Capability statement · October 2026

DoD RMF compliance software that keeps the package in agreement

STIG checklists, ACAS scan results, and the eMASS POA&M, consistent across hundreds of checklists, processed entirely on the user’s own computer.

Download the PDFRequest a quote

Company overview

STIG Solution LLC is a Veteran-Owned Small Business that builds DoD RMF compliance software for the people accountable for RMF packages: ISSOs, ISSMs, and compliance engineers. Our applications turn STIG checklists and ACAS scan data into accurate package artifacts at the scale of a real system, without any of that data leaving the user’s computer.

Core competencies

  • STIG checklists at scale. CKL and CKLB; checklists from SCAP results in bulk; bulk migration to new STIG versions; edits across hundreds of assets at once.
  • eMASS package artifacts. POA&M creation and updates in the 2026 eMASS template, and Assessment Procedure results through the eMASS TR Export and TR Import.
  • ACAS / Nessus analysis. Scan status you can trust, per-asset software and port inventories, Detailed Vulnerability List, executive summaries, and POA&M reports.
  • DISA STIG Viewer replacement. STIGreviewer, free on Windows and macOS: CKL and CKLB in one application, inventory, and quality checks against your own rules.
  • STIG revision data. A STIG revisions file every quarter comparing each new DISA STIG with its previous version, published free.
  • Onboarding and training. Remote sessions on setup and RMF workflow, included with every license.

Differentiators

  • Built by practitioners for the RMF packages they assemble: baseline, testing, results, and POA&M in agreement.
  • Your data stays on your computer. The only network traffic is a license check, to a service hosted in Microsoft Azure Government. No CUI is stored or transmitted.
  • Disconnected and classified networks supported with a separate offline build and deployment addendum.
  • Approved on Navy networks through DADMS (IDs below). Approval letters available on request.
  • Developed and supported in the United States by STIG Solution LLC.

Past performance

  • U.S. Navy, NIWC Atlantic: Navy Standard Integrated Personnel System (NSIPS). STIGrevolution and NESSviewer licensing since 2022, directly and through GDIT, including sole-source awards in 2025 and 2026. Award details on request.
  • DoD programs through prime contractors. In use on Navy and Space Force programs through primes including IBM, ManTech, and By Light.