About SPRS Lab
SPRS Lab exists because there is a wide gap between "official DoD guidance" and "what a 12-person machine shop can actually do on a Tuesday." Most of what fills that gap online is either a sales funnel with a quiz on the front, or generic content written by people who have never scoped a CUI boundary or argued with a firewall at 2 a.m.
Who's behind this
SPRS Lab is run by a practicing IT and cybersecurity professional. I keep my name off the site and let the work speak for itself, but the experience behind these tools is real. I work hands-on with the kind of environments they are built for: Microsoft 365, a firewall, a small stack of servers, and an IT "team" that is one or two people wearing several hats. I am also building CipherReady, a product that helps small contractors run their compliance program after the assessment tells them where they stand.
That is the honest disclosure. These free tools are how I show the quality of my work, and some visitors will join the CipherReady early-access list. Nothing on this site requires it. The tools are complete and free, with no crippled "pro" tier.
Editorial standards
- Primary sources only for rules. Every scoring rule implements the official DoD Assessment Methodology and CFR text, cited on the methodology page. When we summarize, we link to the thing we summarized.
- Written for 10 to 200 person contractors. If advice doesn't work without an enterprise budget, we either say so or don't publish it.
- Dated and maintained. Rules change, so pages carry dates, and when DoD moves we update the page or clearly mark stale content.
- No dark patterns. No email walls in front of results, no fake scarcity, and your assessment answers stay in your browser, where we couldn't read them if we wanted to.
Contact
Corrections, questions, or a control you think we've scored wrong? Emailhello@sprslab.com. Substantive corrections get fixed and credited.