CMMC Contract Radar

About and methodology

CMMC Contract Radar is an independent tracker of open Department of Defense solicitations that carry a Cybersecurity Maturity Model Certification (CMMC) requirement.

Where the data comes from

Every day the site downloads SAM.gov's public Contract Opportunities bulk extract (ContractOpportunitiesFullCSV.csv, about 200 MB), which GSA publishes for anyone to use without an API key. The file lists active notices with their metadata and the notice description text.

How a notice gets listed

CMMC level

When the description states a level, such as "CMMC Level 2 (Self)" or a filled-in 252.204-7025 level field, we record it. If several levels are mentioned, the highest is shown and the others are noted on the entry page. Many notices cite the clause without stating a level in the description (the level is often in the attachments), and those are labeled Level not stated; we never guess.

What "open" means

A notice is open while it is in SAM.gov's active feed and its response date has not passed, or no response date is listed. Notices that say CMMC is not required are excluded from the open list. Entry pages stay online after a notice closes.

Limitations

Freshness

Last successful refresh: Oct 18, 2026, 8:27 PM EDT. It scanned 69,781 active SAM.gov notices and matched 1,190 DoD notices with CMMC language (499 currently open).

Contact

Spotted a miss or a mistake? Reply to any digest email once the newsletter launches.

Get the weekly CMMC solicitation digest

New DoD solicitations that require CMMC, grouped by level and agency. Free. One email a week once we launch.