Xometry receives Cybersecurity Maturity Model Certification Level 2
March 20, 2025

Xometry, North Bethesda, Maryland, USA, has announced that it has become one of the first companies to achieve the US Department of Defense’s Cybersecurity Maturity Model Certification (CMMC Level 2), signifying adherence to rigorous cybersecurity and information security standards for the aerospace and defence industries.
The recently finalised CMMC framework requires contractors seeking to do business with the US DoD to comply with stringent cybersecurity requirements for protecting Controlled Unclassified Information (CUI), including ITAR-regulated export-controlled data, and to undergo an audit by a Certified Third-Party Assessor Organization (C3PAO). Xometry received a perfect score.
“Xometry’s CMMC Level 2 certification demonstrates our industry leadership, and reinforces our position as a trusted partner for domestic aerospace companies, defense agencies, and other organisations that require strict data protection measures,” said Tarit Mitra, Xometry’s head of cyber and information security. “In today’s complex and challenging landscape, protecting sensitive information is not just a regulatory requirement – it’s a critical component of maintaining trust with our customers and protecting sensitive information vital to our national security.”