Tools › Government & Defense

SPRS Score Coach

Your SPRS score, your SSP and your POA&M — from one assessment.

What you get

All 110 controls in 14 families with their 1/3/5-point values and the two partial-credit cases (MFA, FIPS crypto), scored exactly as DoD does: 110 down to −203
Dashboard: score gauge, points lost by family, posting-readiness checklist, 3-year score currency (DFARS 252.204-7019) and CMMC affirmation dates
CMMC Level 2 conditional-status check against 32 CFR 170.21 (80% threshold, POA&M-eligible items, never-on-POA&M controls, 180-day closeout)
Implementation statements per control become your System Security Plan draft — export Markdown or print
POA&M table with milestones, owners and target dates — CSV and Markdown
Score history snapshots, CSV import from a spreadsheet assessment, one-page summary for a prime's flow-down request
Plain-English glossary: SPRS, SSP, POA&M, DFARS 7012/7019/7020/7021 and where CMMC stands after the July 2026 Phase II suspension

Plans

$1,290/yr

Billed yearly

✓ Cancel any time from your account✓ 14-day money-back on your first payment✓ Secure checkout by Stripe

Buying more than one app? A pass is cheaper:

Contractor Pass — 4 apps for $1,490/yr. SPRS Score Coach and Downselect alone are $2,080/yr. See what it covers →
Foundry Pass — 6 apps for $1,790/yr. SPRS Score Coach and Downselect alone are $2,080/yr. See what it covers →

Questions

Does this replace an assessor?

It replaces the spreadsheet. A Basic (self) assessment is yours to perform and post in SPRS; the app makes the arithmetic exact and the paperwork consistent. It does not perform an 800-171A assessment for you.

Is the CMMC information current?

Rules and dates were verified on 2026-09-15 and are dated inside the app. The DoD suspended CMMC Phase II on July 13, 2026; Phase I self-assessments, NIST 800-171, DFARS 7012/7019/7020 and SPRS posting remain in force.

Where does my data go?

Nowhere. The app runs entirely in your browser; your profile and work are stored on your device and travel as JSON files you export. Nothing is uploaded, nothing is used for training. Public solicitations only — the app refuses text carrying CUI markings.

Why is it sold by the year?

Because the work is annual. The assessment, the System Security Plan and the POA&M are a yearly cycle, and the POA&M closeout runs through it. Pricing it by the year means the app is there for the whole cycle, including the reassessment, rather than something you subscribe to for a fortnight and lose.

Can I cancel?

Any time from your account page, in two clicks — your access then runs to the end of the year you have paid for. First payment not what you expected? Email us within 14 days for a full refund.

How subscriptions work here

You pay through Stripe; we never see your card. Your subscription renews automatically each period until you cancel, which you can do any time from your account page — no calls, no retention offers. First payment not what you expected? Email support@sigmafoundry.io within 14 days for a full refund.