Apps for compliance practitioners.
Reference and productivity apps for cleared-industry compliance work: DFARS, NIST 800-171, CMMC, FedRAMP, SCIF accreditation. Web canonical versions live here; iOS, macOS, and Windows native apps published under Fortinetics LLC follow.
DFARS Clause Reference
Practitioner reference for the seven DFARS cybersecurity clauses and solicitation provisions defense contractors live with: 252.204-7008, -7009, -7012, -7019, -7020, -7021, and -7025. Plain-language interpretation, key requirements, decision rules, NIST 800-171/172 and CMMC L2/L3 cross-walks, and recent FCA enforcement case history.
NIST 800-171 Reference
Reference for all 110 NIST SP 800-171 Rev 2 controls, the technical substance of CMMC Level 2 and every SPRS self-assessment score. Verbatim requirement text, NIST discussion, SPRS point weights (DoD Assessment Methodology), CMMC Level 2 practice mapping, and the 800-171A assessment objectives a C3PAO grades against.
CMMC SPRS Score Calculator
Work through all 110 NIST 800-171 Rev 2 controls and get a live SPRS score against the DoD Assessment Methodology. Mark each control met, not met, partial, or N/A; see the score, the POA&M-eligible vs must-fix gap split, and whether a conditional Level 2 certification is on the table. Runs entirely in your browser; nothing is submitted to SPRS or to us.
What's next.
- NIST 800-171 Control Reference — all 110 controls organized by family, with implementation status tracking and cross-walks to CMMC L2, ISO 27001 Annex A. Reuses the DFARS Reference UX shell.
- CMMC SPRS Score Calculator — enter 110-control assessment results, output the SPRS score per DoD Assessment Methodology v1.2.1. Multi-boundary support in Pro. CMMC Phase 2 was suspended on July 13, 2026, but your SPRS score, and the False Claims Act exposure attached to it, are unaffected.
- ICD 705 SCIF Construction Reference — IC Tech Spec sections, acoustic Sound Group reference, FFC documentation prep checklist. Built against IC Tech Specs v1.5.1 (July 26, 2021), the most recent revision we can evidence from a primary source. The tool will name the revision it covers: which Tech Spec governs a given facility is an Accrediting Official call, and RF protection is a CTTA determination rather than a fixed target.