CMMC Phase 2 deadline: November 2026
Know your CMMC readiness in 30 minutes.
Free NIST 800-171 compliance scanner. Walk through all 110 controls, get an instant gap analysis, and know exactly what to fix before your C3PAO assessment.
How it works
Three steps to know where you stand.
01
Enter Your Details
Tell us about your organization — size, industry, types of CUI you handle.
Takes 60 seconds.
02
Walk Through Controls
Guided questionnaire covers all 110 NIST 800-171 controls across 14 families.
Rate each as Implemented, Partial, Not Implemented, or N/A.
03
Get Your Gap Report
Instant compliance readiness score with per-family breakdown. See exactly
which controls need work and prioritize your remediation.
04
SPRS Score Estimate
Get an estimated SPRS score based on your responses. Know where you'd
stand on DoD's Supplier Performance Risk System before submitting.
The clock is ticking
CMMC 2.0 enforcement timeline
November 2025 (Phase 1)
Self-assessments required pre-award
SPRS score submissions mandatory for all new DoD contracts.
Now (March 2026)
You are here
8 months until mandatory third-party certification.
November 2026 (Phase 2)
C3PAO certification mandatory
Third-party assessment required for all new contracts involving CUI. No cert, no contract.
gatecheck — compliance scanner
$ gatecheck scan --framework nist-800-171
Scanning 110 controls across 14 families...
✓ Access Control (22 controls) ........ 86%
✓ Audit & Accountability (9 controls) .. 100%
⚠ Identification & Auth (11 controls) .. 64%
→ System & Comms Protection (16 controls) .. scanning
✓ Overall readiness: 78% · SPRS estimate: 62
⚠ 24 gaps identified · 8 high priority
Don't guess. Know.
Run your free NIST 800-171 scan now. Know your gaps before your assessor finds them.
Start Free Scan