO) certification, reinforcing the company’s commitment to protecting Controlled Unclassified Information (CUI) and supporting the cybersecurity requirements of the U.S. Department of War (DoW).

The CMMC Program validates compliance with rigorous cybersecurity requirements for organizations that develop technologies or handle sensitive information on behalf of the Department of War. As cyber threats targeting defense agencies continue to grow in both frequency and sophistication, CMMC provides assurance that contractors have implemented and maintain the security controls necessary to safeguard Controlled Unclassified Information.

Kitware officially received its CMMC Level 2 certification on June 24, 2026, following a comprehensive independent assessment by a C3PAO. At the time, only about 2% of eligible organizations had successfully achieved CMMC Level 2 (C3PAO) certification, making Kitware part of a select group of organizations recognized for meeting the DoW’s rigorous cybersecurity requirements.

“Achieving CMMC Level 2 certification reflects years of investment in secure processes and protecting sensitive information for our government customers,” said Lisa Avila, CEO and co-founder of Kitware. “For a software R&D company of our size, this accomplishment demonstrates that we can deliver innovative software solutions while meeting some of the highest cybersecurity standards required by the DoW.”

Although the CMMC Phase 2 (C3PAO) certification requirement has been temporarily paused, securely managing CUI remains a critical factor for organizations supporting DoW programs. By proactively achieving certification, Kitware demonstrates both the maturity of its cybersecurity program and its readiness to support customers with demanding security and compliance requirements.

About Kitware

Kitware advances science and technology to make a meaningful difference in the world. We deliver high-impact software solutions built on open source foundations, combining deep technical expertise with a collaborative, people-first approach. Trusted by commercial, government, and academic organizations, Kitware partners closely with customers to understand their goals and integrate robust, sustainable technology into real-world scenarios. We build solutions that endure by prioritizing transparency, long-term value, and positive impact. Founded in 1998, Kitware is 100% employee-owned. Visit us at kitware.com or on Twitter, LinkedIn, and YouTube. 

Leave a Reply