Pass muster before DoD makes you.
For defense contractors & subcontractors · CMMC Level 2
Know your real SPRS score, and get assessor-ready in days. Not four months and $40,000 later.
A guided walkthrough asks plain-English questions about your shop — no CMMC background needed. See your real SPRS score free in about five minutes, then Muster drafts six assessor-ready documents — SSP, POA&M, CUI scoping memo, responsibility matrix, SPRS submission, and a per-objective pre-assessment report — from your own answers. Nothing you enter leaves your browser.
DoD suspended CMMC Phase 2 (third-party assessment) pending a 60-day review.
Your NIST 800-171 self-assessment and SPRS score still apply (DFARS 7012/7021), and primes still set their own deadlines. A wrong self-assessed score is a False Claims Act risk — so knowing your real number still matters.
The stakes
Phase 2 is paused. The self-assessment — and the liability — are not.
DoD suspended CMMC Phase 2 (third-party assessment) pending a 60-day review — but the 800-171 self-assessment and SPRS score still apply (DFARS 7012/7021)
What changed, and what still applies →still requires you to implement NIST SP 800-171 and keep a current SPRS score — unaffected by the Phase 2 pause
FCA settlement over one inflated self-assessed SPRS score (LOGZONE) — a wrong number is real legal exposure
what readiness consultants charge for the documentation we draft in days
Start here
What's an SPRS score, and why do primes keep asking?
Your Supplier Performance Risk System score (-203 to 110) is how DoD tracks your NIST SP 800-171 self-assessment. Contracting officers check it, and primes are required to confirm their subs have a current one, which is why the request keeps landing in your inbox. A wrong score is a False Claims Act risk; a low score is a lost award. Knowing your real number is step one.
Try the free SPRS score calculator →How it works
From "where do we even start?" to assessor-ready
A guided walkthrough, not a blank form
Answer plain-English questions about your environment — no CMMC background needed. The guided walkthrough covers all 110 NIST SP 800-171 requirements and fills the paperwork as you go. You describe your systems; you never enter CUI.
See your real SPRS score
The exact DoD Assessment Methodology math: weighted deductions, partial-credit rules, and which gaps are POA&M-eligible versus must-fix under 32 CFR 170.21.
It drafts six documents for you
From your answers, Muster drafts a System Security Plan, prioritized POA&M, CUI scoping memo, responsibility matrix, SPRS submission walkthrough, and a per-objective pre-assessment report — assessor-formatted, conservatively worded, and QA-reviewed. You review and approve every word.
How it holds up
Built for buyers who are right to be skeptical of slick AI tools
File uploads are disabled by design. Competitors stand up GCC High enclaves to hold your data. With Muster there is no enclave to build.
No CUI, ever
The platform works from your description of how your systems operate, never their contents. File uploads are disabled by design, so nothing controlled leaves your browser to reach us. There is no enclave to build, and nothing of yours for us to lose.
The DoD's own math
We did not invent the scoring. Every deduction follows the published DoD Assessment Methodology, and every generated line traces back to the answer you gave. You can read the audit trail point by point.
You stay in control
What you get are drafts you review, verify, and approve before anything is filed. The judgment stays yours, which is exactly what keeps you on the right side of the False Claims Act.
Honest about what we are
Drafts, not certifications. A team of AI agents does the documentation work — no fake humans, no invented testimonials. When we have real customer results to show, they'll go on this page. Until then, we'd rather you judge the methodology than take our word for it.
Sources we build on, cited openly: DoD Assessment Methodology, 32 CFR 170.21, NIST SP 800-171 Rev 2. We didn't invent the math. DoD did.
Pricing
A fraction of the consultant quote
America's 250th Birthday Sale · ends December 31
Lock in your readiness for less — before the assessor calendars fill
2026 is America’s 250th birthday — 25% off the Sprint and your first year of Platform, through December 31.
- 25% off the Level 2 Readiness Sprint — $4,995 $3,746
- 25% off your first year of the Muster Platform
- Design partners (first 10): 40% off the Sprint at $2,995, in exchange for structured feedback that shapes the roadmap
Pre-pay now to lock your price. Onboarding and document delivery begin at go-live, and every artifact is backed by our 30-day guarantee — a full refund if we don’t deliver the set as described.
Treat the consultant quote as the list price: firms charge $14,000 to $40,000 and make you wait months for these exact documents. One firm publishes $21,200 for the identical gap-assessment + SSP + POA&M bundle. Muster drafts them in days, for a fraction of that.
Muster Score
Know where you stand before anyone asks.
- Instant SPRS score estimate (5-minute quick assessment)
- Full 110-requirement self-assessment mode
- Family-by-family gap breakdown
- POA&M-eligible vs. must-fix gap classification
- Continuous SPRS tracking, in your browser
No card. No call. See your score in 5 minutes.
Muster Platform
$14,000–$40,000 consultant list price
Under $6,000 a year, all in. The same scope hand-done runs $14,000 to $40,000, and it restarts every cycle.
Get assessment-ready — and stay ready. Your SSP and POA&M are drafted up front, then kept current through your assessment and the full 3-year cycle.
- Everything in the Level 2 Readiness Sprint, included and done with you in the first 30 days
- Draft SSP & prioritized POA&M (32 CFR 170.21 analysis), every artifact compliance-QA reviewed
- CUI scoping memo, calculated SPRS score & submission walkthrough
- Living SSP & POA&M that update as your environment changes
- Continuous SPRS tracking, drift alerts & regulatory-change alerts
- Recertification support across the 3-year cycle
- $799/mo for 51–250 employees · month-to-month available
The Sprint work is included — most contractors choose Platform to stay ready, not just get ready.
Level 2 Readiness Sprint
$21,200 published consultant quote for this bundle
You keep about $16,000, roughly 76% less, and you get it in days.
Just need the documents once, with no subscription? The same assessor-formatted artifact set, drafted in days.
- A plain-English walkthrough of all 320 assessment objectives
- Draft System Security Plan (SSP) built to assessor documentation expectations
- Prioritized POA&M with 32 CFR 170.21 eligibility analysis
- CUI scoping memo and calculated SPRS score
- Compliance-QA review of every artifact before delivery
- SPRS submission walkthrough
- Add Platform anytime to keep these documents living
30-day artifact guarantee · every artifact compliance-QA reviewed before delivery
The Muster Readiness Guarantee
We can't guarantee a federal assessor's decision. No honest vendor can, and anyone who does is selling you something. What we do guarantee is the deliverable: your Sprint produces a complete, assessor-formatted SSP, a POA&M analyzed against 32 CFR 170.21, a CUI scoping memo, and your calculated SPRS score, every one QA-reviewed before it reaches you. If we don't deliver the full set as described, you don't pay: 30 days, full refund, no questions. Built against the published 320 assessment objectives.
Consultants, RPOs & MSPs: white-label the Muster engine from $3,000/yr + $200/client/mo, and eliminate the manual documentation work that bottlenecks your client capacity.
Methodology transparency
We didn't invent the scoring. DoD did.
Every number on your scorecard comes from the published DoD Assessment Methodology: weighted deductions, partial-credit rules, and the 32 CFR 170.21 eligibility test for which gaps can sit on a POA&M. It is the government's own math, applied consistently and shown openly, with an audit trail from each answer to each generated statement.
See exactly how every point is computed →Straight answers
The questions buyers actually ask
Is this legal advice or a certification?
No. Muster drafts compliance documentation from information you provide and computes your score under the published DoD methodology. Certification comes from a C3PAO assessment; attestation is yours. We make you ready for both, faster and far cheaper than hourly consultants.
Do I upload my files or system data?
Never. The platform works from your descriptions of your environment. File uploads are disabled by design, and the rule is simple: describe how your systems work, not what they contain. Basic screens watch for obvious slips, and the design keeps CUI out of the platform entirely.
What is an SPRS score and why does it matter?
The Supplier Performance Risk System score (-203 to 110) is how DoD tracks your NIST SP 800-171 self-assessment. Contracting officers check it, and primes are required to make sure their subs have a current one, which is why they keep asking you for it. A wrong score is a False Claims Act risk; a low score is a lost award, so knowing your real number is step one.
Try the free SPRS score calculator →My consultant quoted $30,000 and a 4-month start date. How are you different?
Consultants hand-write the same artifact types our engine assembles from your structured answers, at $250–400/hour, once you can get on their calendar. We deliver draft documentation in days at a fixed price, with an audit trail of where every statement came from. If you already work with a consultant or RPO, bring them our drafts: documentation hours are usually the bulk of their quote.
Didn’t DoD just suspend CMMC Phase 2?
Yes — on July 13, 2026 DoD suspended the Phase 2 third-party C3PAO assessment (and Phases 3–4) pending a 60-day review. It did not suspend the part that reaches you now: the NIST 800-171 self-assessment and SPRS score under DFARS 252.204-7012/7021 still apply, DoD keeps enforcing them through self-assessment and DIBCAC, and primes still set their own deadlines. A wrong self-assessed score is a False Claims Act risk, so knowing your real number still matters.
What the suspension changes (and what still applies) →Living docs for the full 3-year cycle
Phase 2 paused. Your SPRS score still gates your next award.
Five minutes from now, you'll know your real SPRS score and exactly which gaps stand between you and your next award.