Built for defense contractors
The network layer of your CMMC plan, handled.
If your business handles CUI, your assessor will look at how your network is protected. Rio for Defense gives you the router that covers that layer, the paperwork your assessor will ask for, and a guarantee that Rio does what we say it does.
Protects your boundary
A firewall sits between your network and the internet, on from day one.
Keeps CUI machines separate
SecureRooms isolate the computers that handle CUI from guests, printers and everything else.
Controls who joins
You approve each new device from the Rio app, and can block anything you don't recognize.
Everything in Rio for Defense
One price, $599. No setup fees, nothing to renew for two years.
-
Rio router
The same Rio hardware: firewall on from day one, SecureRooms and device approval.
-
The compliance document kit
A day-one Quickstart, the SSP Documentation Pack (prewritten System Security Plan language for the 15 controls Rio supports or partly covers, signable policies, an evidence checklist) and an Assessor Reference Sheet for assessment day.
-
SSP Builder and network diagram
Answer a few questions about your shop and get your SSP network section, policies and a network diagram filled in. It runs in your browser, so nothing you type leaves your computer.
-
2 years of Rio VPN
Encrypt a room's outbound traffic with nothing to install on each device. Added to your account automatically.
-
Assessor Guarantee
If Rio doesn't provide the capability we describe for a control we list as "Supports", we fix it with you or refund you.
-
Priority support and a free replacement
Priority phone and email support from a real person, and one free replacement if your Rio fails or is damaged in the first year.
Rio or Rio for Defense?
Same router. The standard Rio is the do-it-yourself option. Rio for Defense adds what a compliance buyer needs.
| Feature | Rio $199.99 |
Rio for Defense $599 |
|---|---|---|
| Rio router (same hardware) | ||
| Firewall, SecureRooms and device approval | ||
| Rio VPN included | 1 year | 2 years |
| Quickstart, SSP Documentation Pack and SSP Builder | – | |
| Network diagram and Assessor Reference Sheet | – | |
| Assessor Guarantee | – | |
| Priority phone and email support from a real person | – | |
| One free replacement if it fails or is damaged in the first year | – |
From day one to assessment day
-
Day one: set it up
Plug Rio in behind your modem and follow the Quickstart: put your CUI machines in their own SecureRoom and approve only the devices you trust.
-
Write it up
The SSP Builder fills in your network section, policies and network diagram from a few answers. The SSP Documentation Pack shows what each control still needs from you.
-
Assessment day
Hand your assessor the Assessor Reference Sheet: the device, what it does, and where the evidence is. It goes on top of your evidence folder.
CMMC Phase 2 starts November 10, 2026. Getting the network piece in place early gives your assessor something working to see.
Only with Rio for Defense
The Assessor Guarantee
If your C3PAO assessment rates a control we list as "Supports" as NOT MET, and the assessor's notes show the cause is that Rio, set up as described in our Quickstart and SSP Documentation Pack, does not provide the capability we describe for that control, we'll work with you and your assessor to fix it. If we can't, we'll refund the full purchase price of your Rio for Defense.
To claim, contact us within 90 days of your assessment with your assessment results and proof of purchase. Applies to the original purchaser of Rio for Defense, for assessments completed within 24 months of purchase.
What Rio doesn't do
Rio covers the network layer only. Policies, training, endpoint and identity controls, audit logging and incident response stay with you or your consultant. Rio does not make a company CMMC compliant on its own. The control mapping lists exactly what Rio helps with and what remains.
Questions contractors ask
Is this a different router from the standard Rio?
No. It's the same Rio hardware. Rio for Defense adds the SSP documentation pack and SSP Builder, a network diagram template, 2 years of Rio VPN instead of 1, the Assessor Guarantee, priority support and one free replacement in the first year.
Will Rio make us CMMC compliant?
No product can do that on its own. Rio handles the network layer. Your assessor reviews your whole program, including policies, training and endpoint controls.
What documents come with it?
Three documents, each for a different moment. The Quickstart gets you set up on day one. The SSP Documentation Pack gives you prewritten System Security Plan language for the 15 NIST SP 800-171 controls Rio supports or partly covers, with a "you still need" note for each, plus signable network policies and an evidence checklist; the SSP Builder fills in your company's details for you. The Assessor Reference Sheet is a one-page summary for your assessor on the day.
How does the Assessor Guarantee work?
It covers the controls we list as "Supports". If your assessor rates one of them NOT MET because Rio, set up as documented, doesn't provide the capability we describe, we'll work with you and your assessor to fix it, or refund your purchase. Claims within 90 days of the assessment, for assessments within 24 months of purchase. Read the full terms.
When does the 2 years of Rio VPN start?
It's added to your Rio account automatically when your order is processed. Sign in to the Rio app with the email you ordered with to use it.
What happens if the router fails?
If your Rio fails or is damaged in the first year, we'll replace it once, free.
Do I need IT staff to set it up?
No. Setup is done in the Rio app. With Rio for Defense, priority support is there if you have questions.
