Know Your CMMC Score Before You Submit to SPRS

Objective-level assessment, correct partial credit, POA&M tracking, and SPRS-ready exports — the CMMC prep depth most calculators skip, for contractors who need more than a number.

Start free assessment Sign in →

No credit card required · Prep tool only · Not an official SPRS submission

SentryNexus Level 2 scoring dashboard: a 110 of 110 CMMC L2 Final Self-Assessment with zero points lost and no disqualifying gaps — Example dashboard — your live SPRS score, CMMC status, validity window, and POA&M-eligible vs disqualifying gap split.

110

NIST SP 800-171 Rev 2 requirements

319

SP 800-171A assessment objectives

v1.2.1

DoD Assessment Methodology

How it works

Step 1

Define your scope

Categorize assets per 32 CFR 170.19 — scope determines which requirements apply.

Step 2

Assess at the objective level

Work through all 319 SP 800-171A objectives with correct partial credit for 3.5.3 and 3.13.11.

Step 3

Get your score & exports

See your score, CMMC status, and POA&M-eligible gaps, then prepare your SPRS entry — with full record exports on Assess.

See it in action

Assess at the objective level, see your real score and status with the POA&M-eligible vs disqualifying gap split, then work a prioritized, source-cited remediation plan.

Objective-level assessment for AC.L2-3.1.1: each SP 800-171A determination statement [a]–[f] marked Met, Not Met, or N/A, with operational POA&M capture. — Objective-level assessmentEvery requirement broken into its SP 800-171A objectives, with the correct roll-up to a Met / Not Met finding.

Remediation guidance panel for AC.L2-3.1.1: POA&M-eligibility, point value, category, suggested owner, recommended next action, and evidence artifacts. — Guided remediationPoint impact, POA&M-eligibility, a suggested owner, and a recommended next action for every gap.

Remediation Roadmap grouped by category, highest impact first: Data Protection & Encryption (Must fix, −3 pts) and Data Loss Prevention (−1 pt), each with a suggested provider type. — A prioritized remediation roadmapGaps grouped by category, highest-impact first — with point impact and the kind of provider that can help. Advisory only; it never changes your score.

Why not just a free calculator?

A number isn't a self-assessment. Getting the regulatory details right is what holds up when it matters.

Feature	Free calculators	SentryNexus	Enterprise GRC
NIST 800-171 score			$$$
Correct partial credit (3.5.3 / 3.13.11)	?		$$$
32 CFR 170.21 POA&M eligibility			$$$
Objective-level assessment (319 objectives)			$$$
Save & resume · CAGE & scope			$$$
SPRS entry helper
POA&M tracker · remediation intelligence + plan		Assess	$$$
Evidence capture (per objective)		Assess	$$$
Full assessment record export (PDF)		Assess	$$$
Prime→sub flow-down share link (32 CFR 170.23)		Assess
NIST 800-171 Rev 3 readiness track		Assess	$$$
Email reaffirmation reminders		Assess	$$$
SSP · SRM · C3PAO Evidence Workbook		Secure	$$$
Policy templates · assessment history		Secure	$$$
Team collaboration (up to 10)		Secure	$$$
Create additional organizations (Advance — up to 10)		Advance	$$$
Nexus command center · white-label exports		Advance	$$$
Featured marketplace listing		Advance
Cost	Free	Free · Assess · Secure · Advance	$$$$

See exactly why a free calculator's number can be wrong →

Free · Assess $199/yr · Secure $799/yr · Advance $1,999/yr. See full plans & pricing →

CMMC levels

Level 1 — Foundational

Protects FCI. 15 basic safeguarding practices (FAR 52.204-21), yes/no self-assessment.

Level 2 — Advanced

Protects CUI. 110 NIST SP 800-171 Rev 2 requirements, objective-level self-assessment with a calculated SPRS score.

Level 3 — Expert

Adds 24 NIST SP 800-172 enhanced requirements on top of Level 2. Government-led (DIBCAC).

Get started

Free tools & resources

No account needed — use them right now.

Control Mapper800-171 ↔ CMMC cross-walk for all 110 requirementsOpen →DFARS ReferenceKey DFARS/FAR clauses, obligations, and effective datesOpen →CUI ChecklistDo you handle CUI? Find your required CMMC levelOpen →Incident Timer72-hour DFARS cyber-incident reporting countdownOpen →Timeline CalculatorWhen do you need to comply? Map your CMMC timelineOpen →Compliance DeadlinesThe Phase 1–4 CMMC rollout, explainedOpen →

Ready to know your score?

Scored against the NIST SP 800-171 Rev 2 DoD Assessment Methodology v1.2.1 with 32 CFR Part 170 thresholds. Baseline 110; 110 is a Final self-assessment, 88–109 is Conditional.

Start free assessment