FREE SPRS Scoring Tool and DoD Self-Assessment

We're offering this free, easy-to-use, and comprehensive tool to help you accurately calculate your SPRS Score and meet the DoD Self-Assessment reporting requirements now enforced under Phase 1 of the CMMC Final Rule (48 CFR), which took effect on November 10, 2025.

As a DoD contractor, subcontractor, vendor, or supplier, you may be required to conduct a NIST SP 800-171 DoD Self-Assessment and report your resulting SPRS Score in the Supplier Performance Risk System (SPRS) in order to remain eligible for contracts, task orders, and delivery orders that include DFARS 252.204-7012, 7019 (Retired), 7020 (Renumbered DFARS 252.240-7997), or 7021 clauses. When you submit your score, a senior company official must also submit an affirmation of compliance in SPRS.

These requirements are now actively enforced across the Defense Industrial Base and apply to organizations that handle Federal Contract Information (FCI), as well as those that access, process, or store Controlled Unclassified Information (CUI). Many contractors also encounter these requirements when applying for the Joint Certification Program (JCP) through DD Form 2345, which requires documentation of a NIST SP 800-171 self-assessment and an SPRS score.

The FREE Peerless DoD SPRS Scoring and Self-Assessment Tool for CMMC:

Automatically and accurately calculates the Supplier Performance Risk System (SPRS) Score
Provides step-by-step guidance on the DoD Self-Assessment process
Supports compliance with CMMC, NIST SP 800-171, DFARS, JCP
Implements the required DoD Assessment Methodology
Captures the status of compliance with each security control
Shows data visualization with charts and graphs
Has the following additional features:
- Auto-highlighting of inconsistencies and common mistakes
- Status of Plan of Action & Milestones (POA&M) for each control
- Tracking of assessment results

Your SPRS Score Is the Starting Point, Not the Finish Line

Beginning November 10, 2026, Phase 2 of the CMMC Program allows DoD to include CMMC Level 2 certification assessment requirements in applicable solicitations and contracts. Not every contract will require certification on day one. The requirement applies as it appears in your specific contracts, so the right move now is knowing where you stand.

If your work involves CUI, this self-assessment is your baseline: it shows exactly how close you are to the 110 requirements an independent C3PAO will evaluate. Peerless knows that process firsthand. Peerless is CMMC Level 2 certified. We help DoD contractors move from self-assessed to assessment-ready with NIST SP 800-171 gap assessments, remediation, documentation, and managed IT and security services built for the Defense Industrial Base.

Talk to a CMMC Level 2 Certified MSP →