Free Readiness Tools
Sixteen self-assessment tools for defense contractors and SaaS teams. Free to use, no signup required. Three of them can email you your results if you ask, and every email includes an unsubscribe link. See the privacy policy for details.
SPRS and CMMC Readiness
For contractors working toward NIST SP 800-171 compliance, an SPRS score, and CMMC readiness.
SPRS Score Calculator
Answer the 110 NIST SP 800-171 controls and get your projected SPRS score in about a minute.
Open the toolOpen source (MIT)
POA&M Generator
Turn open gaps into a dated Plan of Action and Milestones your team can actually work.
Open the toolOpen source (MIT)
SSP Skeleton
A System Security Plan outline mapped to all 110 controls. Fill in your environment.
Open the toolOpen source (MIT)
Evidence Checklist
See what proof an assessor expects for each control family before they ask.
Open the toolOpen source (MIT)
DFARS Clause Decoder
Plain-English translations of 7012, 7019, 7020 and the clauses that trip up small contractors.
Open the toolOpen source (MIT)
Incident Checklist
The 72-hour DFARS reporting clock, step by step, so nothing gets missed.
Open the toolOpen source (MIT)
Flowdown Kit
Push the right cybersecurity clauses to subcontractors without the legalese.
Open the toolOpen source (MIT)
FCA Tracker
Cyber False Claims Act enforcement cases, tracked and summarized as they land.
Open the toolOpen source (MIT)
SOC 2 Readiness
For SaaS teams preparing for a SOC 2 audit or tightening their security program.
SOC 2 Readiness Calculator
Score your readiness across the Trust Services Criteria and find the gaps early.
Open the toolOpen source (MIT)
SOC 2 Remediation Planner
Sequence your gaps the way auditors read them, highest risk first.
Open the toolOpen source (MIT)
TSC Decoder
A plain-English guide to the AICPA Trust Services Criteria.
Open the toolOpen source (MIT)
System Description Builder
Draft the system description your auditor asks for first.
Open the toolOpen source (MIT)
Evidence Checklist
Map your proof to each criterion before the walkthrough starts.
Open the toolOpen source (MIT)
Incident Checklist
Run a clean incident response your auditor can follow end to end.
Open the toolOpen source (MIT)
Vendor Tracker
Track subservice organizations and complementary controls in one place.
Open the toolOpen source (MIT)
Breach Tracker
Log breach notifications and keep the response organized.
Open the toolOpen source (MIT)
Federal IDR
For provider-side teams working No Surprises Act independent dispute resolution.
IDR Deadline Calculator
Enter one date and get every federal IDR deadline: open negotiation, initiation, entity selection, offers, determination, payment, and cooling-off.
Open the toolQPA Estimator
Compare your offer against the qualifying payment amount and published federal IDR benchmarks like the 3.9x median award multiple.
Open the toolWant the fixes installed, not just scored?
The tools tell you where you stand. The SPRS Readiness Sprint installs the operating system in one day: we map your controls, assess your projected score, prioritize the gaps, and set the sustainment rhythm your team runs Monday morning.
Sixteen free self-assessment tools for SPRS, CMMC, and SOC 2 readiness from AI Tech Pros.