Free Cybersecurity Tools
For Defense Contractors and Small Practices
Score your National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 posture, check Cybersecurity Maturity Model Certification (CMMC) Level 1, review Health Insurance Portability and Accountability Act (HIPAA) safeguards, and decode your contract clauses. Results appear in your browser instantly, with no sign-up.
Self-Service Tools
These tools follow the Department of Defense (DoD) scoring method, the Federal Acquisition Regulation (FAR), the Defense Federal Acquisition Regulation Supplement (DFARS), and the HIPAA Security Rule, with requirements quoted from their official sources. The SPRS Score Estimator calculates the summary score contractors post in the Supplier Performance Risk System (SPRS). Every tool lets you print or save your results as a PDF.
SPRS Score Estimator
Rate the 110 NIST SP 800-171 requirements and see the score the DoD scoring method produces, with your gaps ranked by point value.
Open ToolCMMC Level 1 Checklist
Check your systems against the 15 basic safeguarding requirements in FAR 52.204-21, the standard for CMMC Level 1.
Open ToolHIPAA Security Risk Quick Check
Answer 21 questions on HIPAA Security Rule safeguards and see where your practice stands.
Open ToolHIPAA Evidence Binder
A free guide to the records that support your practice's work under the HIPAA Security Rule, with a starter tracker in Excel. Enter your email to download.
Get the GuideContract Clause Checker
Select the cybersecurity clauses in your contract and see what each one requires, in plain language.
Open ToolFree Assessments
Prefer a personal review? These assessments are read by Thabiti, who replies within one business day.
Cybersecurity Risk Assessment
Twenty questions across access, network, data, endpoint, and compliance, with an instant risk rating.
StartCMMC Readiness Self-Assessment
Tell us where your firm stands on CMMC and receive a tailored next-step plan within one business day.
StartHIPAA Practice Scoping
Describe your practice and receive a scoped plan for a HIPAA Security Rule risk analysis.
StartWant a Second Set of Eyes?
The tools show where you stand. If you want help closing the gaps, start with a free consultation.