FedRAMP-Compliant Security Vendors

Security vendors are evaluated against FedRAMP when they handle the workflows this framework governs. Currently, 18 vendors in our Security category hold FedRAMP certification and 1 holds it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Security vendors that hold FedRAMP certification

Okta logo

Okta

21/32

Identity and access management platform providing secure authentication, authorization, and single sign-on for enterprises.

FedRAMP High and Moderate authorized

CrowdStrike logo

CrowdStrike

17/32

Cloud-native endpoint protection platform providing threat intelligence, incident response, and cybersecurity solutions.

FedRAMP High authorized

Wiz logo

Wiz

13/32

Cloud-native application protection platform (CNAPP) for cloud security.

High

Splunk logo

Splunk

11/32

Data platform for security, observability, and IT operations (SIEM, log analytics), owned by Cisco.

Moderate and High

Netskope logo

Netskope

11/32

Security service edge (SSE) and cloud security platform (CASB, SWG, ZTNA).

High

Palo Alto Networks logo

Palo Alto Networks

10/32

Cybersecurity platform spanning network security, cloud security, and SOC automation.

Proofpoint logo

Proofpoint

10/32

Email security, threat protection, and data loss prevention platform.

Orca Security logo

Orca Security

10/32

Agentless cloud security platform (CNAPP) for cloud workload and configuration risk.

Moderate

Keeper logo

Keeper

9/32

Password management and privileged access security platform.

SentinelOne logo

SentinelOne

8/32

AI-powered endpoint, cloud, and identity security (XDR) platform.

High

KnowBe4 logo

KnowBe4

8/32

Security awareness training and simulated phishing platform.

Moderate ATO since Nov 2023

Snyk logo

Snyk

7/32

Developer security platform for finding and fixing vulnerabilities in code, containers, and cloud infrastructure.

FedRAMP Rev. 5

Rapid7 logo

Rapid7

7/32

Vulnerability management, detection, and response (SIEM/XDR) security platform.

FedRAMP In Process / Authorization achieved for InsightGovCloud specifically, per separate press releases

Tenable logo

Tenable

6/32

Exposure management and vulnerability management platform.

Tenable One VM and Web App Scanning, since 2021

Trend Micro logo

Trend Micro

6/32

Cybersecurity platform for endpoint, cloud, and network security.

Trend Cloud One / Vision One for Government

Ivanti logo

Ivanti

4/32

IT and unified endpoint management, security, and service management software.

Veracode logo

Veracode

3/32

Application security testing platform (SAST, DAST, SCA).

Keeper Security logo

Keeper Security

2/32

Password manager and privileged access management platform for enterprises.

High Authorization

Cisco Duo logo

Cisco Duo

1/32

Multi-factor authentication (MFA) and zero-trust access security platform from Cisco.

FedRAMP Authorized, FIPS-compliant via DHS CDM program

These security vendors do not currently hold FedRAMP certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026