SBIR Topic Watch

Open SBIR and STTR topics

361 topics, open or in pre-release, read from DSIP and SBIR.gov on Nov 12, 2026.

274Open now 87Pre-release 10Closing within 7 days 0Released in the last 7 days
All agencies NSF 230NAVY 43USAF 33USDA NIFA 10DTRA 9MDA 9HHS ARPA-H 7ARMY 6OSD 6DARPA 4HHS 3HHS NIH 1
What you can bid on Clear filters
CMMC requirements: Level 1 15Level 2 (Self) 95 what do the levels mean?
Level 1
Basic protection of Federal Contract Information: the 15 requirements of FAR 52.204-21. You assess yourself every year and post the result in SPRS.
Level 2
Protection of Controlled Unclassified Information: the 110 requirements of NIST SP 800-171 Rev. 2. "Self" means you assess yourself every three years; "C3PAO" means an accredited third-party assessor certifies you every three years. Both need a yearly affirmation.
Level 3
Level 2 certification plus 24 selected requirements of NIST SP 800-172, assessed by the government (DIBCAC) every three years.

CMMC is the Defense Department's cybersecurity certification; a topic that lists a level expects it by the time of award. This is a summary: the solicitation and 32 CFR Part 170 govern.

Showing 1 of 1 topic