Check your SPRS score against the controls that move it most
Your SPRS score is the number the DoD sees when it decides whether you are eligible for a contract that carries a CMMC requirement. Most contractors submitted theirs once and have not looked at it since. The fastest way to know if it still holds up is to recompute it against the controls that carry the most weight.
How the SPRS score works
The NIST 800-171 score starts at 110 and subtracts points for every control you do not meet, weighted 5, 3, or 1 under the DoD Assessment Methodology. Miss enough high-weight controls and the number goes negative, all the way to a floor of -203. That is why two contractors with the same number of open gaps can have very different scores: it depends entirely on which controls are open.
Why the number on file may be wrong
A self-attested SPRS score is a snapshot of a single moment. It does not update when a configuration drifts, when the person who set up MFA leaves, or when a new cloud tool quietly enters scope. The gap between the score on file and the score an assessor would compute today is usually the whole story, and it surfaces at the worst time, when a Phase 2 solicitation asks for current evidence.
Check yours in 2 minutes
The gap check asks 10 questions about the controls that move the score most and returns your likely exposure instantly. It is a directional self-assessment, not an official SPRS score, and it is clearly labeled as such. Because it covers the highest-weight controls and your own answers, a full 110-control assessment can only land lower, never higher, which makes it a safe, conservative read before assessment day.
Check your SPRS score free
The free gap check gives you a directional read in 2 minutes. The $799 CMMC Readiness Snapshot analyzes all 110 controls against your environment and returns a directional estimate from your read-only cloud evidence, with the evidence behind every finding, PDF in minutes.
Common questions
What is a good SPRS score?
The maximum is 110, which means every control is met. The floor is -203. For a Level 2 C3PAO assessment the bar is meeting the controls themselves, so the practical goal is a score at or near 110 backed by evidence, not just a number on file.
Can my SPRS score be negative?
Yes. The score starts at 110 and subtracts 5, 3, or 1 points per unmet control, down to a floor of -203. Environments that have never been hardened against NIST 800-171 commonly compute negative on first real measurement.
Is this check an official SPRS score?
No. The free gap check is a directional self-assessment built from your own answers, clearly labeled as such. Your official score is the one you submit to the DoD's Supplier Performance Risk System. The gap check tells you whether that number is likely to survive measurement.
Enclave AI™ builds AI-driven CMMC Level 1 and Level 2 readiness software. We are not a C3PAO and we will not seek C3PAO authorization, that separation is permanent. The free gap check is a directional self-assessment and is not an official SPRS score, not a C3PAO pre-assessment, and not a measurement of your systems. Patent Pending. ElasticD3M, LLC, Texas.