An SBIR/STTR application includes a cybersecurity self-assessment that you, the applicant, attest to and sign. The Cyber Precheck is a free dry-run of that self-assessment: IOnclad verifies a couple of the controls it actually can, from your public deployment, and hands you an honest worklist of everything else. It is a practice worksheet to help you prepare. It is not a submission, and it never tells you that you will pass.
You give it your public URL and answer a short set of yes/no questions about your own practices. IOnclad runs the two checks it can genuinely stand behind against your live deployment, records the rest as your own self-reported answers, and returns a worklist: what looks handled, what is open, and what only you can confirm. There is no score, no grade, and no overall verdict, because a self-assessment is not a test you pass.
The honest split matters. A scanner can only genuinely check things it can observe. Everything else is your attestation, and the tool records it as yours, not as verified.
This is a self-assessment dry-run and practice worksheet. It is not legal, compliance, or professional advice, and it is not affiliated with, endorsed by, or submitted to the Department of Energy or any federal agency. It does not determine, predict, or guarantee whether you pass, comply, or are approved. You are solely responsible for the accuracy of your self-assessment and your application. Nothing IOnclad produces is a submittable artifact.
The value is not a badge. It is walking into the real self-assessment already knowing which answers are solid, which are honestly "not yet," and which two IOnclad could confirm for you from the outside. You fix the easy open items first, you are not surprised by a question at signing time, and you attest with a clearer picture. The worklist is yours to keep and re-run as you close gaps.
Run the free Cyber Precheck in the IOnclad desktop app, then close your worklist before you self-attest.