July 13, 2026: CMMC Phase II suspended pending DoW review — NIST SP 800-171 still applies. Run your readiness in one platform. Book a demo

Cyber Tackle Box™ — newly upgraded, top to bottom

Know where you stand.
Know what to fix.
Prove it's done.

Cyber Tackle Box™ puts your controls, evidence, policies, tasks, training, and compliance progress in one place — instead of spreadsheets, SharePoint, and people's inboxes. Built for CMMC, NIST SP 800-171, HIPAA, SOC 2 and more. Multi-tenant for MSPs.

CMMCNIST SP 800-171HIPAASOC 2ISONewly upgraded — 2026Patent-pending AI training engine

What it feels like

One honest picture, every morning

You shouldn't need to understand what a "GRC platform" is. You should open one screen and know exactly what to do next.

ACME Defense — CMMC / NIST 800-171Example client view
Readiness67%
Critical gaps11
SPRS score42
Evidence missing17
Tasks due this week4
What should I do next?
  1. Close access-control gap (AC.L2-3.1.1)
  2. Complete MFA rollout evidence
  3. Approve updated System Security Plan

New in the 2026 upgrade

Work with your clients faster and more efficiently

The rebuilt Tackle Box is engineered around how compliance work actually gets done — whether you're running your own program or managing a book of clients.

Templates

Ready-to-deploy templates for the documents every engagement needs — start from proven structure instead of a blank page, then tailor to the client.

Objectives

Set clear compliance objectives and track progress against them — everyone on the engagement knows the target and how close you are to it.

POA&Ms

Build, assign, and drive Plans of Action & Milestones to closure — the heart of CMMC remediation, managed as living work instead of a spreadsheet that ages in a drawer.

Intel Hub

The intelligence your engagements run on, gathered in one place — stay current without leaving the platform.

Playbooks

Step-by-step playbooks that turn hard-won expertise into repeatable process — run every engagement the way your best one went.

And much more

The whole platform got the treatment — faster, sharper, and built for the 800-171 era, whatever shape the CMMC reform takes. Book a demo and see it live.

What's in the box

Six capabilities. Zero tab-switching.

Multi-Framework Compliance

Track every control across CMMC, NIST 800-171, HIPAA, SOC 2 and more — with integrated task management, detailed compliance workbooks, and step-by-step training templates that walk your team through each requirement.

Policy & Procedure Engine

Ready-to-use policy and procedure templates mapped to framework requirements. Stop paying by the hour for documents — customize, publish, attest, and version in the platform.

Risk & Crisis Management

Advanced risk assessment tools, tool identification per requirement, and crisis-response workflow management — so an incident triggers a playbook, not a panic.

Awareness Training That Rocks

52 modules of cyber awareness training, customizable by sector — including our first-of-its-kind music-based training that puts security lessons in the lyrics of actual songs. People remember what they can hum.

Workforce Development

1,000+ hours of training video, apprenticeship management with built-in KPI tracking, CompTIA course paths, and our patent-pending AI engine that tailors each employee's optimal training trajectory.

Multi-Tenant for MSPs

Manage every client's compliance from one pane of glass with multi-tenancy reporting, scalable pricing, and white-glove onboarding. Your clients get enterprise GRC; you get a recurring revenue line.

Why it works

Training welded to compliance — not bolted on

Most GRC tools track controls. Most LMS tools deliver videos. The Cyber Tackle Box is the platform that does both in one system — because a control without a trained human behind it is a checkbox, not a defense.

  • EnABLE methodology built in — micro-learning, infographics, and video tutorials embedded directly into daily workflows, so training happens where work happens.
  • Patent-pending AI (#17941843) predicts and tailors each employee's optimal training path, adjusting to performance in real time.
  • Assessor-friendly evidence trails — everything timestamped, assigned, and exportable when your C3PAO or auditor comes calling.

Field report

★★★★★
“Lionfish Cybersecurity provides a quality solution to ensure our clients' network stays compliant. Very happy with the platform and support.”
Fernando LeonMSP partner

★★★★★
“Lionfish's Trusted Partner Network was a game-changer for us. They brought the right team to the table.”
Alex P.CTO, TechNova Solutions

For MSPs & partners

Add a compliance practice without building one

White-label the Cyber Tackle Box for your clients, send your engineers through our CCP training, and lean on our vetted partner network — vCISO, MDR/SOC, pen testing, IAM — when an engagement needs specialist depth. You don't need to search far and wide; we bring the right team to the table.

Get in touch

See the new Tackle Box

Tell us about your compliance program — or your client book, if you're an MSP — and we'll set up your demo.

  • 1We reply within one business day — usually faster.
  • 2A 30-minute call with someone who can actually answer your questions.
  • 3A straight recommendation — even if it's that you don't need us yet.

Prefer to skip the form? Book a time directly or call 1-877-732-6772. Information you submit is handled per our Privacy Policy.

Find Out Where I Stand