Do your own CMMC self-assessment — in plain English.

A guided workbook for small defense subcontractors: work through the 17 Level 1 practices or all 110 NIST SP 800-171 Rev 2 requirements, keep evidence notes, see your progress and an estimated SPRS score, and export a clean report.

Start your assessment   See pricing

Why now

According to the DoD CIO, on July 13, 2026 the Department suspended CMMC Phase II requirements, and the program is paused in Phase 1. Self-assessment requirements remain in place: an annual Level 1 self-assessment and affirmation, and a Level 2 (Self) assessment every three years with annual affirmation, entered in SPRS. Source: DoD CIO, About CMMC. Program rules change — always confirm current requirements with official sources and your contracting officer.

Guided checklists

Level 1 (17 practices mapped to FAR 52.204-21) and Level 2 (110 requirements), grouped by family.

Evidence notes

Record what you have in place and where proof lives. Do not store CUI in the app.

Progress & SPRS estimate

See what's done and an estimated SPRS-style score. Your official score is what you submit in SPRS.

PDF & CSV export

Hand your report to your IT provider, advisor, or prime.

Self-assessment aid only. SPRS Ready does not certify you, does not guarantee compliance or contract eligibility, and is not affiliated with the DoD/Department of War or the Cyber AB. You are responsible for the accuracy of any affirmation you submit.