CMMC · NIST SP 800-171 · Free

One assessment becomes
your whole CMMC packet.

Answer the controls once, in plain English — your SPRS score, SSP, and POA&M all build from that single assessment, and save to a free account you can pick up on any device. No consultant, no sales call.

Free and no signup to use — an account just saves your packet across devices.

No credit card, no trial clock Runs in your browser 110 controls in plain English
~80,000Companies need Level 2
110Requirements to document
$10–40kTypical doc-prep consultant fee
$0To start with our tools
The work, made self-serve

Three tools that do the heavy lifting

The score primes ask for, the document assessors open first, and the plan that closes your gaps — all produced by you, in your browser, free.

How it works

From "where do I start" to documented

The foundational work done in an afternoon — on your terms, no consultant in the loop.

1

Score

Run the SPRS calculator to see exactly where you stand and which gaps cost you the most points.

2

Document

Use the SSP generator to turn those requirements into assessor-ready narrative and a POA&M for the gaps.

3

Plan

Turn the gaps into a POA&M — what you'll fix and by when — with the free POA&M generator.

4

Submit

Take your score, SSP, and POA&M into SPRS with confidence — the foundational work done, on your terms.

The finished documents

The free tools draft all 110. The kit finishes them.

The free tools draft all 110 requirements. The Starter Kit is the finished, editable version — plus the 14 policies no tool drafts for you.

  • A 39-page guided playbook — plain-English, control-by-control, first-timer friendly
  • All 14 required policies — branded PDFs + editable Word
  • Your SSP, POA&M and SPRS score report — generated from your own answers, branded and editable, regenerate any time
  • The Cloud Inheritance Matrix starter — what your cloud covers vs. what you own
$99$149One-time · no subscription
See what's inside →

🔒 Instant download · 14-day refund · the knowledge stays free

The knowledge stays free

Built like a library, not a landing page

Every control, every acronym, every deadline — written for the first-timer and kept current as the rules move.

Stay current

Latest CMMC updates

We track the regulatory changes so you don't have to.

Jul 21, 2026

Have your say on CMMC reform. The Department of War opened a public RFI on fixing CMMC — responses due noon ET Aug 14, 2026. Here's exactly how a small contractor submits one. How to respond →

Jul 18, 2026

The SSP Generator now drafts all 110 requirements — every one of the 14 NIST 800-171 families, built from the same assessment as your SPRS score and POA&M. Free, in your browser. Draft your SSP →

Jul 13, 2026

CMMC Phase 2 suspended. The Department of War paused the third-party (C3PAO) certification rollout that was set for Nov 10, 2026 — but your Phase 1 self-assessment, SPRS score, and annual affirmations are still required. What it actually means →

New

Free accounts — save your packet on any device. Create your free account →

Feb 1, 2026

FAR Overhaul (DFARS Part 240): DFARS 252.204-7019 was deleted and 252.204-7020 renumbered to 252.240-7997; FAR 52.204-21 became 52.240-93. SPRS submission still flows through CMMC under 252.204-7021. What changed →

2026

SPRS scoring still runs on NIST SP 800-171 Revision 2 — the Department of War has not moved scoring to Rev 3.

Get started

Score yourself in the next 10 minutes

Run the calculator now, or drop your email and we'll send new tools and the CMMC updates that affect your score — as they land.

🔒 No spam — just new tools and genuinely useful CMMC updates.

The team behind Objective320

Red Diamond Strategic

Strategic advisory, operational excellence, and IT & cybersecurity consulting for government, defense, and private-sector leaders — built on 24+ years of senior, Pentagon-level leadership. Objective320 is our free contribution to the small-contractor community.

Visit Red Diamond Strategic →