FREE SPRS Scoring Tool and DoD Self-Assessment

We're offering this free, easy-to-use, and comprehensive tool to help you accurately calculate your SPRS Score and meet the DoD Self-Assessment reporting requirements now enforced under Phase 1 of the CMMC Final Rule (48 CFR), which took effect on November 10, 2025.

As a DoD contractor, subcontractor, vendor, or supplier, you may be required to conduct a NIST SP 800-171 DoD Self-Assessment and report your resulting SPRS Score in the Supplier Performance Risk System (SPRS) in order to remain eligible for contracts, task orders, and delivery orders that include DFARS 252.204-7012, 7019 (Retired), 7020 (Renumbered DFARS 252.240-7997), or 7021 clauses. When you submit your score, a senior company official must also submit an affirmation of compliance in SPRS.

These requirements are now actively enforced across the Defense Industrial Base and apply to organizations that handle Federal Contract Information (FCI), as well as those that access, process, or store Controlled Unclassified Information (CUI). Many contractors also encounter these requirements when applying for the Joint Certification Program (JCP) through DD Form 2345, which requires documentation of a NIST SP 800-171 self-assessment and an SPRS score.

The FREE Peerless DoD SPRS Scoring and Self-Assessment Tool for CMMC:

Automatically and accurately calculates the Supplier Performance Risk System (SPRS) Score
Provides step-by-step guidance on the DoD Self-Assessment process
Supports compliance with CMMC, NIST SP 800-171, DFARS, JCP
Implements the required DoD Assessment Methodology
Captures the status of compliance with each security control
Shows data visualization with charts and graphs
Has the following additional features:
- Auto-highlighting of inconsistencies and common mistakes
- Status of Plan of Action & Milestones (POA&M) for each control
- Tracking of assessment results

Your SPRS Score Is the Starting Point, Not the Finish Line

On July 13, 2026, the Department of War suspended CMMC Phase 2 requirements, including the planned November 10, 2026 start of third-party certification assessments, pending a 60-day program review. What didn't change matters more: Phase 1 self-assessment requirements, SPRS score submissions, senior-official affirmations of compliance, and DFARS obligations to protect Federal Contract Information and CUI all remain fully in force. Right now, your self-assessment is your compliance posture, and it carries your company's signature.

If your work involves CUI, this tool shows exactly where you stand against the 110 NIST SP 800-171 requirements your affirmation attests to. An accurate score has never mattered more. Peerless knows these requirements firsthand: Peerless is CMMC Level 2 certified, achieved by choice, not by mandate. We help DoD contractors self-assess accurately and build environments that hold up with NIST SP 800-171 gap assessments, remediation, documentation, and managed IT and security services built for the Defense Industrial Base.

Talk to a CMMC Level 2 Certified MSP →