State Cybersecurity Grants for Defense Manufacturers: What Is Available in Your State

Federal CMMC compliance grants get most of the attention; but state-level cybersecurity funding programs are one of the most underutilized resources available to small manufacturers in the defense supply chain. Most business owners are not even aware they exist.

As of 2026, a growing number of states have launched grant programs specifically designed to help small and mid-size manufacturers and defense contractors cover the cost of cybersecurity compliance: including CMMC gap assessments, remediation, training, and certifications.

Why Are States Funding CMMC Compliance?

State governments have a direct economic interest in the health of their defense manufacturing base. When small manufacturers are disqualified from DoD contracts because they cannot achieve CMMC compliance, states feel the economic impact. In response, many states have deployed funding through MEP center cost-share programs, state economic development fund allocations, state cybersecurity office grant programs, and federal passthrough funding under CHIPS Act and DoD supply chain resilience initiatives.

State Programs to Know About

Michigan: Defense CyberSmart Program

Michigan’s Defense CyberSmart Program offers qualifying small and mid-size defense contractors a two-phase program: a subsidized gap analysis plus up to $22,500 in cost-share grant funding to address identified deficiencies. Michigan has one of the largest defense manufacturing bases in the country.

Connecticut: CMMC Compliance Assistance

Connecticut manufacturers in the aerospace and defense corridor can access state-funded CMMC readiness programs through the Connecticut MEP and state economic development initiatives, including subsidized gap assessments and cost-share grants for remediation.

Massachusetts: Cyber Resilient Massachusetts Grant

Massachusetts’s Cyber Resilient Massachusetts grant program provides funding for small businesses to access cybersecurity assessments and managed detection services. Manufacturing companies in the defense supply chain are eligible, with grants of up to $50,000.

Georgia and Virginia

Cyber Grants Alliance maintains offices in both Atlanta, Georgia and Ashburn, Virginia. CGA actively tracks state-level programs in both states and provides updated guidance through its State Grants resource page.

How to Find Programs in Your State

1. Visit cybergrantsalliance.org/state-grants: regularly updated by state and geography.
2. Contact your regional MEP center: most now have dedicated CMMC program staff who know what is available locally.
3. Check your state economic development office website for current cybersecurity grant opportunities.
4. Ask your prime contractor: they sometimes have relationships with state MEP centers and can direct subcontractors to local resources.

How to Stack State Funding with Federal Programs

• Start with a CGA Gap Assessment Grant: fully funded, nationally available
• Use MEP center programs for remediation cost-share, up to $22,500 in some programs
• Apply for state direct grants for remaining remediation or training costs
• Use CGA Pen Testing and Training Grants for post-remediation validation