I built an open-source tool to make moving toward NIST SP 800-171 Rev-3 (and CMMC readiness) less painful. The app walks you through each control family, lets you mark implemented/non-implemented/partial, provide evidence, and then generates a ready-to-use Markdown SSP and a POAM CSV for unimplemented requirements.

Everything is stored client-side using IndexedDB, so your assessment data stays in your browser unless you explicitly export or import it. No 3rd party trackers / analytics / servers. It's all a statically rendered web application with offline support (PWA).

Code is at: https://github.com/JAKTOOL/cmmc