Your SPRS score, on your own machine.
Track all 110 NIST SP 800-171 Rev 2 requirements, manage your POA&M, and calculate your SPRS score in real time, without putting your self-assessment in anyone else’s cloud. Runs on your workstation or server. No subscription, no vendor holding your posture.
Why on your machine
A completed assessment is sensitive. Used as intended, the tracker’s own data stays non-CUI: it records control status and pointers to where your evidence lives, not the evidence itself. Layered Intel never sees your assessment because it never leaves your network. That keeps your hosting options open and your footprint simple.
What it does
- All 110 requirements pre-loaded across all 14 domains, with assessment objectives and suggested evidence for each
- Real-time SPRS scoring using the DoD Assessment Methodology (110 down to -203), including partial-credit and conditional-status logic
- CMMC 2.0 eligibility checks: flags whether you meet the conditional-status threshold and whether any open gap is not POA&M-eligible
- POA&M management: owners, due dates, milestones, automatic overdue flagging
- Team dashboard: login-protected, overall posture, per-domain progress, drill-down into any control
- Reports and exports: SPRS submission summary; SSP and POA&M data as JSON or CSV
- Append-only audit trail of who changed what, and when
- Zero dependencies: built on the Python standard library, runs on locked-down workstations and air-gapped networks
Who it is for
Defense contractors
Small and mid-size firms pursuing or maintaining CMMC Level 2.
Subcontractors and suppliers
Show primes a credible 800-171 posture.
ISSMs, ISSOs, vCISOs
One authoritative place for status, evidence pointers, and POA&M items.
MSPs and MSSPs
One self-hosted instance per government-contractor client.
Scope
The tracker is a readiness and management tool for your self-assessment. It does not grant CMMC certification. A CMMC Level 2 certification assessment is conducted by an accredited C3PAO, and your official score is recorded in the DoD SPRS system.
Request early access
Per-organization annual license. Availability and pricing are being finalized. Leave your details and we will contact you when it ships.
[PLACEHOLDER: WPForms early-access form goes here. Fields: name, company, email, role.]