CMDash as an alternative to Project Spectrum (free, DoD)
Same sourced comparison as CMDash vs. Project Spectrum (free, DoD), framed for switching: 0 dimensions below favor CMDash, 1 favor Project Spectrum (free, DoD) — including where Project Spectrum (free, DoD) is built to do something CMDash deliberately doesn’t.
| Dimension | CMDash | Project Spectrum (free, DoD) |
|---|---|---|
What it is Source, verified 2026-10-07 — https://craterpdc.org/?p=7322. May have changed since. | CISO Dashboard — a paid product | A "Free DOD program" run through the Department of Defense Office of Small Business Programs: an interactive platform that helps small and medium-sized businesses and universities with cyber-awareness and readiness, with a list of approved vendors and proven solutions |
Cost Source, verified 2026-10-07 — https://craterpdc.org/?p=7322. May have changed since. | $1,788.00/yr (Starter tier) | Vendor advantage: Free to eligible organizations — described as a "Free DOD program" provided "to lessen the burden on these organizations" |
What you get Source, verified 2026-10-07 — https://craterpdc.org/?p=7322. May have changed since. | Level 2 (110-control) tracker, $5,988.00/yr (Essentials tier) | Resources on cyber-defense and risk management to "determine their vulnerabilities, to educate their workforce, and to communicate with cybersecurity experts and industry specialists" |
Project Spectrum is a free program, not a system you migrate out of, and you can keep using it. If you have risks in a spreadsheet from its self-assessments, the Risk Register’s Import button (columns: Title, Description, Category, Likelihood, Impact, Status, Notes) can seed them directly.
Every figure above is the same sourced, dated fact table /compare/project-spectrum renders — nothing here is retyped for this page. Pricing and product capabilities change; think something above is wrong or out of date? Tell us and we’ll fix it.