ThreatHunter.ai Launches JAXBERT, an AI-Powered CMMC Level 2 Compliance Platform Built for Small Defense Contractors

ThreatHunter.ai, a veteran-owned cybersecurity firm (SDVOSB) with 19+ years protecting enterprise networks, today announced the launch of JAXBERT, a purpose-built platform that gives defense contractors everything they need to achieve CMMC Level 2 certification without hiring expensive consultants or drowning in spreadsheets.

JAXBERT addresses a growing crisis in the defense industrial base. With the Department of Defense now requiring CMMC Level 2 compliance in new contracts and C3PAO assessments starting November 2026, thousands of small contractors face a brutal choice: pay $80,000 to $200,000 for a consulting engagement or figure out 110 NIST 800-171 practices on their own. JAXBERT eliminates that choice entirely.

The platform walks contractors through a guided 5-stage workflow, from initial setup to a complete C3PAO assessment package. It covers all 110 NIST 800-171 practices across 14 control families, calculates a real-time SPRS score, generates an 80+ page System Security Plan as a Word document, builds a POA&M with AI-written remediation plans, and produces a one-click ZIP file containing everything an assessor needs.

"We built JAXBERT because nobody was solving this for the small contractor," said James McMurry, CEO of ThreatHunter.ai. "A 50-person shop handling CUI shouldn't have to choose between losing their contract and spending six figures on a consultant. JAXBERT gives them a real path to certification at a fraction of the cost."

JAXBERT is available in two tiers. JAXBERT COMPLY provides the full compliance management platform, including guided assessment, document generation, evidence vault with SHA-256 integrity verification, mock assessment mode, and 50+ security policy templates. JAXBERT SECURE adds three managed security tools from ThreatHunter.ai's operational arsenal: MILBERT for identity threat detection (covering 9 practices), TACT-IO for vulnerability management (8 practices), and ARGOS for managed detection and response (10 practices). Together, SECURE auto-covers 27+ practices with continuous evidence collection, cutting manual assessment work in half.

The platform is built on a zero-knowledge encryption architecture. All sensitive data is encrypted in the browser using AES-256-GCM before it ever reaches the server. ThreatHunter.ai stores only ciphertext and cannot read customer data. Multi-tenant isolation is enforced at both the application and database level using PostgreSQL Row-Level Security.

JAXBERT is built for teams of 1 to 100. Whether a contractor has a dedicated compliance officer or an IT admin doing double duty, the platform meets them where they are with plain-English translations of every practice, AI-powered guidance available 24/7, and automated document generation that removes the writing burden entirely.

Defense contractors interested in JAXBERT can schedule a free demo at www.threathunter.ai or contact sales@threathunter.ai.