Data & methodology

Where the data comes from, and how we score it

All data comes from official U.S. government sources. We don’t scrape websites, buy consumer data, or include Dun & Bradstreet data.

Sources

Source	What we take	Notes
USAspending.gov award search (v2)U.S. Treasury	New DoD prime contract awards (types A–D): recipient name, UEI, registered address, amount, dates, awarding component, NAICS, PSC.	Public federal data. DoD records publish about 90 days late. D&B-derived fields are never requested or stored.
USAspending.gov recipient typeU.S. Treasury	Small-business flag.	Same terms as above.
USAspending.gov award historyU.S. Treasury	Used internally to count each company’s DoD prime awards in the prior 3 years. Drives the New-to-DoD flag.	“Unknown” means the lookback didn’t run or the UEI was missing.

Lead score (0–100)

The score is the sum of five components minus an incumbent penalty. In the July 20–26, 2026 week, scores ranged from 0 (median 38) to 86.

Lead score components
Component	Points	What it measures
Award size	Up to 35	35 × log₁₀(total new award value) ÷ 8, capped at 35 (reached at $100M). Log scale, so one huge award doesn’t drown out everything else.
Recency	Up to 10	10 points if the latest award is dated the week’s Sunday, minus 10/7 of a point for each day earlier.
Small business	20	At least one of the week’s awards went to a recipient USAspending lists as a small business.
New to DoD	20	No DoD prime award in the prior 3 years.
CMMC tier	15 / 7 / 0	Likely 15, Possible 7, Unclear 0. A company takes the highest tier among its awards that week.
Incumbent penalty	0 to −20	Minus 5 × log₁₀(1 + DoD prime awards in the prior 3 years), capped at 20: 10 prior awards → −5, 100 → −10, 1,000 → −15.
Total	0–100	Sum of the components above, rounded and floored at 0.

CMMC likelihood (inferred)

Likely433 companies
The award’s NAICS or PSC code is on our CUI-associated list (for example aerospace and machinery manufacturing, electronics and instruments, engineering, computer systems design, R&D and IT) and the award is $25,000 or more. CMMC requirements may apply.
Possible370 companies
CUI-associated work under $25,000, other work of $25,000 or more, or low-signal work (medical, food, fuel, leases, facilities, transport) of $250,000 or more. FCI-level CMMC may apply.
Unclear178 companies
Low-signal work under $250,000, or other work under $25,000.

Counts are from the July 20–26, 2026 week. Flags are inferred from NAICS, PSC and dollar size only. A company’s actual CMMC status isn’t public, and the feed never claims to know it.

Quality checks before every release

Each weekly run is checked automatically. If any check fails, the week is not published. If USAspending stops returning a field we request, the run stops with an error instead of skipping it.

Week over week: company and award counts are non-zero and within ±50% of the previous week, and no state that had rows last week drops to zero.
No company (UEI) appears twice.
Every row’s state is one of the covered states.
Lead scores are 0–100 and not all identical.
Required fields are filled in: company, UEI, state, award ID, amount, date, CMMC flag and source link.
No DUNS or D&B columns.
CMMC flags are only the three inferred tiers. No column or value claims a company is CMMC certified or compliant.

Known limits

DoD contract data reaches USAspending about 90 days late, so “this week” means the most recent fully published Monday–Sunday week.
Location is the recipient’s registered address, not where the work happens.
Award amount is the obligated amount reported to date. Modifications can change it.
Prime awards only. Subcontracts aren’t included.

Not a consumer report (FCRA)

This data is about businesses and comes from public federal records. It is not a consumer report as defined by the Fair Credit Reporting Act, and Flo Media LLC is not a consumer reporting agency. It must not be used to decide anyone’s eligibility for credit, insurance, employment, housing, or any other FCRA-covered purpose.